Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
File: 1-iWi8osetikWERKHCUKl7RgbUZ8.mft (raw, json)
Hash identifier: hFRN4/JE2tHduNPD9hXfFqTh9H90jh11G1ApRpZXHxg=
Subject key identifier: 74:1E:87:97:E9:AC:95:6C:8B:17:07:EC:5D:91:58:DE:09:A9:6F:93
Authority key identifier: FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
Certificate issuer: /CN=fa25a2f28b1eb629161112870942a5ed181b519f
Certificate serial: 01A161FBD94ED21D7DCE0A19B60C505DCAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
Manifest number: 0307
Signing time: Thu 22 Oct 2026 05:00:57 +0000
Manifest this update: Thu 22 Oct 2026 05:00:57 +0000
Manifest next update: Fri 23 Oct 2026 05:00:57 +0000
Files and hashes: 1: 1-iWi8osetikWERKHCUKl7RgbUZ8.crl (hash: 389H0VJXh5UPhT87aPluQ5CiukALGrgeOS6wLSfI+0M=)
2: npTp4Du46e6L-gb7_xi1R_gV0tY.roa (hash: AYItR+eYoLuQ57cxd9qVNl7nClhJqimYPK8LL9esiTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:fb:d9:4e:d2:1d:7d:ce:0a:19:b6:0c:50:5d:ca:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa25a2f28b1eb629161112870942a5ed181b519f
Validity
Not Before: Oct 22 05:00:57 2026 GMT
Not After : Oct 23 05:00:57 2026 GMT
Subject: CN=741e8797e9ac956c8b1707ec5d9158de09a96f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:11:94:54:03:d4:66:bd:d6:73:b1:22:13:
42:98:13:7e:1c:c4:21:31:24:41:84:e0:a9:3b:4b:
5f:03:59:78:78:14:2a:fd:29:db:7a:34:95:7a:cf:
4d:fd:77:60:d9:1b:1e:9b:38:c1:72:dd:e6:a7:5f:
cc:40:b5:b7:fb:a9:a3:33:df:35:05:a1:0a:5e:db:
1b:5b:52:12:86:3f:07:b3:7d:a9:00:87:6e:ac:06:
35:0a:f9:f6:85:ee:03:33:ff:ab:38:0c:67:90:46:
cf:52:3b:db:4f:e9:79:07:e0:66:da:f8:a0:b8:22:
bd:6c:6f:39:21:8c:df:a7:1d:73:60:f6:cd:a6:4d:
2b:ad:54:b7:09:14:bf:02:e7:68:2a:1b:c9:2e:43:
08:e4:93:57:be:ea:ed:5b:09:d8:87:98:b0:19:c2:
f6:56:30:83:13:9f:e5:61:80:24:42:51:4c:9a:f8:
40:c0:04:1c:a0:1a:5a:19:41:ce:52:23:49:f2:f4:
15:60:df:fd:0c:55:90:65:ec:52:b4:1d:7c:a6:fb:
35:46:8b:e6:d5:c7:ba:9d:d3:0c:ea:75:6f:71:93:
a4:dd:f2:b0:dd:e0:96:7a:b2:95:ff:63:2e:28:07:
2b:e6:d0:93:2e:1e:41:2c:d4:1f:22:02:75:8d:44:
f0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1E:87:97:E9:AC:95:6C:8B:17:07:EC:5D:91:58:DE:09:A9:6F:93
X509v3 Authority Key Identifier:
keyid:FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e3:c5:7f:97:b9:89:5d:a4:77:ab:2e:de:f1:e1:d6:68:bb:
5a:c3:23:27:d3:60:8d:1b:65:53:17:4f:79:e1:2a:6b:3d:ab:
39:62:8b:75:1a:a4:12:60:e0:d2:ce:42:db:41:9e:4c:31:d7:
b7:41:be:cb:a5:2d:0d:fd:47:3e:8d:a9:37:ae:54:cb:b9:bc:
ff:24:c1:f6:03:c6:2d:0c:fb:42:1b:be:9e:22:87:4e:cd:3d:
12:ee:d1:95:64:13:c5:b4:2e:47:a1:19:ab:3b:b3:70:cd:7c:
4c:e0:1d:b6:14:da:50:f3:9a:35:70:7f:dd:a0:d2:19:b6:3d:
87:74:d0:9d:a9:1b:b7:bc:69:ae:bf:04:23:45:43:79:43:d2:
ee:d5:e6:2e:6b:09:28:2b:69:bc:14:3d:42:fd:9e:14:9a:4e:
59:63:f7:4a:2f:be:44:d4:c7:77:a6:ed:de:a9:a0:9c:7d:0c:
29:30:f3:79:07:7c:f8:7e:bd:e1:63:ff:21:bb:66:b1:b2:2e:
24:ac:57:ca:68:67:b5:26:40:2b:ab:ad:a4:52:fe:f6:0c:ba:
8c:ec:fb:4a:4c:e1:be:48:66:08:5c:83:d9:56:25:e9:8e:2e:
1b:00:1c:16:30:6c:72:01:d9:43:81:d7:d9:0b:90:a6:f1:25:
a8:be:53:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:43:05 2026 by rpki-client