Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
File: 1ftSajPzZqqJRhiOXTJr3ORuLEA.mft (raw, json)
Hash identifier: FATCMKHyaSfc3iPkUR1mt5Jmn/mblIN82nM3D7IwrC4=
Subject key identifier: 26:F9:D4:36:17:DC:95:4D:DF:F0:35:86:C6:BB:8F:9D:27:2D:F0:E0
Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
Certificate issuer: /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Certificate serial: 01A0CA7D9F6E9277FA0695E00DD1C85B9001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
Manifest number: 0CD3
Signing time: Tue 22 Sep 2026 19:00:25 +0000
Manifest this update: Tue 22 Sep 2026 19:00:25 +0000
Manifest next update: Wed 23 Sep 2026 19:00:25 +0000
Files and hashes: 1: 1ftSajPzZqqJRhiOXTJr3ORuLEA.crl (hash: 15yr7riC86Z8WN/ckNJXcD6HOG3ygweP0DkELFmp1O4=)
2: zYE8FUPFtiLYSakQbWMYmGaB8Dk.roa (hash: e4WusMf1jCNYs3vcwJpmwZbgUW6eoVWnObCKagC+ZGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:9f:6e:92:77:fa:06:95:e0:0d:d1:c8:5b:90:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Validity
Not Before: Sep 22 19:00:25 2026 GMT
Not After : Sep 23 19:00:25 2026 GMT
Subject: CN=26f9d43617dc954ddff03586c6bb8f9d272df0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:0a:3d:9c:7a:62:14:38:c5:97:23:5b:0f:
43:9b:03:67:4b:83:56:c0:93:66:4b:ec:52:80:e6:
f6:2a:c9:83:af:81:67:67:12:0f:2b:5b:50:69:bd:
7a:42:31:26:95:fb:2a:76:e2:cd:fa:96:9e:83:47:
1c:47:5a:1d:6b:e0:14:de:a2:d0:88:4e:49:3f:1e:
85:1b:c5:0c:d8:32:4d:56:a2:60:02:9b:81:0e:ae:
39:b0:4c:5d:c4:bd:53:d6:b3:2d:c2:47:03:28:2e:
8f:98:eb:a0:e9:1e:d9:8d:97:bc:c2:8c:e6:30:57:
4e:cd:ec:3e:26:e3:6e:3a:7c:c0:d7:f8:72:ab:27:
7d:00:25:f4:41:56:13:a6:02:b7:79:dd:e2:2c:0a:
f6:72:41:36:43:bc:b3:37:1a:8e:f1:9e:d7:72:55:
65:3f:7b:89:b5:3d:78:87:65:7f:39:c5:50:6d:f2:
06:e9:8e:20:68:37:54:9b:2e:b7:7c:a5:c9:8f:e5:
79:c7:aa:37:4c:e3:62:09:92:d2:5e:6a:1e:90:ed:
d5:bf:2b:54:44:ce:51:6c:7e:67:a6:37:89:4f:4f:
1e:5c:1f:33:34:88:78:9e:c9:19:7a:98:50:d7:c4:
af:eb:c3:ab:52:42:ae:14:b7:2c:4b:fb:59:93:dc:
89:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F9:D4:36:17:DC:95:4D:DF:F0:35:86:C6:BB:8F:9D:27:2D:F0:E0
X509v3 Authority Key Identifier:
keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:54:ed:e2:1e:bc:e1:59:1c:c5:90:2e:6f:af:d1:a5:40:1b:
24:25:3d:bb:4d:0e:6d:cb:81:55:70:cc:68:38:f6:be:72:b6:
ba:f2:fe:ca:94:e6:da:2f:be:86:50:f5:b1:16:ae:8e:65:d2:
63:0d:72:95:c5:fa:af:a3:7a:a5:c7:a9:3c:87:55:64:20:e7:
43:d3:90:95:07:98:73:e4:90:c7:89:cf:cd:6a:d4:7b:a9:24:
99:a1:9b:7e:66:e2:35:2d:c6:82:a0:98:ee:7e:55:40:ef:fc:
3b:a1:64:e4:b0:28:63:1d:42:7e:61:9c:e6:47:23:fd:ff:b9:
98:fd:4a:ff:a9:2c:36:03:d8:11:a3:34:c5:86:7d:35:24:ca:
0e:ec:23:54:22:dd:5a:12:2e:f3:f6:45:a8:da:03:cd:de:7e:
43:93:dd:17:63:ec:fa:40:9e:78:e9:65:fe:91:e3:b8:60:8a:
27:d2:0c:3c:2c:61:7c:48:9c:79:54:81:9f:1b:37:e4:de:fd:
51:93:e8:8e:af:8e:43:de:64:c5:cf:e4:b8:0f:7d:04:0c:79:
0f:79:ec:de:62:61:f7:06:c2:36:bc:a2:cf:4c:74:ed:4a:92:
f4:1a:8a:78:d7:95:44:38:d6:45:3d:63:6d:28:4a:f1:09:9a:
c7:e3:e5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:10:57 2026 by rpki-client