Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
File: 1-i5yq_exco_aaqCwQT2IVIEuo2E.mft (raw, json)
Hash identifier: yhA2NXDh2KRPWV64Dz1kbgHphhn9bpYa2QfaCLt9sHM=
Subject key identifier: 33:3A:4A:5B:05:BC:58:53:A2:1A:FD:64:0C:1D:D2:79:82:1E:0D:7A
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial: 01A0F0B05CB21B49AE0369C411E14CEC875D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
Manifest number: 1A86
Signing time: Wed 30 Sep 2026 05:01:24 +0000
Manifest this update: Wed 30 Sep 2026 05:01:24 +0000
Manifest next update: Thu 01 Oct 2026 05:01:24 +0000
Files and hashes: 1: 0_t2wQIokLKY2kmf_7_jfNZXtiY.roa (hash: TGSr63wO3aGHJ7YGz4t10QGo266PAEIyzVMQYeVtap4=)
2: 1-i5yq_exco_aaqCwQT2IVIEuo2E.crl (hash: +zh2pEKdTqn/0ZONWf9iPANlt+j2/QAj8yFZF2l69P8=)
3: GXO8Va2YLC7V7aizd3BeOTuhN-4.roa (hash: 0nWtOx7eW6IHu//MDqpxa/7ugR36Yc+2OMdqguEZeBc=)
4: Ku_3wi-krLn5NVfaK-lQlkfIQqM.roa (hash: tzGy6knJKrJ/+Tpse/PLPBsuQdf0mdcEtbCEG7Cfzkg=)
5: MJUSGXNaON5-u4HtTmGH6ZtrgHA.roa (hash: NNdIzpFlr2gfckuz7+ZEQiokzWnQGJIcuKaYbw6MC/U=)
6: jBWcdrxGs1WBnTMg4supmnaZvqw.roa (hash: 4hFJ4SHcnjUVe4H7OnBrjinQ22ICOUAmQmEaGhTqIAY=)
7: qhGEEQ0HGWcbgHqPIorSOb9nl0Q.roa (hash: DggCFNvWeU+DQZNC4vJn2wU5MlmsNXtXoMhViia2938=)
8: zgTpwMBLyKqEkj41ijMrXIxWx5I.roa (hash: bDKZ2scCeLL0RRlntw0B5EPYnDzEWkQl8FShFksXm3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:b0:5c:b2:1b:49:ae:03:69:c4:11:e1:4c:ec:87:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Validity
Not Before: Sep 30 05:01:24 2026 GMT
Not After : Oct 1 05:01:24 2026 GMT
Subject: CN=333a4a5b05bc5853a21afd640c1dd279821e0d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:0f:39:ca:92:d0:e4:22:99:a3:56:cc:e8:
91:ee:70:67:fc:65:f5:36:67:3b:fb:44:d8:b7:53:
0c:7d:7f:dd:66:f1:bf:47:88:53:91:8b:8a:aa:29:
86:56:26:df:0a:3d:28:ea:01:04:0a:a6:56:6f:06:
62:61:f8:f1:f0:03:b9:b9:94:67:90:b3:b4:16:15:
cb:a5:6a:df:56:1b:3b:30:0a:33:31:4d:63:e8:b5:
6f:ab:7e:fb:73:f0:d1:a7:2e:05:0e:b9:ec:de:b2:
00:63:27:da:aa:12:2a:c7:f6:4e:f2:1e:6f:3f:5e:
10:73:61:18:8e:b0:bc:77:c2:e7:7e:21:6e:c7:5e:
54:57:9a:ed:24:62:b4:e8:f9:e2:b8:30:d4:69:7e:
f3:e6:41:c0:9c:54:92:19:13:df:f1:9e:78:f7:44:
98:2b:fe:c2:c1:72:b8:c9:5c:c1:f4:82:b4:0d:b8:
ea:0b:e6:77:d3:3c:77:0a:63:07:24:a3:b5:f3:eb:
29:dc:71:7f:ba:29:b9:62:3c:ce:45:98:8c:91:22:
3b:ae:12:ac:db:a5:13:b3:0e:8f:91:2e:7d:a3:ce:
56:2d:19:6e:8f:f5:0b:d0:b2:b1:bb:94:b7:9c:03:
e7:5e:29:cb:bd:0e:bf:8b:34:1e:57:b7:58:48:a8:
29:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3A:4A:5B:05:BC:58:53:A2:1A:FD:64:0C:1D:D2:79:82:1E:0D:7A
X509v3 Authority Key Identifier:
keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:28:87:e5:aa:6a:36:3c:89:11:07:87:30:20:82:22:69:16:
1f:61:5d:17:c1:25:e6:d9:03:1a:55:cb:c9:e2:50:f9:6d:3d:
e9:ed:0d:f8:93:79:6d:cd:47:5b:e8:87:08:9f:da:2f:7f:8c:
92:0f:8d:48:41:93:72:a0:ca:52:d4:84:8b:10:ad:46:2b:8f:
6e:34:78:e1:a3:b8:30:f1:f1:d8:32:b8:52:44:c7:b1:96:a9:
17:39:22:3e:86:1c:17:26:d6:a4:71:dd:f8:6f:ea:33:ac:09:
b6:d3:a5:0d:a9:be:8e:8d:e5:78:65:fb:e4:37:35:6d:27:02:
de:0f:db:2b:b5:11:0f:bc:7a:b5:c5:77:a1:cb:6f:b7:b7:d7:
e7:08:fd:9b:b9:c6:68:4c:2c:07:6c:58:cf:40:e1:44:2e:66:
17:f1:9d:d0:dc:80:44:de:ea:3e:8b:17:9d:9a:bd:c0:4b:96:
dc:0c:44:9f:95:19:71:01:c2:2b:f0:15:35:2c:70:65:e1:90:
ca:81:ad:d1:6c:bc:28:95:d5:80:b4:da:33:7c:d3:16:4b:a7:
5b:0b:30:19:36:84:6a:b9:a4:b7:41:c5:b1:48:f4:e4:d0:97:
1c:d7:8f:28:ef:77:b1:ff:3b:8a:3c:29:74:f2:71:fe:94:d9:
3b:05:c5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:09:36 2026 by rpki-client