Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
File: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json)
Hash identifier: hNYXVKtHoeerX2Mln/0sVj3qr8YOG14BONU0Ege8+Rs=
Subject key identifier: F2:BD:C3:C4:14:30:35:37:69:A8:5A:B8:2B:92:A7:04:67:32:78:3F
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 01A08A8C0BB680D4A987D78C610569123B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
Manifest number: 1A85
Signing time: Thu 10 Sep 2026 09:00:28 +0000
Manifest this update: Thu 10 Sep 2026 09:00:28 +0000
Manifest next update: Fri 11 Sep 2026 09:00:28 +0000
Files and hashes: 1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: 8ZBXHJrYwZaVK6JXQZpxetQ9NeNrPC4Wc/A/ZOuojwg=)
2: 5-XXkJnoSv_A8Qd17OtJN5i2rPk.roa (hash: rBTciEGp1PgrUjVxBEytWIpO/WAFqjVb6jKVmXXYoDU=)
3: 9DQTs2wKqScndspLuFL690S9C10.roa (hash: srpl4qi7sPv0BZnzMRCi4rqUA6OuywpyeD8PiEQVVPo=)
4: J0--o1lrJsP_M4SKvtP6uLLTEhI.roa (hash: x2kLQ/vE2PqS2+jhROtWLD6sBlgO3Ul4csYjnheYWiE=)
5: RJnQ2X4CM4zt6IsflBaFEH-7ek0.roa (hash: 8GA0PAlc9EmYRg/BGGpIKtAVLPVXGfKk3WsZ7D0oqic=)
6: q-8noEh6b2f7clZvsd5WphsHq0A.roa (hash: Pn5ZPx0J/yGGt821PM9wYpMm6lTxTXU+s7PYclcgTP8=)
7: r3EiLYHevbO0Th1WEvhzW1gW05s.roa (hash: 003jzFHjDPB1TeNPUDTQBfy40dYt4zSE44vlLncCqQM=)
8: sz14VBxRIpqGXYJ3gs7N-duef7M.roa (hash: iuoNPKOygQGtJNdRme+MrNnya4r/5gpGXaK9IsmECOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:0b:b6:80:d4:a9:87:d7:8c:61:05:69:12:3b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Sep 10 09:00:28 2026 GMT
Not After : Sep 11 09:00:28 2026 GMT
Subject: CN=f2bdc3c41430353769a85ab82b92a7046732783f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:bb:28:09:c2:b9:59:21:0e:b2:4b:42:de:
25:f4:28:2b:01:ce:e6:91:96:03:6c:45:79:5e:bd:
6e:71:27:e8:3a:a9:b3:47:05:88:fe:45:92:4e:b4:
67:4c:51:07:5f:0b:85:6c:ef:8a:30:42:2b:3e:33:
51:04:33:9d:8a:87:ce:94:80:18:3d:52:0d:ba:40:
60:b5:51:74:27:84:0b:5b:92:59:c0:e4:ea:9b:57:
16:d0:35:eb:34:07:87:0e:bd:90:80:c2:74:25:07:
ce:06:55:c5:84:95:83:46:43:1b:24:53:36:08:36:
d0:a7:d5:47:74:3d:26:01:b3:32:9d:65:3b:6d:2a:
5d:ed:82:43:5e:c5:d4:3d:cf:dc:49:97:24:6a:c0:
8a:9d:8b:50:4a:17:75:b0:d4:e9:01:41:6a:2f:33:
e4:bd:d5:26:bb:68:7c:0b:6e:f4:58:dc:eb:83:55:
db:ae:41:bb:aa:c4:33:4b:95:36:79:b5:4a:03:50:
4e:ae:e8:22:f7:2d:86:6f:fd:80:55:a3:a0:da:3b:
90:07:77:55:f8:86:c0:00:7f:48:a7:8e:5e:d3:c1:
cf:00:79:f2:25:2b:ee:de:8d:8a:ad:c2:66:8a:b8:
7b:93:ce:ee:2a:8a:9f:dd:e2:bb:5d:12:66:66:99:
84:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BD:C3:C4:14:30:35:37:69:A8:5A:B8:2B:92:A7:04:67:32:78:3F
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:34:57:44:9a:8e:cc:7d:79:25:8b:25:7b:f5:3a:b6:a2:8d:
86:68:9c:12:51:54:7f:03:3f:af:89:dc:79:3d:d9:80:0e:63:
9d:ca:60:cd:9c:4d:8f:2a:6b:08:eb:c6:da:0c:82:00:c5:9b:
e1:b3:69:80:7c:91:cb:fa:45:b3:b5:1b:50:a8:7e:b8:b6:af:
5f:99:63:28:6e:24:f9:bd:0b:6e:e3:37:0f:fd:70:09:5e:e4:
5b:d4:70:d4:b2:25:1a:13:21:70:4a:73:de:5c:81:d2:a9:97:
08:37:ca:a4:90:83:9a:ac:4c:76:a2:5f:d6:f0:bf:2b:20:d2:
55:9c:a2:90:31:e7:ac:e4:78:54:5f:1c:81:f7:9c:26:b7:2f:
ff:81:40:24:e6:48:27:39:51:0e:e6:77:88:07:a7:e5:45:80:
d9:e2:8c:bd:e4:88:9d:5c:41:f1:ea:71:06:3b:79:e7:36:9e:
37:0a:b8:25:ab:89:f4:a1:e9:f2:38:c7:ff:b2:3d:0f:24:56:
f8:0e:13:ab:d9:79:a6:c9:39:58:0d:68:1f:06:b2:c6:38:b5:
cf:26:2a:5c:73:fc:51:79:a2:e4:c9:0d:ee:cc:32:40:82:bc:
f4:3c:4c:61:cc:84:90:ea:38:10:4f:d9:cd:55:48:bc:e3:a4:
6c:e9:0f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:18:25 2026 by rpki-client