Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier: EaJ7itsN7Lrae/4Vr9WKEWLwTRhVxSYIFJv11uvQotY=
Subject key identifier: B8:EE:6F:F1:AD:17:A0:26:B1:BD:3F:5B:9F:5D:18:91:93:93:FA:4F
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 01A13DEF5FD7C9F29FB5247C634DB9260A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number: 153C
Signing time: Thu 15 Oct 2026 05:01:00 +0000
Manifest this update: Thu 15 Oct 2026 05:01:00 +0000
Manifest next update: Fri 16 Oct 2026 05:01:00 +0000
Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: ep3Rfw6fOnYUrpED99DHofG22VDySLH+WBFdbvTeD80=)
2: q8ALlbE4IIvLhKys6r6M1Hgfxyo.roa (hash: k/Wh/c00eZEFbymGhdaEUynKj87Lx/1rWZSCYQ9Ry88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:5f:d7:c9:f2:9f:b5:24:7c:63:4d:b9:26:0a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: Oct 15 05:01:00 2026 GMT
Not After : Oct 16 05:01:00 2026 GMT
Subject: CN=b8ee6ff1ad17a026b1bd3f5b9f5d18919393fa4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c1:32:c5:f7:7a:17:89:c2:6c:39:c4:67:0e:
1b:01:81:5b:cf:82:4f:9a:39:61:21:56:40:92:07:
9c:10:20:b8:fc:fc:7a:be:7a:29:b8:2f:b7:8c:55:
57:b7:35:cc:eb:81:e9:21:ea:78:b2:c4:73:44:6a:
f9:4d:37:0d:29:57:a4:3b:2f:1b:88:58:d9:53:90:
68:6a:cc:4e:ef:e5:53:f9:7a:bc:9b:1d:20:f3:ba:
93:f1:c9:f7:66:28:b9:05:06:ea:aa:38:e8:44:04:
09:3a:c7:1f:b4:8b:4f:c7:a0:31:26:ad:ae:f8:c1:
e4:46:b2:c5:d8:39:f2:e0:f6:19:56:96:e5:d6:53:
22:43:6c:fc:53:9c:5c:c3:70:78:1a:0f:22:4b:93:
d8:2e:69:30:e1:08:f5:3b:50:bc:20:ad:9d:98:00:
97:25:fa:d2:77:ea:9b:69:a7:2f:ec:70:9c:ac:ac:
39:26:53:2c:4b:ac:fc:e8:b8:db:db:a8:fe:4b:27:
b7:3a:a6:c0:28:88:ae:e7:bd:01:68:f9:44:a0:af:
fe:36:61:34:f6:b6:b8:be:14:09:b5:b9:5d:16:52:
35:8e:50:71:a6:26:3b:ab:5e:0c:77:0c:b6:2c:f9:
22:24:de:0f:3e:8f:52:1a:bf:8b:4c:8b:18:83:6d:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EE:6F:F1:AD:17:A0:26:B1:BD:3F:5B:9F:5D:18:91:93:93:FA:4F
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0f:38:5b:07:41:7a:2b:35:c2:ee:67:9c:56:bd:6e:01:9b:
2c:0e:13:e1:b8:54:3d:9c:51:10:ae:65:93:32:af:47:25:f0:
6b:2e:1d:d3:7d:4c:84:21:07:18:11:a0:59:23:af:33:d3:27:
e1:8b:8e:6a:5e:12:05:2c:a3:ea:6e:8e:fa:45:30:7d:a2:5d:
7d:a2:2d:3d:63:b4:2b:e5:39:13:ab:58:ff:b3:6c:ea:10:6e:
3c:3c:6f:ed:28:bb:12:f0:60:2d:f8:85:69:0c:c5:83:06:df:
82:b1:79:97:9c:92:26:1a:ac:01:0c:f0:36:87:01:e8:79:4b:
35:73:d2:20:be:61:60:15:d1:ad:93:c6:cd:c8:0d:7e:d3:16:
2e:11:91:6b:02:bf:94:74:df:0e:d2:67:1c:ba:7a:ec:a4:35:
bc:c0:27:57:2f:b9:76:61:00:9d:b2:d1:d2:6a:c6:78:1f:3e:
ec:2e:08:c7:60:72:a0:ed:3f:a2:ff:ff:0a:cc:15:38:04:07:
e5:41:1a:9d:ed:4d:bd:53:e2:0b:e0:1d:80:30:48:2a:10:69:
60:fd:88:2e:d9:e6:14:55:38:5b:93:98:fd:29:5b:dd:ae:04:
d6:68:6c:5c:d2:4d:d6:b2:76:1f:d3:38:ab:e2:54:85:7f:cb:
74:66:0c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:38:28 2026 by rpki-client