Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier: R02+pPP+vKV8+bNZdNvaV4tNaH40HJXTQdVt+ILJeBI=
Subject key identifier: F8:B8:A6:0D:43:A4:5A:35:A2:A2:2A:0E:76:26:AE:81:09:C7:37:60
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 01A17100A87FCFC28EEDD081CB48D57F59D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number: 1AC3
Signing time: Sun 25 Oct 2026 03:00:30 +0000
Manifest this update: Sun 25 Oct 2026 03:00:30 +0000
Manifest next update: Mon 26 Oct 2026 03:00:30 +0000
Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: N7j/htIplh0tFX0XujTm82WhhJWJPwaR4UFGgeN28Io=)
2: Q3WTPfUFUp4m0ZjtwYkyBFPpV7k.roa (hash: CT1JMwYSy6oJySNRis4zt8oqjE+2sdxgb342qVOSd2I=)
3: t8JuvA_vhb4W5m-qqwK3zHuGsyA.roa (hash: FDUw+pc8vLRfzGQdAP47yUYCrzZ18DAW4vtpi+PI2Qo=)
4: tGQQE0G6RfcW_KUvdgu-B7S24aQ.roa (hash: J6CPfiAsYUjj4qoIrccznkrh+KkQ7aAvjwp+6DFw9Lw=)
5: uUrqBhh3OXly7eOQWNASPejUHp8.asa (hash: RetXR2CIKbeJVmkMUmUQ4OnKEpmaGDtgHyAAr0pvXgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:00:a8:7f:cf:c2:8e:ed:d0:81:cb:48:d5:7f:59:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Oct 25 03:00:30 2026 GMT
Not After : Oct 26 03:00:30 2026 GMT
Subject: CN=f8b8a60d43a45a35a2a22a0e7626ae8109c73760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:52:ff:87:da:32:f3:4b:fe:ce:b6:aa:de:
12:35:54:56:2d:e2:0b:bb:07:35:2a:ec:b2:e1:48:
c5:f0:0e:0d:dc:1c:d5:c0:a5:59:dd:f5:20:74:53:
b3:c0:e1:fb:12:76:98:fc:76:44:fd:5d:a6:3b:42:
2e:43:bf:71:50:7d:62:0b:23:ae:48:c9:9e:65:0a:
07:57:e4:c5:f5:08:dd:52:56:44:21:25:1b:9c:fe:
37:e0:5e:15:49:b3:7d:5c:cd:b2:8a:9e:2a:77:f9:
d6:ef:b3:1e:50:b6:ba:2d:d2:09:b0:9a:35:ea:c5:
a4:80:1c:62:4a:60:bd:18:bf:d5:4c:0d:d3:60:b2:
21:6d:38:22:ea:81:73:19:4f:37:66:66:0e:47:be:
74:11:51:e7:1e:53:24:a2:d5:24:01:f9:00:df:e8:
56:1c:a4:d6:ae:95:b1:ba:b7:92:e2:78:50:01:88:
63:cb:20:d2:94:e5:c6:da:4f:c7:f4:be:16:60:be:
2f:10:e9:a6:62:2f:7d:3f:ba:e9:4c:11:17:bf:28:
e4:4b:f0:15:68:a8:13:bd:a8:c6:fd:90:4f:90:1c:
c4:31:61:34:bc:9a:65:54:53:12:39:00:28:4e:50:
41:0a:c5:e4:87:15:60:c0:56:7e:78:1b:40:89:fa:
45:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B8:A6:0D:43:A4:5A:35:A2:A2:2A:0E:76:26:AE:81:09:C7:37:60
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9e:2e:e5:97:d9:c7:e4:d7:79:a4:15:24:52:49:0d:25:dc:
67:12:d6:f8:e3:b4:69:dd:95:e9:a8:31:c2:3b:35:b2:2d:c8:
4f:25:62:99:f3:75:c8:ee:94:fb:8a:b1:b9:6a:15:78:56:35:
f7:16:e7:3a:e3:1e:74:d1:8d:71:70:ed:15:19:61:b0:d4:a1:
69:25:87:1f:1e:74:65:c7:f3:ed:31:2b:1f:64:86:c4:56:34:
c7:6f:13:9f:e5:bd:b6:17:c8:74:3c:0b:1b:ed:e3:4a:4a:f7:
fa:58:65:41:18:06:5b:4b:3d:cd:cf:a3:4b:e6:47:b5:43:0b:
60:bb:48:c0:b9:eb:1e:4b:ef:54:29:9b:7d:a9:6f:5c:de:a6:
34:b7:c8:82:f8:2f:23:6f:20:72:7c:b9:fd:6a:ef:57:3c:55:
7a:6e:1a:0f:83:20:c4:c0:5d:26:b5:c1:c5:81:98:36:c2:0f:
56:56:cb:82:e1:22:31:74:d7:7c:8b:88:34:ee:24:f3:6b:4b:
31:bb:10:d9:5d:5f:28:be:9d:6a:b1:2f:f2:9b:88:f6:2c:6b:
5d:80:9b:e8:db:5d:30:bb:d3:34:a9:45:59:9a:07:c7:9e:df:
40:98:e9:af:33:a6:c1:13:7d:88:17:fe:78:a9:08:92:49:29:
3e:56:06:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:24:57 2026 by rpki-client