
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier: xfloesVCTRmcYH3JVAk77+eVnFC73+Yp48n2pTEcWzI=
Subject key identifier: 5B:D9:7A:EE:35:B4:E3:EF:22:BA:1B:B9:5C:AD:87:12:02:40:B7:76
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial: 01A0EBC128A0D131625C38128BA8C2E25C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 06:01:39 +0000
Manifest this update: Tue 29 Sep 2026 06:01:39 +0000
Manifest next update: Wed 30 Sep 2026 06:01:39 +0000
Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: pd0tb2DOBn2vzN6MoEc9dl1NUYGEIAtonYdVMtdh09w=)
2: ZtLevkUDeSsHUXqGG47X0OZSfDw.roa (hash: 1v1351MYA0xtMfbN9thfHMsePTGwzyiZtU+ILH4KvII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:c1:28:a0:d1:31:62:5c:38:12:8b:a8:c2:e2:5c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Validity
Not Before: Sep 29 06:01:39 2026 GMT
Not After : Sep 30 06:01:39 2026 GMT
Subject: CN=5bd97aee35b4e3ef22ba1bb95cad87120240b776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:a7:b6:28:05:8f:26:a4:df:bf:06:de:3e:
18:94:1e:72:bd:cc:b7:50:16:2d:18:b3:c9:61:98:
03:1c:ff:67:a2:94:d4:e4:df:1e:b1:e2:6b:20:c4:
08:2c:16:a2:6c:50:14:6e:7b:23:9d:e2:e9:0a:44:
8b:ce:65:71:87:34:b9:35:0f:bc:b6:a3:3f:46:ae:
df:fd:65:49:d5:cd:27:ab:8e:9e:ba:10:55:22:08:
d7:61:43:aa:c0:79:59:81:67:aa:95:eb:9b:de:e9:
20:42:8a:49:e0:ad:c2:a0:72:a8:09:4d:21:22:05:
20:c4:25:35:95:2f:55:c2:3d:83:63:81:b9:89:95:
4c:d5:af:59:7f:94:ee:35:eb:5a:11:65:9c:a4:79:
df:bf:aa:3d:3b:15:de:a2:86:16:c9:ea:24:b8:01:
1f:9a:8f:85:e3:ec:c3:5e:8b:74:66:5b:1e:00:6e:
97:fd:54:03:d4:be:a1:8a:db:5d:3b:50:96:fa:ff:
3c:eb:75:e0:83:ec:17:5c:3c:f6:1d:17:ab:b4:24:
ac:2c:1e:0a:a5:10:d5:c4:9f:da:0f:e1:ff:eb:01:
04:3b:f1:27:1f:8e:5c:04:88:36:84:e8:a5:02:c0:
46:89:b5:72:18:b1:8a:de:61:76:ee:fb:47:b5:f1:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D9:7A:EE:35:B4:E3:EF:22:BA:1B:B9:5C:AD:87:12:02:40:B7:76
X509v3 Authority Key Identifier:
keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:79:26:4a:6c:8f:4d:ac:cd:7c:0f:d1:0f:ec:ce:f2:1d:19:
37:87:c2:5c:4d:84:68:85:47:f3:8b:97:5c:1c:4c:30:db:c2:
02:b8:c7:a1:c7:13:97:c8:a1:b3:9b:82:85:0f:1c:a7:87:bc:
09:5b:8b:c8:a6:4f:30:fb:7d:b0:cf:36:67:af:34:e2:62:33:
93:ba:b7:e0:d3:2a:29:1c:2f:74:39:3b:2a:20:88:68:a2:99:
cd:ca:2c:8f:bb:42:ad:40:57:92:4a:1f:b0:b4:73:df:11:20:
e8:6b:85:59:2e:7d:6e:ce:7d:db:58:50:5d:cd:8b:e4:80:69:
8d:37:96:90:c9:4d:e0:b1:96:f3:a1:58:81:14:1c:fd:5f:1d:
c2:db:70:57:43:7c:ed:b0:6b:d8:40:c6:da:8e:c5:2f:45:93:
12:07:d6:38:2f:0e:03:44:2e:c2:6f:2e:dc:d6:c5:8c:a0:07:
71:ca:c5:f6:cf:f6:aa:24:16:a3:15:a5:46:1a:8e:90:82:04:
34:db:6f:62:62:54:a8:33:45:b3:83:1c:dd:21:e4:ff:c6:f2:
5e:3c:5a:6e:88:6d:62:38:ab:98:c3:f2:25:25:fd:fe:1c:06:
c5:cb:65:6c:d0:68:a0:92:71:6e:4d:2d:34:33:33:d2:7b:ca:
e5:6a:54:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:09:09 2026 by rpki-client