Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
File: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json)
Hash identifier: ZF3JDxFtUg7LwQDXigJqTgxGqa4XJxo1X6uH9e5rvM0=
Subject key identifier: AD:B8:29:D2:F2:6E:21:CE:3A:28:42:19:B8:F3:84:FE:DF:05:C9:EC
Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
Certificate issuer: /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Certificate serial: 01A13E949A331FEDDDCB6E520384C5D4D1A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 08:01:28 +0000
Manifest this update: Thu 15 Oct 2026 08:01:28 +0000
Manifest next update: Fri 16 Oct 2026 08:01:28 +0000
Files and hashes: 1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: +8uX8nxJ3n2GWDb4+X7I89SNCIuyS1wWzxdPuUk/56E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:9a:33:1f:ed:dd:cb:6e:52:03:84:c5:d4:d1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Validity
Not Before: Oct 15 08:01:28 2026 GMT
Not After : Oct 16 08:01:28 2026 GMT
Subject: CN=adb829d2f26e21ce3a284219b8f384fedf05c9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f3:21:09:e0:ce:9e:32:19:f1:67:fd:db:29:
85:1b:94:49:b5:be:21:0f:66:f1:42:8f:a6:d6:00:
7e:25:90:b2:2f:45:a9:59:e5:07:73:f5:be:5c:de:
30:95:c0:c9:37:fd:21:f7:44:53:78:a2:22:7c:b9:
84:f3:9b:47:b1:46:46:ee:1c:b4:9a:c9:51:66:06:
4c:a5:81:86:cf:f8:56:d1:02:73:4b:55:61:a1:de:
09:7e:95:fa:f6:2c:f0:a2:3b:5f:8a:7b:fd:29:95:
2f:4b:5f:e6:3b:a8:41:3f:f2:34:7a:e3:fb:25:34:
ef:e2:71:64:cf:0a:bd:d1:d1:62:8b:14:bf:4a:5b:
0c:31:04:96:17:6b:5c:b6:36:da:5e:90:ea:11:44:
d0:fa:ac:7f:0a:e6:0d:7b:c7:8e:aa:de:a3:34:c4:
f7:1f:6b:b5:b4:08:0b:78:e8:77:e8:16:7b:bd:a8:
06:fa:a9:0f:bf:c3:3c:ce:1c:37:3b:cb:9d:4c:b6:
d7:96:3f:be:d4:3d:3b:c5:25:36:83:b9:35:70:ff:
95:46:9e:43:3f:31:11:84:56:fc:83:76:a1:16:e5:
cd:40:a8:ba:d6:f3:32:d7:c2:0e:a0:a9:8c:59:03:
26:0c:de:e6:62:ff:0f:82:bd:d7:9b:b7:c7:89:42:
4b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B8:29:D2:F2:6E:21:CE:3A:28:42:19:B8:F3:84:FE:DF:05:C9:EC
X509v3 Authority Key Identifier:
keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1a:75:32:eb:6e:a9:b5:4f:98:d6:4f:2c:08:13:61:59:1d:
00:be:7d:4e:84:15:ab:2c:56:d6:29:88:92:02:b7:cf:7c:b6:
a6:98:5a:7e:13:3f:06:81:19:4a:01:89:fa:5e:09:8f:57:87:
12:0a:a4:04:2a:ed:fb:1c:0f:1c:26:bf:bd:c9:00:93:82:aa:
ee:8d:6e:c1:86:aa:df:9d:fd:a5:16:2c:64:58:0e:13:4f:9e:
4c:50:c3:33:f7:17:66:01:de:3f:67:58:72:99:b9:99:8a:2c:
7a:78:ae:23:93:8b:36:f3:6e:3e:f1:8e:5e:fc:2c:e0:e4:9f:
1b:4a:58:52:b8:60:b9:36:f6:9c:ae:fe:7f:5b:ec:e1:1b:c3:
03:85:b0:b6:91:d3:72:bc:ad:4d:b6:c9:c1:28:fa:3f:d8:53:
f5:15:93:d9:06:99:76:52:3b:bc:15:16:7f:66:e8:ed:76:d1:
de:dc:c1:a4:4a:ea:a8:80:53:ed:92:bf:88:8e:eb:3d:0d:03:
ef:bc:11:01:69:2e:14:68:52:1f:c5:76:d6:27:91:78:61:c6:
14:25:f7:6f:35:df:1e:a5:63:d9:a8:ff:20:b6:87:35:53:a5:
60:75:03:00:a4:2f:41:87:a1:e5:7f:7b:cd:07:95:d8:24:29:
a3:6a:80:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:25:41 2026 by rpki-client