Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
File: 1-lolmC97dHESsP81jz0kpWLPz-w.mft (raw, json)
Hash identifier: 77m1zeVecwv8unBHIPtqfUETnDgdoYNA0R5CNEezMl8=
Subject key identifier: 62:97:9E:07:0C:D8:C2:F5:A1:CE:58:A2:56:90:50:AE:28:6D:A8:40
Authority key identifier: FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC
Certificate issuer: /CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec
Certificate serial: 01A171A59C17D918A8970F7FF9640148A3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
Manifest number: 0369
Signing time: Sun 25 Oct 2026 06:00:41 +0000
Manifest this update: Sun 25 Oct 2026 06:00:41 +0000
Manifest next update: Mon 26 Oct 2026 06:00:41 +0000
Files and hashes: 1: 1-lolmC97dHESsP81jz0kpWLPz-w.crl (hash: W8DJeuZn70NPJMdMQ9nocyqGhk2VmkgccqlaoLPMipQ=)
2: iYN0utCjOjCIPINNJfjhuG0vjOg.roa (hash: 7Wnyb9CGOm4TN0ey7ufrrNiIF/X3LDz9AlFMHrkszjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:a5:9c:17:d9:18:a8:97:0f:7f:f9:64:01:48:a3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec
Validity
Not Before: Oct 25 06:00:41 2026 GMT
Not After : Oct 26 06:00:41 2026 GMT
Subject: CN=62979e070cd8c2f5a1ce58a2569050ae286da840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:a1:55:22:7d:f6:cf:99:d6:fd:d5:a2:5b:
b4:98:b7:76:0a:34:6d:76:c7:69:4a:b1:78:21:8c:
f9:c1:f5:28:fc:af:97:6b:3b:4b:34:9e:c1:c8:08:
1e:92:98:f6:75:db:fc:03:87:3f:1a:8a:3d:2b:a3:
f0:a2:5b:af:28:c8:39:fc:0a:ec:e2:d2:48:7d:5b:
52:77:54:6f:40:50:e8:a9:f3:8c:37:97:63:8a:d5:
6d:78:2c:94:f4:d7:83:dc:9c:f3:35:fd:7f:28:61:
9d:ec:de:54:b3:5d:8f:6c:8c:c5:3a:30:4f:ae:a5:
61:de:8f:ba:32:13:74:39:b6:8c:d7:4b:4d:b1:77:
cf:71:85:30:38:fc:18:b6:45:df:6f:22:76:c0:5d:
fb:4a:99:9a:62:28:2d:a2:29:8f:0a:f4:0c:f8:7d:
5a:46:f1:b6:bc:f4:ec:47:f4:9c:96:c9:30:3e:c1:
dc:65:fa:bf:d4:1c:08:5c:57:41:fa:70:45:1b:c6:
01:00:a2:e9:ae:19:4c:b6:69:c0:b8:f1:b4:87:bd:
20:8c:26:01:f4:83:a2:61:cb:a9:b1:db:c4:fe:5f:
fc:84:95:99:ef:f1:d8:57:16:42:c7:af:8a:15:38:
28:73:28:ff:67:41:93:99:fa:4e:47:c7:92:9d:c1:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:97:9E:07:0C:D8:C2:F5:A1:CE:58:A2:56:90:50:AE:28:6D:A8:40
X509v3 Authority Key Identifier:
keyid:FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:59:e2:75:2a:db:f6:d8:49:85:2a:f6:1c:f2:5d:d7:9f:ca:
75:42:48:bb:ac:8c:9c:09:12:e6:16:42:ba:fc:9b:43:ae:16:
56:23:bb:0f:16:e8:c1:1e:88:6a:87:68:ed:dd:a2:12:0d:b0:
35:38:8b:7b:c3:c6:1f:c8:7f:58:1f:36:07:7e:5e:1d:0d:14:
2c:34:0b:93:02:85:84:81:b9:01:b6:df:15:1c:2c:1a:e7:bf:
09:f7:b8:f9:08:a2:70:c8:0b:e3:b8:34:2e:eb:76:8e:77:8d:
75:e8:1e:25:3c:4b:2b:c4:53:2a:19:f8:ca:d5:2b:39:0f:a7:
fb:5a:f8:9e:67:b0:ab:fb:bc:20:50:8c:70:86:75:52:ce:a5:
ab:1a:4b:86:40:8c:f6:7c:dd:1f:d0:29:ad:76:26:6a:13:3e:
f4:8e:ad:9e:e1:a9:ae:60:c0:8c:11:bd:c8:bc:74:fb:24:c1:
08:82:bd:8e:cc:4a:85:20:ff:55:15:30:9d:38:80:7c:a9:ff:
37:9f:3c:8d:93:98:b2:a4:08:0e:31:46:e2:d0:1c:aa:98:dd:
27:f4:f0:6c:28:90:3f:3a:f6:21:ee:1c:af:ea:6f:94:f1:68:
7c:4f:61:de:b9:90:96:74:0c:18:ed:a9:2d:d5:0d:9b:95:d5:
03:8d:2c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:24:59 2026 by rpki-client