Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
File: 1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft (raw, json)
Hash identifier: JqMG/YQzlEmpmJbc4ljJ+EanUy7cDQn4Vv2dzu617LI=
Subject key identifier: 45:24:AC:87:61:03:2E:E8:EE:88:AF:89:83:05:29:5B:7F:DF:90:D3
Authority key identifier: F8:FA:B5:0B:D2:28:42:36:7F:32:C4:EA:6E:8D:FA:DE:01:5A:23:77
Certificate issuer: /CN=f8fab50bd22842367f32c4ea6e8dfade015a2377
Certificate serial: 01A16E6D8ECBDFF8336A991FAFBAA03EC8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
Manifest number: 0137
Signing time: Sat 24 Oct 2026 15:00:35 +0000
Manifest this update: Sat 24 Oct 2026 15:00:35 +0000
Manifest next update: Sun 25 Oct 2026 15:00:35 +0000
Files and hashes: 1: 1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl (hash: UYDxt1W3dMZCkLJT4T/JD5hlBd2mh1Z+Pb4+tc+hAV8=)
2: CnE_z3AWCy97yGhKLvwPyqYQWVU.asa (hash: 57p5HzcV2YfmP6Dn9k2t+As/r0x2DJ4LF6ED4E0kk1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:6d:8e:cb:df:f8:33:6a:99:1f:af:ba:a0:3e:c8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fab50bd22842367f32c4ea6e8dfade015a2377
Validity
Not Before: Oct 24 15:00:35 2026 GMT
Not After : Oct 25 15:00:35 2026 GMT
Subject: CN=4524ac8761032ee8ee88af898305295b7fdf90d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:ae:62:f3:e1:80:36:2b:4b:ef:10:d8:75:
c5:27:5a:5e:3e:c9:5a:76:d6:9e:7d:e2:28:a4:51:
43:4b:67:cd:3d:f4:55:86:c8:d4:78:6b:57:2f:25:
28:f7:96:e4:74:c9:8f:7c:b6:ec:0d:e2:92:c7:a0:
c0:4a:aa:ef:f0:81:99:6a:fe:26:4d:e8:f3:db:a2:
37:7d:10:f4:8e:0a:c4:47:18:6d:5e:b5:60:a0:64:
77:81:c3:c2:80:d9:d0:77:55:05:02:58:39:97:94:
48:88:21:18:a8:b3:0e:84:7b:ae:67:a7:ec:e7:25:
6b:31:71:a5:79:1e:8c:94:3c:37:ce:3e:d8:d2:cf:
cc:f4:dd:d8:fd:dd:8b:00:be:39:a9:89:e1:76:ef:
c0:5d:88:3b:c2:1c:fe:a5:9a:59:97:b8:e2:7e:40:
27:a2:f1:ef:40:23:1b:57:63:0b:16:2f:6d:0a:75:
c2:52:05:7c:b5:08:fb:ba:56:e6:12:1b:a1:7f:23:
87:8b:23:32:82:e8:56:cc:41:c5:dc:f9:fa:3d:22:
f1:14:4b:e5:70:69:8c:77:19:83:0c:09:7f:38:e0:
e8:66:5d:dc:73:be:5a:23:9f:a1:bf:2d:b2:df:77:
65:6a:d3:44:21:51:64:52:af:c3:95:95:a5:b0:4d:
2c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:24:AC:87:61:03:2E:E8:EE:88:AF:89:83:05:29:5B:7F:DF:90:D3
X509v3 Authority Key Identifier:
keyid:F8:FA:B5:0B:D2:28:42:36:7F:32:C4:EA:6E:8D:FA:DE:01:5A:23:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ebb839-52ba-431b-9dea-f45946ac5e80/1/1-Pq1C9IoQjZ_MsTqbo363gFaI3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c4:fd:de:0a:49:77:20:c6:7e:d6:89:d5:ee:15:f7:fb:c9:
fc:20:a2:4f:62:f7:45:e8:1c:c2:4f:8e:be:76:a0:81:26:f1:
ea:a4:23:43:94:b0:a6:6c:85:48:11:99:0a:30:50:ff:79:d1:
5a:bf:d4:0c:27:b4:0b:ef:a0:53:88:26:92:b5:04:2c:54:b8:
f4:73:7a:ec:8b:2b:fa:4a:d0:d6:bf:4c:3b:ae:44:75:c2:8c:
fb:61:de:84:4e:46:94:72:8c:bc:b2:38:2e:81:12:d4:64:38:
ed:c3:75:7d:c0:86:29:01:7c:04:ff:88:07:ca:5e:0f:aa:a7:
da:28:15:1c:fa:b9:5e:0f:19:2d:71:31:e3:59:47:76:d1:54:
fa:83:6e:fd:54:e6:64:47:97:45:7c:ef:5a:c7:cb:62:6e:1e:
bc:7f:6f:8b:f1:f4:c6:ba:2a:a3:3d:fd:2e:f5:5f:6e:d9:68:
b4:80:d1:ce:dd:60:78:32:f2:37:b1:40:44:46:50:d9:c0:b9:
11:87:0e:04:a1:ad:62:7d:6b:f5:36:17:c3:b5:fd:64:e7:db:
e4:09:77:2f:1c:e8:47:b6:60:71:d9:3e:ae:0f:bc:54:8a:80:
c7:7c:9e:1d:3b:b7:d8:b7:4d:ee:4f:12:25:8b:12:33:05:fb:
05:e6:88:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:54:29 2026 by rpki-client