Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
File: 1gTknpKDBavLjzLe8_78A-u83kQ.mft (raw, json)
Hash identifier: /kxQIBX6NXcYjyaxs309CcxbNnDI3Idc+8Y1uVimr/s=
Subject key identifier: ED:16:A4:EF:78:C3:3E:BE:DF:6B:30:9D:3B:F8:E2:90:E2:A2:93:0F
Authority key identifier: D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
Certificate issuer: /CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Certificate serial: 01A0FFB5D90D60E34A8B40024FDA789EE1A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
Manifest number: 1A17
Signing time: Sat 03 Oct 2026 03:01:42 +0000
Manifest this update: Sat 03 Oct 2026 03:01:42 +0000
Manifest next update: Sun 04 Oct 2026 03:01:42 +0000
Files and hashes: 1: 1gTknpKDBavLjzLe8_78A-u83kQ.crl (hash: fztGNPHKhN4hdMCgX5AmllEO2X3/5Oy28R5BppTGQtA=)
2: O3NHX1xusGOC_jwAncPD2CBztNE.roa (hash: tIvb5cVDrsiT8uq8kfesqrbk5rRYub73yqvQwpeTOXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:b5:d9:0d:60:e3:4a:8b:40:02:4f:da:78:9e:e1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Validity
Not Before: Oct 3 03:01:42 2026 GMT
Not After : Oct 4 03:01:42 2026 GMT
Subject: CN=ed16a4ef78c33ebedf6b309d3bf8e290e2a2930f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:6d:12:67:e9:e3:9a:9b:cd:b0:a5:6a:11:
ea:9a:d8:15:4d:c6:88:69:17:31:5e:6a:c4:ce:66:
62:17:be:59:66:ce:29:16:26:dd:83:5d:9e:63:11:
32:81:20:84:c0:26:f4:2d:12:b1:93:5f:c5:65:0b:
f5:86:dd:4a:dd:f1:cd:6e:13:0f:cf:18:ed:56:8d:
18:ff:59:41:09:92:af:cc:ca:6c:ad:dd:aa:41:2a:
2b:97:45:1e:79:ff:6a:97:ac:36:39:c5:b6:62:5f:
d6:57:44:20:be:17:28:af:7f:8f:7f:e1:31:73:f4:
f1:91:db:0f:0f:81:5d:4d:56:a9:c6:d4:94:2d:ae:
09:3c:78:b6:d1:90:ee:53:b4:e5:59:27:fa:ff:f7:
a8:fa:0c:88:f3:07:6d:06:b4:3b:91:c0:23:f5:cd:
ac:a5:9f:86:e8:03:2d:37:ac:7c:45:c3:a1:bd:b4:
36:38:5d:e7:f8:5d:2b:a8:fe:d6:73:01:cd:b4:e5:
cd:cc:d3:0f:02:82:a6:e1:f6:25:e3:f1:58:58:c4:
b5:bd:5a:98:c3:0b:c9:c4:33:dc:ed:39:0e:fa:fb:
19:a6:08:8c:c2:16:1a:0a:6a:8c:1d:dc:f4:b9:f6:
cc:f3:31:b9:4b:8f:a6:81:b9:99:5f:1d:67:67:d8:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:16:A4:EF:78:C3:3E:BE:DF:6B:30:9D:3B:F8:E2:90:E2:A2:93:0F
X509v3 Authority Key Identifier:
keyid:D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2c:21:69:e5:ed:e9:65:19:19:84:f8:b8:d9:55:b9:ae:92:
38:9c:ab:da:91:7e:d0:37:76:02:88:b2:a6:7a:fc:5c:a9:d6:
70:e1:40:63:a5:7a:99:bb:c6:4c:2e:8a:0e:b3:cb:39:da:0e:
97:d2:bc:3a:01:2c:01:9d:df:df:7f:e2:8c:68:24:1b:d6:1b:
5a:95:87:05:a8:b6:4c:fb:de:04:4a:86:74:06:31:e0:82:62:
a0:f3:98:36:7f:f0:0a:87:18:fd:12:31:9d:6e:ef:0a:96:0a:
95:88:3f:7d:ff:ab:8a:28:b2:34:11:ac:9a:df:a7:93:5e:94:
b9:f0:84:22:0b:8b:8c:a0:a8:40:6c:f7:e4:3b:65:c8:64:3e:
2d:0b:81:5e:90:eb:73:a6:5b:25:f5:6c:b2:fd:06:59:58:f4:
c0:52:eb:33:48:6a:70:ca:29:7c:5b:b9:a8:51:5a:d7:de:3d:
cc:4f:be:93:fd:b3:16:6d:5c:88:07:48:7f:3f:83:0c:d8:f3:
04:b0:a6:0d:b6:99:29:9a:7b:37:79:10:55:ae:92:ec:1c:d8:
6f:cd:5e:3e:56:35:b4:54:07:92:7d:e5:d3:f7:b9:39:db:62:
7d:34:0e:fe:9a:ce:d6:19:dc:62:e1:97:fc:7c:83:f7:2b:a1:
85:b6:f7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:55:46 2026 by rpki-client