Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: WqDfwjQ+FoYJGJ/NCKd4VYPA8SxMVFhGHTwKkaKwdZU=
Subject key identifier: C9:13:F3:8F:71:94:C9:8B:B6:69:43:DD:6B:BF:02:90:AF:DC:B7:F0
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 01A00137F3932E9D7C648A8C4C6AA67BA5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 17:00:39 +0000
Manifest this update: Fri 14 Aug 2026 17:00:39 +0000
Manifest next update: Sat 15 Aug 2026 17:00:39 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: nnBzzMF6VDf4diEThojI17yEFwd4GEszVJvRowka/Jk=)
2: PnyApWhBqSkH1XcSr9pQIjfA9bU.roa (hash: u2tVorDg0eTkm07sz5ei+r+s3xcbReWf672n/fbZuG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:37:f3:93:2e:9d:7c:64:8a:8c:4c:6a:a6:7b:a5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Aug 14 17:00:39 2026 GMT
Not After : Aug 15 17:00:39 2026 GMT
Subject: CN=c913f38f7194c98bb66943dd6bbf0290afdcb7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:98:be:02:46:b8:bc:3a:7a:b2:2d:ed:b9:
99:87:41:c0:95:00:29:4c:6d:f9:bd:fb:e3:28:dd:
cc:04:36:1c:52:44:90:f7:f3:6c:64:87:5f:0a:37:
03:2a:02:86:5b:88:47:9d:68:22:f0:57:66:47:b4:
48:3a:77:16:19:89:07:27:7d:11:12:ac:6c:cd:a1:
bd:e2:cf:75:d3:2e:0b:8e:b9:ff:7c:8a:6f:a1:e5:
d2:e5:b4:18:f3:46:b0:40:4e:d1:7a:85:a0:c8:f9:
17:38:a8:19:94:8c:22:3a:a1:f0:96:9d:6c:76:91:
95:58:c6:fb:02:57:69:17:41:44:fe:b6:b4:85:ce:
bd:a8:98:e2:76:b3:83:8e:a3:08:5d:ab:e2:f0:62:
0c:be:3f:92:73:70:65:88:89:e6:d3:ef:5e:cb:6a:
17:07:3f:64:32:41:06:a6:26:9f:5c:c1:f4:52:67:
c0:d2:c9:48:ce:31:45:bf:49:88:bc:0f:9a:cf:64:
78:75:99:fb:01:3f:ab:bf:3e:ee:52:68:fa:13:71:
ee:e7:7c:67:96:e9:7c:d4:4f:c4:3f:b9:27:86:47:
98:0e:04:1a:3e:47:6d:df:ff:05:6a:66:b1:07:72:
59:a1:15:37:a8:2d:bc:67:02:16:2b:15:98:f0:99:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:13:F3:8F:71:94:C9:8B:B6:69:43:DD:6B:BF:02:90:AF:DC:B7:F0
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0c:04:78:41:96:9a:d2:9a:d4:2f:16:6f:a5:f0:80:11:00:
58:2e:0b:c4:54:32:7d:62:f8:4a:f2:24:19:b0:85:2d:77:5c:
c2:85:38:38:fd:dd:a5:92:29:7e:f7:e5:b4:7b:16:e5:00:24:
7e:32:ab:61:a1:7a:56:f0:31:05:89:ea:01:4f:c7:c2:3e:2e:
27:80:d2:a8:16:6a:db:b1:d5:4f:8d:52:6a:04:4e:c5:35:3b:
f2:47:22:42:af:fa:a5:7d:a5:30:a6:90:34:6d:7d:1a:14:6d:
45:7b:8a:cd:6d:cd:51:27:70:65:f5:c0:76:67:a6:bb:b5:c2:
45:0f:e1:ab:ea:f0:09:50:52:71:74:cf:07:85:01:47:05:3d:
b2:8d:51:c8:25:a6:a7:fa:45:6e:d8:1d:89:c5:6c:87:20:9e:
0e:da:a6:6b:a8:b7:7d:05:31:3f:5c:51:d6:e7:e4:7f:4b:f7:
d9:30:e6:69:0b:81:da:98:4e:06:b3:1e:d9:f2:cd:6b:34:16:
bb:be:7e:d4:de:d6:78:f0:f2:ce:e6:64:ee:8f:be:97:3c:3e:
95:33:9a:12:2d:bd:df:87:4d:dc:04:8b:68:95:d0:c3:38:6c:
f6:90:c7:02:4f:ea:df:b3:e5:ce:53:6a:67:60:d0:63:74:af:
ec:04:1b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:07 2026 by rpki-client