Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: cg9r0LX1wwrmGIBY60DaV2Pz4Q0nxtg1+I+BOLzrjzU=
Subject key identifier: 9B:3C:D3:62:79:8D:6D:FF:86:40:66:BC:98:D7:83:0B:73:AE:A5:3F
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 01A13E25B8493EC52CB19D7912B85B93599B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 1AA0
Signing time: Thu 15 Oct 2026 06:00:21 +0000
Manifest this update: Thu 15 Oct 2026 06:00:21 +0000
Manifest next update: Fri 16 Oct 2026 06:00:21 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: 6grMX2PSrmCA1j740TyJOmd5UM9STNmpFkbR/OwPKM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:b8:49:3e:c5:2c:b1:9d:79:12:b8:5b:93:59:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Oct 15 06:00:21 2026 GMT
Not After : Oct 16 06:00:21 2026 GMT
Subject: CN=9b3cd362798d6dff864066bc98d7830b73aea53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:7e:14:cd:bb:b1:98:eb:7e:3a:d1:5f:94:
12:4d:2a:6c:41:5a:f3:bb:f9:ed:b8:36:a1:33:96:
5a:6b:39:c8:28:04:72:06:4a:16:7c:15:93:8b:47:
78:2c:af:26:ed:04:49:fe:16:71:60:06:ad:7a:ed:
9e:08:1d:07:0f:35:83:0e:8b:26:0e:33:47:24:7f:
f6:e7:23:75:bd:48:9b:a0:1e:15:3a:3f:53:81:50:
60:51:1b:2c:c2:3c:f9:51:2a:6f:22:55:2c:48:f9:
ef:d9:de:07:8c:d8:8d:96:c4:63:25:9d:0a:2a:4c:
85:ed:31:49:e1:f2:e8:22:7c:9c:73:3e:ed:b5:8c:
b8:45:41:d2:7e:02:b0:a1:11:38:86:76:9f:f0:7c:
2c:92:62:e0:45:61:94:76:86:78:b7:87:36:cb:2d:
ad:bb:a1:63:f1:23:1d:85:d6:0e:88:38:d5:ca:05:
53:f8:45:fb:fc:f5:ff:8c:ae:1f:30:10:2e:97:19:
a3:3c:b2:5c:9f:9b:43:00:63:d7:56:85:fd:b5:b5:
ad:f5:35:ff:2d:45:87:b9:9d:5f:23:a0:b3:ed:43:
ce:67:e8:3e:64:05:57:30:24:e5:6b:f4:05:58:b6:
fb:83:7e:f3:88:c2:7d:00:09:d5:09:fe:cc:c4:d0:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3C:D3:62:79:8D:6D:FF:86:40:66:BC:98:D7:83:0B:73:AE:A5:3F
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:29:d0:62:f7:fd:24:cd:8a:2d:aa:3e:a1:22:47:49:03:74:
3c:b7:2b:c2:bd:f2:c5:27:98:3e:35:d8:64:9f:af:65:e4:59:
db:99:52:c4:c3:57:93:83:aa:07:00:ec:eb:f1:f5:87:e8:13:
9f:69:22:0a:2a:a3:0d:c9:7d:10:dd:32:5e:d4:08:b2:a0:10:
0f:d4:40:d2:d4:3c:fb:e3:df:f4:26:f8:bc:fe:60:5d:32:de:
e2:9b:e0:37:86:14:ef:b5:cd:5e:91:92:59:0e:83:ff:96:97:
4e:ca:6a:ae:67:a1:36:b7:38:6e:e6:05:b1:03:aa:58:92:88:
94:3c:90:13:f8:ad:f8:84:96:4b:5d:2f:d0:48:08:e5:66:33:
d6:0c:38:e9:29:38:06:33:61:81:bd:79:fa:14:58:b2:55:0f:
1c:c8:97:df:06:75:1c:d8:db:c7:a2:83:35:dd:5c:24:ac:53:
7e:dc:49:ad:41:91:7d:8d:42:d2:2d:50:4d:5c:4b:fb:2c:94:
65:ce:c6:22:28:79:b1:ca:35:3f:09:55:08:eb:fb:da:b8:6f:
88:7d:6c:e0:04:26:06:34:8c:7b:16:11:5b:06:93:58:d7:09:
58:14:4d:58:8a:a7:84:9a:9a:ee:e7:64:d8:d9:e3:2d:2d:48:
83:72:c1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:42 2026 by rpki-client