Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: iHKmLySLH2pnKK0FdV6nkrhsZ6vvLXcyz/I+BU2daIo=
Subject key identifier: 2B:89:29:CC:D7:26:28:A5:46:48:BE:82:4B:CC:70:70:A2:5C:50:4A
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 01A0016F4264B9B9620920EFFCA7AB8C28D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 1528
Signing time: Fri 14 Aug 2026 18:01:03 +0000
Manifest this update: Fri 14 Aug 2026 18:01:03 +0000
Manifest next update: Sat 15 Aug 2026 18:01:03 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: uJM1NyKOtg+k54hgeXtcfwLzkCtTm3pCbdpwmJnQmWE=)
2: eqCaauL__rhdQZW0YvZCBOthP9U.roa (hash: 4jNhYaFSmf7CksXUOADGZslA+eQSAkKqvK4SR/wr1mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:42:64:b9:b9:62:09:20:ef:fc:a7:ab:8c:28:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: Aug 14 18:01:03 2026 GMT
Not After : Aug 15 18:01:03 2026 GMT
Subject: CN=2b8929ccd72628a54648be824bcc7070a25c504a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:ae:56:00:be:28:58:d7:5d:ea:0d:c4:58:
e7:64:43:8b:4d:84:3b:ee:7d:fa:59:de:27:cc:a1:
f6:aa:1c:06:3c:0c:50:a6:77:87:cc:f6:16:35:44:
a8:c5:ea:5c:7a:8b:24:b3:73:29:a1:a6:a5:d1:11:
2a:72:90:0d:9a:2e:79:8e:48:bd:3b:c2:2a:34:69:
16:8f:fe:4f:d4:4f:e8:9c:42:08:d7:76:7a:83:c6:
71:e2:4c:0a:95:0e:5a:cf:05:cd:9c:77:78:76:28:
0d:00:81:35:78:bd:39:33:0f:5a:d5:3c:09:73:38:
98:42:96:60:69:1a:86:8d:c8:0d:0d:15:56:31:f2:
72:e3:83:e7:3f:31:b8:31:ed:d8:fa:af:8a:51:12:
11:47:2a:87:7f:ad:6e:8d:6c:ac:8a:bb:13:c4:05:
4c:d1:d6:38:09:ec:6e:f6:a9:c7:70:d5:47:ab:5f:
5e:58:50:39:c0:5d:e7:59:80:97:02:96:f0:58:a0:
ed:aa:24:7f:9f:29:7f:34:1b:56:a9:6b:91:2b:c8:
f8:a0:4e:0d:63:d1:e9:68:c9:14:18:0f:21:fb:db:
ec:66:62:69:50:51:d0:3e:2f:20:4a:5d:0d:cf:8f:
31:21:3f:36:86:f2:f6:43:4a:62:d4:cc:23:2a:68:
f1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:89:29:CC:D7:26:28:A5:46:48:BE:82:4B:CC:70:70:A2:5C:50:4A
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:de:b5:04:69:d5:81:7f:c8:70:0e:cb:da:6e:27:2e:27:fd:
cb:a9:99:fe:6b:d0:95:32:63:16:a5:ae:48:5c:94:1d:d2:8c:
40:11:df:01:37:46:e6:c4:1f:fc:e4:f5:70:bf:0e:cb:2f:39:
31:0f:9b:56:35:d8:42:65:f6:e4:31:37:f1:ae:96:c5:7e:45:
9c:54:fb:da:af:a6:af:77:db:0e:e7:d6:eb:15:d3:57:0c:f2:
5f:74:e2:e6:da:ad:4b:e6:c1:55:db:23:6e:cb:7e:36:c9:07:
2f:99:87:d8:c1:fd:ec:d1:54:82:b5:10:52:1e:e9:14:5f:3b:
27:11:b0:0d:17:cc:07:94:99:51:af:e7:f1:e4:58:37:76:01:
94:29:67:6b:e9:fb:6d:57:f8:2f:9d:d8:01:e6:0a:11:46:8c:
1b:1b:4f:7d:92:94:c7:d8:49:ba:cb:bd:51:c9:86:19:61:c7:
8b:1b:aa:6b:e5:d6:08:da:dd:fd:9b:df:c1:80:70:54:1c:21:
30:cd:a5:70:56:56:70:09:da:d1:c4:1d:1d:6e:a0:4a:37:6a:
d3:9e:06:18:06:53:9f:e5:1b:d8:2a:10:e5:57:2f:cd:c8:60:
b5:b7:65:7c:6d:de:59:11:42:5b:0b:d1:62:2a:b2:62:7c:80:
67:fb:8e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:58 2026 by rpki-client