Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
File: 1-iWi8osetikWERKHCUKl7RgbUZ8.mft (raw, json)
Hash identifier: moq0bIoK8ebXAT8OdGJZGQDZlUdxAgM4yQVcMyI4Jm0=
Subject key identifier: 57:EC:B0:9C:B1:BE:7A:91:CB:A7:46:B0:2E:80:67:76:EF:96:D9:3B
Authority key identifier: FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
Certificate issuer: /CN=fa25a2f28b1eb629161112870942a5ed181b519f
Certificate serial: 01A16BA40569C660A6528FBC7D57D81F400E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
Manifest number: 030C
Signing time: Sat 24 Oct 2026 02:01:13 +0000
Manifest this update: Sat 24 Oct 2026 02:01:13 +0000
Manifest next update: Sun 25 Oct 2026 02:01:13 +0000
Files and hashes: 1: 1-iWi8osetikWERKHCUKl7RgbUZ8.crl (hash: GPKA8al0NgIi69v8y4tf85ZzF09vF++5ibtVma23+9g=)
2: npTp4Du46e6L-gb7_xi1R_gV0tY.roa (hash: AYItR+eYoLuQ57cxd9qVNl7nClhJqimYPK8LL9esiTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:a4:05:69:c6:60:a6:52:8f:bc:7d:57:d8:1f:40:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa25a2f28b1eb629161112870942a5ed181b519f
Validity
Not Before: Oct 24 02:01:13 2026 GMT
Not After : Oct 25 02:01:13 2026 GMT
Subject: CN=57ecb09cb1be7a91cba746b02e806776ef96d93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f1:9a:c9:73:61:e8:0d:cd:64:59:2e:a5:b5:
46:1b:67:1a:fe:fa:42:aa:20:3d:b0:ce:7d:b4:58:
ef:4d:f8:88:09:a2:9b:33:ae:57:0c:6e:de:96:87:
73:d5:6c:5f:69:9a:8f:b3:b5:e7:9e:52:c3:49:dd:
9f:e5:73:a0:05:7e:de:59:59:40:7b:6b:ad:a2:f1:
cc:0d:0f:44:4d:c3:d9:0d:35:f7:18:83:1b:ee:9c:
b2:c2:d3:e7:e4:18:fc:82:ad:af:e2:f3:54:17:eb:
f0:9f:c3:98:7d:9f:0f:3c:b7:7a:78:d2:47:b1:7a:
d7:1b:97:c5:82:0e:bd:bb:c4:2b:c3:ce:6f:03:3b:
16:90:96:3e:4f:f6:64:86:ea:34:ba:fb:83:ed:de:
4e:c7:3c:86:0c:e8:44:97:e7:be:73:ae:02:09:71:
57:0c:e2:f9:6c:27:af:16:30:cc:94:74:43:d4:e2:
04:f1:d9:de:22:96:f0:12:16:e0:f9:43:aa:b9:a5:
b4:e9:83:7f:13:1c:ab:20:f2:61:50:02:a8:c1:d8:
f0:b1:ef:31:43:c4:f5:cb:f3:ec:11:9c:f9:86:03:
27:31:82:21:a1:de:c3:4d:6a:96:e0:bc:e6:f4:a3:
0d:a2:47:7b:ca:58:ec:a0:d3:33:2e:87:e8:b1:95:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EC:B0:9C:B1:BE:7A:91:CB:A7:46:B0:2E:80:67:76:EF:96:D9:3B
X509v3 Authority Key Identifier:
keyid:FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b3:c7:4f:15:cc:23:7a:97:39:55:8c:9d:d3:98:6c:b7:20:
a5:10:ec:13:62:63:57:fb:3d:e3:32:3a:72:ae:53:a0:b0:77:
e0:87:33:c6:8f:01:22:54:e1:8e:4f:e6:30:f9:b9:ac:12:9e:
da:37:ae:58:6e:97:0a:51:5c:4d:e4:32:03:d0:b9:08:9e:a2:
41:5a:c4:4c:13:0b:06:2f:06:29:9d:77:fe:6e:a3:16:34:50:
af:57:ad:00:62:7d:86:db:08:2c:b8:5f:4f:2c:39:60:a5:61:
79:21:85:83:f6:cb:fe:c5:c7:b9:2f:c3:7c:8b:fa:2c:a1:45:
86:f4:b8:3c:28:03:10:99:45:40:c8:ca:e5:21:44:4e:ad:62:
fc:dd:1f:36:2a:b1:2c:d5:b2:df:9a:4d:58:46:ae:ea:3f:16:
b7:01:de:97:bd:b0:87:95:29:22:26:ec:26:77:15:32:df:e4:
19:40:3d:4c:66:3a:da:ee:69:5e:b8:71:94:80:09:ac:a1:d7:
45:0e:0e:c2:ed:1e:f3:17:9d:15:42:1b:8e:c1:09:c6:3b:2c:
29:92:3c:2a:51:98:a0:15:bf:38:57:3e:90:d3:36:c7:13:d2:
13:d3:d2:af:6e:3c:50:fa:6f:c4:c0:63:83:97:cc:2d:4e:a8:
db:04:f9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:15:36 2026 by rpki-client