Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: pyAnD7KKXBwJRtk3ma2qAN15kSeZGt/E/vxpXz0JrrA=
Subject key identifier: A3:2F:79:AD:02:83:8D:53:22:7D:2F:7D:DB:5E:86:58:73:2C:25:C7
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 01A08C7AF5A69B32B9703281A392A79520AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 1A4F
Signing time: Thu 10 Sep 2026 18:01:03 +0000
Manifest this update: Thu 10 Sep 2026 18:01:03 +0000
Manifest next update: Fri 11 Sep 2026 18:01:03 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: z6ZCvEZXTJdP5R7ojRjSydOg4kmg/XACf76Hgn1LR0Y=)
2: TphEoqHx74oTxzeHIHgNhG40Etg.roa (hash: eKwF4mECICMY1eNS1Z8I/zufgWJJE+arH3zmPUlUZ9U=)
3: kOKbG2uwlgUTF9jmaFzt7vMoGYE.roa (hash: XPUsHAjyze1ymKKQjjk6fHKi5djr0xICcWZpDJI1q+M=)
4: m8_a0R-In6zPsMQtCZU7ofRpJV8.roa (hash: 9Klia2LNkTjTOYme1PTO2tY3GfAWev/ji3owResFBFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:f5:a6:9b:32:b9:70:32:81:a3:92:a7:95:20:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Sep 10 18:01:03 2026 GMT
Not After : Sep 11 18:01:03 2026 GMT
Subject: CN=a32f79ad02838d53227d2f7ddb5e8658732c25c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:47:93:e7:34:5a:b5:68:e8:9a:25:d3:9c:ee:
94:cd:0d:f2:1e:0a:ef:21:da:2d:fd:c1:f2:6e:75:
a1:83:1b:ea:02:91:47:7c:9c:3a:6a:c4:18:30:9a:
00:b5:53:0b:a6:d6:c3:6c:9d:71:7b:00:4b:32:33:
a5:1f:e4:58:71:98:4b:d8:15:b2:0f:a1:e9:2d:66:
58:8c:2e:e3:86:7d:45:8f:50:7c:7e:49:e9:66:84:
d2:48:b6:0b:5e:38:3d:c6:eb:b9:05:8c:bf:45:90:
14:9c:af:10:1f:37:d1:35:21:bd:8c:93:d4:89:3a:
0c:2c:03:56:24:cb:61:3b:90:55:9e:60:a5:2e:42:
24:ab:14:81:e0:6c:3f:b1:a6:99:fe:87:fd:d2:ba:
09:51:c8:bc:3d:e1:a3:e8:9a:22:44:b1:e0:9d:e8:
b2:c0:7b:a4:dc:25:3a:df:dc:96:40:02:ee:b1:48:
15:73:1c:cc:71:e3:9a:0f:24:59:33:cd:21:b1:82:
1d:6f:d1:0f:e4:88:f8:08:0b:5e:9e:df:3b:ac:f6:
e5:ba:a3:f8:d5:d3:0b:e6:ea:8b:49:ef:b1:b9:b6:
8d:fb:46:f7:b5:82:c9:ad:e9:f6:30:24:64:c8:ea:
3d:cf:69:b2:da:90:fa:86:72:b5:85:45:4a:b3:1d:
e7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2F:79:AD:02:83:8D:53:22:7D:2F:7D:DB:5E:86:58:73:2C:25:C7
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f2:22:27:ce:24:83:31:c8:5d:9b:0f:5b:ca:e4:9e:ba:a9:
96:8e:99:62:55:7e:fe:9e:30:61:39:66:23:e7:e3:9a:7d:13:
55:fa:df:e1:95:ac:06:24:17:f0:65:bd:61:5e:99:00:d9:f3:
fb:ff:15:0d:00:f6:40:7f:4d:4e:06:1c:42:92:20:32:62:cb:
27:a4:67:88:cf:3f:b1:d9:eb:db:65:77:2b:71:0f:58:c2:1a:
26:1f:14:b8:f1:db:cb:84:0a:fb:75:f1:05:c5:83:0d:6c:08:
14:bb:85:ea:f2:7f:cd:fe:1d:b2:1d:78:e7:99:4e:04:b9:27:
84:53:94:97:1e:0d:22:df:a6:11:5c:4c:fa:54:f0:13:e8:6b:
e4:01:35:c4:9b:98:33:bf:dc:e8:77:fa:1e:20:f0:84:78:6e:
22:bb:02:ae:ca:8f:a0:ee:e6:ea:9c:d8:0c:a7:f1:bb:7c:e9:
09:4a:71:a2:5e:59:bf:42:0a:7a:d8:33:28:4b:71:5c:ba:85:
78:f9:54:1c:14:98:d1:a3:31:3a:3b:0a:5b:b0:f1:77:e8:23:
de:91:55:e3:04:27:61:aa:83:28:3e:83:43:a9:59:e3:95:16:
c6:32:9c:93:b0:2a:93:34:bf:a8:b8:49:80:32:d9:58:5d:80:
6a:53:2b:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMevWmmzK5cDKBo5KnlSCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx
ZGYzOTAwHhcNMjYwOTEwMTgwMTAzWhcNMjYwOTExMTgwMTAzWjAzMTEwLwYDVQQD
EyhhMzJmNzlhZDAyODM4ZDUzMjI3ZDJmN2RkYjVlODY1ODczMmMyNWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikeT5zRatWjomiXTnO6UzQ3yHgrv
Idot/cHybnWhgxvqApFHfJw6asQYMJoAtVMLptbDbJ1xewBLMjOlH+RYcZhL2BWy
D6HpLWZYjC7jhn1Fj1B8fknpZoTSSLYLXjg9xuu5BYy/RZAUnK8QHzfRNSG9jJPU
iToMLANWJMthO5BVnmClLkIkqxSB4Gw/saaZ/of90roJUci8PeGj6JoiRLHgneiy
wHuk3CU639yWQALusUgVcxzMceOaDyRZM80hsYIdb9EP5Ij4CAtent87rPbluqP4
1dML5uqLSe+xubaN+0b3tYLJren2MCRkyOo9z2my2pD6hnK1hUVKsx3nQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMvea0Cg41TIn0vfdtehlhzLCXHMB8GA1UdIwQY
MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt
NmNiZTk0OTUzMmU0LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0
LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/IiJ84k
gzHIXZsPW8rknrqplo6ZYlV+/p4wYTlmI+fjmn0TVfrf4ZWsBiQX8GW9YV6ZANnz
+/8VDQD2QH9NTgYcQpIgMmLLJ6RniM8/sdnr22V3K3EPWMIaJh8UuPHby4QK+3Xx
BcWDDWwIFLuF6vJ/zf4dsh1455lOBLknhFOUlx4NIt+mEVxM+lTwE+hr5AE1xJuY
M7/c6Hf6HiDwhHhuIrsCrsqPoO7m6pzYDKfxu3zpCUpxol5Zv0IKetgzKEtxXLqF
ePlUHBSY0aMxOjsKW7Dxd+gj3pFV4wQnYaqDKD6DQ6lZ45UWxjKck7AqkzS/qLhJ
gDLZWF2AalMrMQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 04:33:16 2026 by rpki-client