Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
File: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft (raw, json)
Hash identifier: 56RKi1wJtfiwgi8h4vEag6Vkw8AHXM7gszsCHuUBPzw=
Subject key identifier: B7:0D:16:F7:65:56:24:B6:1F:1A:5F:B7:CF:9F:27:18:E1:5E:F8:03
Authority key identifier: D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
Certificate issuer: /CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Certificate serial: 01A0D0ED56A4A37A8CCF6F42D0FA71242952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
Manifest number: 11B3
Signing time: Thu 24 Sep 2026 01:00:10 +0000
Manifest this update: Thu 24 Sep 2026 01:00:10 +0000
Manifest next update: Fri 25 Sep 2026 01:00:10 +0000
Files and hashes: 1: 0sUgrxZJElJI75bHc4PMJv-m6Hg.roa (hash: 2W0uHz9I3ibHN2TiwFffgNpABHgMMaB3ZZQbo22uvH0=)
2: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl (hash: GzkvKlbDZDyL33Nu/gCrxsB7ReDO99pOUQysTVA+Wdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:56:a4:a3:7a:8c:cf:6f:42:d0:fa:71:24:29:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Validity
Not Before: Sep 24 01:00:10 2026 GMT
Not After : Sep 25 01:00:10 2026 GMT
Subject: CN=b70d16f7655624b61f1a5fb7cf9f2718e15ef803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:18:7e:4a:a9:ec:ce:5b:27:5b:3d:78:4a:b5:
a8:28:de:8e:c7:87:72:15:da:f9:80:f2:5b:85:50:
d2:b6:cc:44:db:10:5e:d1:b1:bf:3e:22:1e:13:80:
14:f9:41:f2:b6:9a:eb:bc:12:42:dd:61:e9:3b:71:
30:76:d3:36:8a:19:2a:6f:09:46:ec:27:04:76:90:
a4:77:f3:ec:a5:a5:9f:70:81:99:4b:69:a8:63:1a:
55:87:5d:5a:30:46:50:41:65:3a:e0:70:5d:89:5f:
99:db:f0:b7:9b:4c:cf:2d:eb:5e:4f:eb:da:ca:6e:
36:32:df:2a:ec:6f:19:0b:ae:7e:58:0c:49:21:82:
09:d3:b9:15:15:1c:80:6e:2d:b0:1f:2b:2b:10:60:
cb:9c:69:b6:b5:d6:7e:e2:55:24:cd:10:67:9f:67:
9a:0f:82:c2:01:d6:ad:39:7f:5b:d5:5a:c8:13:a3:
59:d3:3f:ad:a1:cc:8b:8b:91:fc:88:73:98:ba:8f:
f0:23:83:94:a8:10:5b:9d:ac:19:e6:02:44:90:af:
61:07:67:40:3e:ca:2f:94:a9:9c:21:9f:96:ba:23:
c2:01:52:c8:7c:bb:4f:66:82:2b:5b:f8:02:cb:bc:
00:c4:33:1d:f6:52:56:62:4d:ee:68:36:93:a3:ee:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0D:16:F7:65:56:24:B6:1F:1A:5F:B7:CF:9F:27:18:E1:5E:F8:03
X509v3 Authority Key Identifier:
keyid:D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a3:0c:8f:86:c8:b5:65:b0:19:52:00:45:5e:d1:4d:a9:a7:
c3:db:8d:61:56:60:c0:e4:08:26:c6:79:65:da:37:62:7c:85:
96:cd:6a:6f:d1:9d:2a:c6:d2:3f:b6:23:33:56:39:01:4e:ef:
2b:ee:ff:85:f2:21:b4:f5:99:1d:c3:e3:ae:3a:66:f6:24:90:
f1:01:4a:93:bb:88:dc:7f:c8:b9:34:70:09:3f:ad:57:4f:a1:
ec:a7:f5:87:46:f3:b2:27:de:b7:51:78:4f:ab:72:34:05:00:
cf:63:bd:8d:61:2b:ad:0c:c0:a4:0c:ff:37:84:90:5b:20:32:
8e:34:85:8c:ca:f0:da:41:e6:e9:66:83:ce:f3:30:ce:b8:2c:
25:92:3c:0d:a0:ec:bc:6b:a6:e9:e4:fb:51:9c:87:4d:b3:0d:
f1:4e:bc:b7:89:b2:53:e2:c0:0a:84:91:e7:3e:9e:eb:c5:5d:
79:ea:28:47:2b:73:8b:0f:36:be:7b:d7:fa:c5:e2:5d:d5:3e:
c3:e4:3f:5e:a8:8f:c7:05:18:97:42:be:95:10:26:e0:84:ef:
5e:a5:ae:c7:2a:92:ef:55:52:e5:1d:4d:3e:e3:99:f7:a8:88:
ff:1c:f8:44:65:24:a2:a2:b6:a0:40:f2:47:3a:61:40:d8:00:
b3:1d:91:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:32:40 2026 by rpki-client