Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier: u6ZZagJZXgfNiymmJXDN1pVNURFUIc1OGeWZqRgqid8=
Subject key identifier: 0D:C5:5F:2F:E0:71:3C:A7:C3:9D:7C:D5:5D:F0:8D:50:84:3A:74:6B
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer: /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial: 01A10700E403181C11FD4E7382D87F14D3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number: 1A86
Signing time: Sun 04 Oct 2026 13:01:01 +0000
Manifest this update: Sun 04 Oct 2026 13:01:01 +0000
Manifest next update: Mon 05 Oct 2026 13:01:01 +0000
Files and hashes: 1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: 5EmQKBck/q5Fxbl5XLHKfNhQcHHQHDg1gJ0GDr5eep4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:00:e4:03:18:1c:11:fd:4e:73:82:d8:7f:14:d3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Validity
Not Before: Oct 4 13:01:01 2026 GMT
Not After : Oct 5 13:01:01 2026 GMT
Subject: CN=0dc55f2fe0713ca7c39d7cd55df08d50843a746b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:4d:f0:22:4d:b4:6f:f0:49:a0:05:32:c3:
d2:99:e4:02:cc:1b:53:98:71:09:79:8c:ea:86:39:
22:9e:43:86:83:7a:98:b9:83:e3:05:df:03:10:84:
26:0b:76:3e:aa:5d:5d:64:af:7c:28:92:28:fa:73:
15:09:f6:c4:62:27:78:ca:bf:58:14:86:30:c9:1f:
18:c5:57:0d:92:53:dc:92:51:dc:a6:72:0b:29:d4:
c3:de:6e:f1:be:4f:0d:53:55:99:b0:f6:7d:38:f2:
8a:74:9d:5f:bf:c5:0a:7b:05:76:d6:e0:5f:3f:c5:
7a:8c:5e:97:de:a5:43:30:b3:fd:e7:c8:9a:9b:18:
e8:c2:05:6e:ce:99:88:90:52:e1:43:3d:32:fc:1e:
30:8e:2d:cd:c6:65:48:7a:ef:fb:27:e8:e6:79:54:
5f:3a:79:78:bf:1c:21:28:0c:fe:cd:de:0c:34:a6:
74:e8:3e:15:5b:f8:e7:6a:f1:78:56:f6:67:d6:00:
ca:6a:de:7a:86:2e:9e:ab:db:57:83:5d:4b:44:d3:
a3:33:ed:ec:b8:2f:5e:bd:17:03:b6:c1:06:aa:c4:
79:54:93:d9:0b:74:87:a6:70:04:f4:52:bc:3c:34:
f6:92:3c:f6:a3:f0:cc:d6:06:86:d5:aa:1c:04:37:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C5:5F:2F:E0:71:3C:A7:C3:9D:7C:D5:5D:F0:8D:50:84:3A:74:6B
X509v3 Authority Key Identifier:
keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b9:46:2e:b7:7c:cd:bd:07:2d:2e:7e:be:0b:3d:57:d4:22:
7c:32:2a:2f:f7:60:5b:1a:bc:af:84:62:5d:74:01:02:8b:8f:
4c:6c:f8:57:be:b4:16:64:34:82:e7:dd:20:e5:54:5a:63:27:
9a:1f:f9:45:91:29:1c:b3:68:88:64:54:67:fe:70:c6:6b:12:
bc:32:31:39:a2:b5:43:08:1a:bf:4c:77:c8:c9:4b:95:22:49:
31:86:f7:d4:a0:38:73:3c:4e:f3:16:8b:0d:96:7d:07:fd:5d:
1f:08:92:a8:dd:32:b9:ce:06:61:29:ce:a1:31:18:ca:b7:92:
87:ac:c2:c6:99:34:e3:5b:ea:72:2e:52:e3:13:14:d9:2c:fc:
f6:b4:64:3d:3a:96:31:53:8f:27:6c:0c:7a:ee:3d:4c:48:06:
c9:df:fb:a7:33:37:9c:a2:d3:6d:10:ae:c8:7e:83:14:71:b8:
cd:26:2c:12:1f:3d:93:38:1c:b7:7a:50:15:03:ea:13:82:c1:
e5:27:9c:a2:af:07:61:02:60:6a:b0:77:2f:1c:9f:19:6b:96:
40:36:3d:32:da:b3:ea:0d:7d:d8:63:c0:08:b8:af:c2:66:99:
ab:91:ac:16:d5:f5:48:6d:2b:a6:eb:8a:88:12:a6:27:9f:ec:
39:7f:ec:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:19:12 2026 by rpki-client