Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
File: B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft (raw, json)
Hash identifier: eQwPMaITEg/8n1/h5poP5xTpJjH3rGhGFl/PGGf6PHA=
Subject key identifier: 60:C3:D2:20:F2:E7:E6:89:F8:82:89:A2:1C:46:45:1D:58:C1:6A:AA
Authority key identifier: 07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
Certificate issuer: /CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Certificate serial: 01A0C9A27EC1EA685E9BC9DFE86FF666AC5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
Manifest number: 09B1
Signing time: Tue 22 Sep 2026 15:01:04 +0000
Manifest this update: Tue 22 Sep 2026 15:01:04 +0000
Manifest next update: Wed 23 Sep 2026 15:01:04 +0000
Files and hashes: 1: 1-OzicR5kzd1Ow7p9pVk0SBB2HZs.roa (hash: WyH53JIWlzDtSzteiBRYQxZUpstzNJjn2NRysD5+PVY=)
2: B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl (hash: L6lWjchZYdfSNCx+n/XptbvksrO3HtPGhnKG9OMCe1U=)
3: zL1avC0lj7yCwQAa8kdB-j9BOqc.roa (hash: dt/cheCBQnjNlx2owBRsbLzi25MiYf0n9VeZMVmnugI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:7e:c1:ea:68:5e:9b:c9:df:e8:6f:f6:66:ac:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Validity
Not Before: Sep 22 15:01:04 2026 GMT
Not After : Sep 23 15:01:04 2026 GMT
Subject: CN=60c3d220f2e7e689f88289a21c46451d58c16aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:31:af:8d:da:6b:2d:5e:fa:c9:05:37:20:
8a:41:14:b0:22:42:bf:99:51:92:18:68:81:6a:81:
a0:1d:26:c5:7c:98:4b:6e:1a:80:56:17:40:ee:84:
4f:0e:58:05:e2:b7:9b:7d:21:b9:78:05:b0:1a:31:
c4:b4:f6:68:06:a4:63:41:df:c0:a5:15:0a:ec:87:
e2:df:b4:b3:8e:2c:09:b3:f5:7f:e8:d7:7d:ad:e8:
21:92:b3:da:4f:7d:aa:ac:cf:f4:c0:01:d8:3e:95:
16:68:21:e3:b2:b3:f1:08:f7:79:c4:70:f5:b5:cd:
89:ab:9f:b5:56:19:09:df:ae:ec:0e:9b:73:89:ac:
60:8b:cd:dc:0d:bf:39:84:8a:9a:2c:21:6f:b7:bc:
1a:6e:92:8a:9b:6d:a2:4e:64:7d:60:87:89:b1:6b:
16:45:2d:0d:3d:b0:5e:a2:b2:b9:de:ac:3e:6b:bd:
bb:1c:05:54:8b:e1:77:15:02:70:8e:4e:2d:9e:bb:
a6:b4:94:df:1d:36:10:ad:68:86:9f:0b:75:2d:ff:
16:80:6e:03:39:c0:34:eb:39:e4:14:14:40:a7:ef:
c7:bf:66:60:00:03:8b:d9:9b:8b:35:7d:9f:f2:7d:
93:ba:e1:30:9d:2c:a3:e2:17:73:79:b0:00:c9:a3:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C3:D2:20:F2:E7:E6:89:F8:82:89:A2:1C:46:45:1D:58:C1:6A:AA
X509v3 Authority Key Identifier:
keyid:07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a9:fb:d3:32:b3:d9:f2:b2:16:63:a6:54:96:f9:5c:88:ce:
e5:99:e8:a9:30:46:88:c9:1c:ab:b5:ec:c4:85:70:c6:8f:32:
7c:b9:59:ad:fa:73:67:4a:d2:95:fb:c0:cf:16:bd:d6:e9:18:
5a:da:d2:0f:fa:a7:ac:4a:c7:26:fc:ed:b5:39:1f:ba:0e:61:
f4:0b:74:77:87:56:5d:fc:a0:50:a8:52:cc:78:9f:f2:df:6a:
56:e5:90:aa:72:ad:8e:96:cc:58:76:07:4f:b8:91:59:bf:43:
72:5b:6d:58:fb:ff:82:a3:9a:64:f3:5d:ad:0c:ac:48:3a:02:
70:29:1e:68:17:79:ec:f5:cb:24:a0:4f:21:01:eb:81:53:77:
6d:c1:c5:a8:79:9f:cc:d0:96:d5:ce:a2:e3:70:f2:39:58:9a:
1d:07:28:c1:1c:b6:84:3d:f6:70:0f:91:eb:ea:0e:c1:78:15:
d4:ac:8a:cc:e3:13:de:a4:e7:fe:6c:61:97:3e:2e:d4:85:0f:
7a:62:1b:5f:73:03:b6:dd:0c:04:e5:a6:62:61:dc:19:7e:67:
ca:4b:f0:ff:66:96:54:68:dd:49:49:d6:8c:6a:f1:7a:ec:7b:
e7:3a:4d:ac:94:3f:2b:ba:be:e4:94:a7:d4:62:8e:fd:8a:7b:
b7:2a:7f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:43:42 2026 by rpki-client