Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json)
Hash identifier: NxVAbJl2SUbmGqdQXDmEuUwb5yfIf6qcip4a+yS7Rus=
Subject key identifier: C8:C5:DB:AD:96:5F:83:43:E0:8F:78:D7:3D:05:DB:0C:CE:19:0F:EC
Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Certificate issuer: /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Certificate serial: 01A13DB8435FA3792DEC699D74CAC6ECB7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 04:00:48 +0000
Manifest this update: Thu 15 Oct 2026 04:00:48 +0000
Manifest next update: Fri 16 Oct 2026 04:00:48 +0000
Files and hashes: 1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: /exmJIGQ4efcmZHnFlEhf6Y20MWpJtTITMPzXAGaIL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:43:5f:a3:79:2d:ec:69:9d:74:ca:c6:ec:b7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Validity
Not Before: Oct 15 04:00:48 2026 GMT
Not After : Oct 16 04:00:48 2026 GMT
Subject: CN=c8c5dbad965f8343e08f78d73d05db0cce190fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:4c:37:01:02:1b:91:ea:83:0b:b4:1e:15:
12:b5:fb:c5:23:51:da:3b:a0:77:54:56:80:22:93:
a8:c0:5f:93:c3:e9:7e:68:83:93:88:f2:d6:3a:13:
cc:28:8e:ca:e4:22:16:01:03:01:35:71:1f:fe:bb:
84:b1:fd:12:b8:f0:7e:49:1f:2c:24:f9:ae:1b:43:
2f:1a:33:ea:3c:4f:b7:f2:b0:35:6d:38:59:cf:11:
34:a8:db:06:df:d7:78:02:60:ea:b1:d6:9e:5c:4d:
d0:2b:8b:57:dd:7b:24:1c:70:62:95:31:62:b1:0d:
19:01:e6:76:6d:0d:8d:be:a8:bf:01:80:92:ea:77:
e7:56:5c:8e:86:52:e6:f9:95:4d:67:7f:12:38:8a:
1c:83:0f:f0:13:91:ce:4a:98:76:00:f0:7a:cf:97:
9e:74:a0:4b:a3:98:36:04:87:2f:44:74:47:3e:0e:
57:47:4a:e4:2a:d9:43:85:7b:0f:4a:ec:26:0f:e9:
3a:ed:46:6a:f1:7a:64:e0:4d:1b:ad:aa:a0:26:52:
65:13:97:4a:f1:b0:05:f3:f0:9c:14:18:b4:75:0c:
57:df:83:38:3a:9d:4b:02:e8:a1:02:95:3b:05:c4:
fe:b4:42:a4:45:20:36:9c:b3:0b:df:58:b9:81:2f:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C5:DB:AD:96:5F:83:43:E0:8F:78:D7:3D:05:DB:0C:CE:19:0F:EC
X509v3 Authority Key Identifier:
keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:52:f9:47:da:60:24:76:50:f8:4f:c0:af:b5:72:3d:01:4f:
39:e2:ff:8e:ca:67:d7:b8:1d:5b:62:55:d7:86:07:18:7b:07:
c2:be:40:98:37:b9:f3:41:fe:36:01:4b:2c:7f:82:23:d8:4c:
75:97:a6:6e:e2:53:89:29:ff:ce:29:54:e7:e9:c0:f7:9b:55:
aa:b8:fc:44:b7:87:f4:43:b0:0b:ef:78:48:7e:7e:87:c6:d0:
f5:f4:6a:82:3e:34:c8:48:2d:b5:b4:27:1d:88:55:a0:3d:18:
71:6f:4f:a1:fc:90:59:ac:13:82:37:5a:a9:00:81:fd:17:8f:
50:46:d9:b2:32:76:cd:64:51:86:be:55:a9:ca:8b:cc:09:ee:
0a:17:0d:7b:e6:e6:77:e5:e4:ec:7d:7b:78:e5:97:b2:8f:c8:
3b:c0:df:d8:6b:89:57:0f:cb:2b:85:ff:21:68:eb:2b:d4:69:
fd:4d:97:2c:05:b8:7d:76:43:8b:f5:a7:a2:6e:f6:4d:af:16:
63:75:d9:66:e3:fc:f6:97:f7:0f:fc:b4:3b:96:b2:e3:3e:81:
7c:c2:5c:14:92:d6:27:02:a4:08:51:b2:d6:8f:dd:52:d6:8d:
b6:77:99:d9:81:c9:14:24:87:0a:c9:c2:49:09:15:74:13:6f:
d4:d7:00:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:40 2026 by rpki-client