
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
File: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json)
Hash identifier: MCiVNgZLr7lPRJZRXdhuo4VFzihkXtwdzbmOeGLOYxw=
Subject key identifier: 22:BC:62:B5:2D:6D:17:03:02:27:8D:96:05:2C:15:2C:16:89:71:A6
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 01A08C438F4CA050B0CF3964DBA5A0EEAD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 17:00:32 +0000
Manifest this update: Thu 10 Sep 2026 17:00:32 +0000
Manifest next update: Fri 11 Sep 2026 17:00:32 +0000
Files and hashes: 1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: P++nSaaJz6opndi5S43hFY6/m7T59w0C122OpVO2qv4=)
2: IJjjXp-NnXkuXMqifqVCpQIFmVM.roa (hash: FAQDxmr60QdwQ78woSv2S5TsR/jufKqQ3EBTR4pkvxw=)
3: QJ9BmvbVTtS7A8Ks_kSD4dd3-hw.roa (hash: YikTmuc2uFJ3g6A35GBcQPgqdQmjHo//OB0ZeNSHvUk=)
4: x7kr8s7NqU4B3f01PUE6TDdXkmw.roa (hash: D0Z4Gt2OJKdDOlJ+V6cYS0q2kZL9EpP1fRqlwgKU8FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:8f:4c:a0:50:b0:cf:39:64:db:a5:a0:ee:ad:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Sep 10 17:00:32 2026 GMT
Not After : Sep 11 17:00:32 2026 GMT
Subject: CN=22bc62b52d6d170302278d96052c152c168971a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:99:98:1d:02:ab:09:ca:ea:e9:ef:1e:c1:4c:
f3:93:3d:c5:37:5d:ec:b2:e9:a0:d5:29:f2:1f:10:
f2:5d:a8:6c:1b:de:5f:7d:63:25:4c:60:73:58:2e:
71:37:58:c8:09:ae:61:11:77:c5:e2:74:1c:60:33:
b3:1d:de:e9:91:57:96:8b:fd:53:57:52:b1:1e:47:
7f:5b:88:ae:21:a7:07:12:14:de:e9:df:98:f8:f5:
42:61:29:2f:7a:ed:19:f7:72:d8:6c:12:7c:79:33:
20:17:e9:ca:c9:e7:46:1a:6a:8a:a7:0d:59:29:23:
e4:dd:9b:0b:91:3a:2c:5c:0b:21:aa:78:ed:5c:74:
7f:ce:1f:a3:8d:0b:97:28:4f:a9:ff:bb:a5:d0:8e:
3a:25:20:d2:f4:72:fd:c9:1d:cd:be:89:15:07:ef:
3e:54:05:25:9a:e1:52:57:89:26:85:df:83:00:b1:
c1:8c:36:3c:7c:1e:90:c1:c7:99:58:43:96:fb:4a:
ee:33:19:d0:c9:f3:63:a0:fb:83:f9:b1:cd:d9:31:
d2:a2:de:fe:c5:4a:d1:e9:6a:39:6b:9a:93:3c:69:
06:00:46:e8:0b:7c:52:0c:d0:1e:92:64:8d:f1:bf:
53:c9:30:ea:35:18:2a:d1:45:27:09:10:9a:f7:2d:
aa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BC:62:B5:2D:6D:17:03:02:27:8D:96:05:2C:15:2C:16:89:71:A6
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:aa:09:e5:d2:79:a3:67:26:ea:7d:45:75:00:ba:a2:ca:00:
3a:17:e1:fc:c2:43:8f:b5:49:f7:fd:08:bf:ff:bc:18:6e:ef:
f2:e8:49:89:ad:f8:e0:b9:63:fe:4c:80:72:06:9b:51:a6:2c:
9a:1b:b7:e2:ac:70:72:77:0b:b0:0f:38:aa:6d:eb:f0:d5:89:
4e:d2:fd:05:d8:35:fb:9f:bc:62:36:77:d0:6d:65:8c:5d:45:
96:1c:21:3a:9e:f1:04:29:64:7c:0d:fc:0a:fa:1c:0a:9c:e1:
d6:df:51:0f:e5:c6:f8:21:a3:0f:99:e5:07:e0:5a:79:8d:2d:
5a:8b:23:01:c3:f5:d6:6e:7b:fa:30:48:59:e3:b3:c5:be:b2:
c1:43:19:d7:69:8f:bc:40:26:23:6e:ac:3c:b8:bb:8e:a7:b2:
cd:5a:e8:be:f4:c3:a7:32:aa:03:06:6e:03:55:41:1a:4d:9c:
45:94:9d:92:e5:b5:96:cd:f9:6b:de:f5:cf:05:e1:1a:47:69:
a8:50:ae:53:62:2b:b8:2f:e2:0f:17:7c:aa:f3:0e:c3:5f:93:
c2:da:85:fb:e4:4d:8e:2b:e1:91:46:25:e5:a0:57:7d:53:88:
bb:60:42:83:54:0a:77:95:45:49:fd:d8:13:66:d6:8f:30:98:
4a:5b:f1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:32:24 2026 by rpki-client