Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
File: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json)
Hash identifier: Y17v0chWMZ4UxYvxKQDGN5LjVKFi+aRMDs2VgRi64ns=
Subject key identifier: A5:20:14:87:A1:6E:7C:14:11:7F:BE:EE:14:C6:77:E1:10:AD:C8:F4
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 01A18186E777191D2FED8EA93C6B6853B939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
Manifest number: 1ACB
Signing time: Wed 28 Oct 2026 08:01:04 +0000
Manifest this update: Wed 28 Oct 2026 08:01:04 +0000
Manifest next update: Thu 29 Oct 2026 08:01:04 +0000
Files and hashes: 1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: EqX9TUr7Eu1CjRXKgOJVYNkJ1wldxETEFccx0A3LBKY=)
2: IJjjXp-NnXkuXMqifqVCpQIFmVM.roa (hash: FAQDxmr60QdwQ78woSv2S5TsR/jufKqQ3EBTR4pkvxw=)
3: QJ9BmvbVTtS7A8Ks_kSD4dd3-hw.roa (hash: YikTmuc2uFJ3g6A35GBcQPgqdQmjHo//OB0ZeNSHvUk=)
4: x7kr8s7NqU4B3f01PUE6TDdXkmw.roa (hash: D0Z4Gt2OJKdDOlJ+V6cYS0q2kZL9EpP1fRqlwgKU8FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:86:e7:77:19:1d:2f:ed:8e:a9:3c:6b:68:53:b9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Oct 28 08:01:04 2026 GMT
Not After : Oct 29 08:01:04 2026 GMT
Subject: CN=a5201487a16e7c14117fbeee14c677e110adc8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:60:fd:2e:1c:b3:c5:0b:b2:99:36:e8:9c:c9:
71:eb:18:8b:c6:00:58:be:28:34:e7:9e:d3:16:87:
0e:71:a4:43:38:7f:ad:e7:c7:33:5c:4f:2e:84:65:
ca:da:f5:2a:92:85:d3:66:56:d4:b0:bb:84:c4:9c:
94:3b:b0:3a:47:3a:48:1e:fb:9f:94:4d:58:ff:72:
e7:93:91:17:d4:16:55:2d:ee:f7:5c:78:dc:a8:37:
4b:ee:24:83:97:ed:6f:7e:55:23:d6:e1:b6:51:d9:
b5:57:9b:2b:19:98:3d:4b:80:cc:9c:29:80:bb:67:
2c:3c:8d:59:cc:23:11:e9:f2:be:6b:17:ba:bc:08:
67:e8:d2:00:14:71:c3:1a:77:dc:6a:75:46:8d:7b:
ae:40:58:e6:73:a1:f6:5f:3d:78:df:df:d9:3d:6c:
af:eb:6b:97:e0:5f:f0:4d:2c:c6:01:0d:1c:7b:89:
12:72:a3:39:1d:1f:a3:70:fa:fd:ef:b3:6e:fb:7c:
6d:5a:f0:32:9f:f2:07:f4:37:ba:ea:07:43:12:10:
73:09:66:cf:d6:25:82:99:5c:9a:59:fe:42:fd:ca:
37:d4:59:55:79:bd:a1:6f:87:b9:00:ad:b2:cf:fb:
74:ba:55:8d:0e:a2:79:77:cc:d8:1c:df:1c:99:c9:
40:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:20:14:87:A1:6E:7C:14:11:7F:BE:EE:14:C6:77:E1:10:AD:C8:F4
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:17:93:d5:e6:71:a1:4f:64:7b:d1:ad:f1:c5:a1:92:50:14:
be:04:2c:9c:09:d5:96:1a:05:d3:83:96:8e:b6:3d:ba:a9:75:
5f:8e:09:5b:16:fa:48:1f:fd:b7:23:1d:01:6a:34:f2:d0:fb:
f7:a3:ed:fc:7f:de:eb:3a:ef:73:b6:2a:24:d9:44:24:bf:33:
32:6f:31:da:6c:4a:ec:19:ce:f3:9b:ea:63:b0:e5:fb:89:9f:
f3:6a:7b:bf:bb:f7:ea:e1:d1:7a:9e:70:b2:42:1e:ac:8b:c4:
2c:b5:d1:2b:7c:22:38:7a:ad:65:61:7c:77:5b:11:16:41:e3:
60:c2:ad:03:aa:a5:cb:fa:8e:32:dd:49:53:80:f5:e2:e3:89:
e6:5d:e7:34:0e:4b:a1:16:1c:1b:f8:f0:19:cf:b9:82:31:78:
32:bf:19:e1:4f:7b:fc:92:1f:63:c2:a7:9f:c3:88:40:5f:ea:
7b:c8:5c:9d:36:fc:8e:17:ca:be:14:5f:00:55:2c:7d:ba:fb:
82:ac:9f:1b:7a:27:12:c6:5c:53:9a:33:a7:e9:2f:00:fb:d1:
00:4a:9d:d2:6a:3e:7b:ad:68:3b:03:03:11:e3:cf:1e:94:84:
d1:29:b2:8a:26:8d:78:1d:15:fa:2d:92:d7:93:8f:bc:90:3d:
07:cc:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:36 2026 by rpki-client