Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft
File: 1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft (raw, json)
Hash identifier: elzkurj9N832xRfaUfl79tIB9dHpikhec2xxuNBgZ6U=
Subject key identifier: 0B:0C:C9:1A:94:E1:F4:9A:9A:D5:04:A3:35:70:00:2A:BA:96:50:E6
Authority key identifier: FA:BF:88:D2:A1:E9:4A:C1:DD:30:63:C4:73:30:BB:AD:75:F6:51:35
Certificate issuer: /CN=fabf88d2a1e94ac1dd3063c47330bbad75f65135
Certificate serial: 01A183ABE6DF72D20385C1CEDE7F81A2E0CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-r-I0qHpSsHdMGPEczC7rXX2UTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft
Manifest number: 0142
Signing time: Wed 28 Oct 2026 18:00:43 +0000
Manifest this update: Wed 28 Oct 2026 18:00:43 +0000
Manifest next update: Thu 29 Oct 2026 18:00:43 +0000
Files and hashes: 1: 1-r-I0qHpSsHdMGPEczC7rXX2UTU.crl (hash: 5HXm3PIZIUKfez6StN3Za6vwzI9Eyvh3rG556fcIiRY=)
2: e-vVrJZ-wUMzKbd5YAfmA9x0qgQ.roa (hash: BA/0hbuhvoStHQX1fKvbqzVATh/m+qBTaz7v7V7bT6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-r-I0qHpSsHdMGPEczC7rXX2UTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ab:e6:df:72:d2:03:85:c1:ce:de:7f:81:a2:e0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fabf88d2a1e94ac1dd3063c47330bbad75f65135
Validity
Not Before: Oct 28 18:00:43 2026 GMT
Not After : Oct 29 18:00:43 2026 GMT
Subject: CN=0b0cc91a94e1f49a9ad504a33570002aba9650e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:b8:18:c9:0d:d0:4d:c0:d3:0c:cf:79:90:
9f:f5:85:df:dc:19:c5:79:87:98:01:e2:b8:c4:48:
95:cd:a5:ac:b6:ff:34:d4:1b:47:09:5c:e5:44:aa:
fd:1d:39:b3:9e:4a:86:3e:a8:02:38:f1:7b:f2:3d:
fc:87:1d:2c:fb:70:4a:1f:13:c8:11:f9:96:96:41:
69:45:ba:bc:99:15:02:65:ef:27:7c:d0:13:95:6e:
45:10:ed:88:4b:e0:b5:df:7b:77:81:a4:00:4e:8c:
09:16:6b:4d:5c:f1:79:83:41:f0:5f:27:2f:12:f4:
9c:a6:2f:8d:be:00:00:e3:a2:f0:e8:dc:d0:11:28:
e0:73:89:d8:47:7e:6a:62:66:8e:25:ca:5e:b4:4b:
34:26:8e:b0:7e:16:65:e7:fd:64:f7:d8:d5:19:db:
49:c0:40:25:93:9a:c6:d6:56:91:e4:da:3a:03:38:
a0:fe:16:93:56:c2:f0:eb:2f:2a:5b:3a:50:fc:05:
5c:cc:9d:f2:b1:66:90:56:3d:e8:5c:b8:8e:16:26:
87:b4:bc:22:24:6e:0a:ef:07:9e:01:8c:2f:45:ce:
7a:99:e3:c4:9e:f0:3e:6c:e2:61:27:99:05:3c:ca:
fe:fd:1b:76:fa:3e:43:82:56:68:be:65:14:97:6f:
ef:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0C:C9:1A:94:E1:F4:9A:9A:D5:04:A3:35:70:00:2A:BA:96:50:E6
X509v3 Authority Key Identifier:
keyid:FA:BF:88:D2:A1:E9:4A:C1:DD:30:63:C4:73:30:BB:AD:75:F6:51:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-r-I0qHpSsHdMGPEczC7rXX2UTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f97722-8392-480d-ac96-1513284b33b2/1/1-r-I0qHpSsHdMGPEczC7rXX2UTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fb:a8:a5:81:0b:90:eb:c1:da:e7:85:9d:38:ef:fa:f8:c6:
37:1b:2a:88:ff:58:73:bc:0f:58:b7:26:97:f0:a9:c8:d8:e5:
01:53:ab:03:f5:4e:66:4c:1b:be:3d:4c:46:4c:4e:97:9e:0c:
bf:94:84:4d:92:d5:73:3b:80:fe:2f:23:68:c2:40:9f:69:af:
07:a6:02:0f:a8:87:6c:c6:81:62:ae:b9:2e:5d:76:2a:13:fa:
5c:68:f6:06:ae:f8:72:e3:ab:28:d9:6b:b0:5c:cb:8f:49:41:
f0:95:b6:17:8f:dc:94:99:40:96:41:4f:ab:c6:9a:f6:62:7e:
95:2b:82:f8:0e:5e:7a:cb:bd:5f:74:63:c5:87:25:83:ab:06:
b6:d6:ad:59:6b:81:e9:84:5e:a4:65:69:94:c4:81:44:51:77:
0c:8e:00:1d:f6:8e:69:48:dc:2c:88:7b:3b:2d:28:d4:15:9d:
11:50:e8:e8:0c:a1:13:9c:48:70:13:71:ba:a1:a3:eb:1f:fe:
ed:3d:7f:f7:be:85:6a:cc:f0:51:27:8f:e7:34:ed:0d:b8:f2:
3b:fc:e1:47:ad:47:29:dd:be:7d:34:16:72:ec:91:86:e4:1c:
a3:8b:9e:48:7f:3f:c5:2d:e6:0e:f8:ae:4b:3b:bc:8c:7e:bb:
2f:12:ec:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:52:36 2026 by rpki-client