Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier: kpk9DP+OrJPHfHPp1Aq3naXHWrfNrhZ9qJ34R0BQ0Tg=
Subject key identifier: D0:9B:DA:81:9F:26:31:63:FF:26:EF:9C:0E:03:C4:BF:98:05:75:5C
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 01A0C933F60688F903169D8F21360B815255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number: 16FB
Signing time: Tue 22 Sep 2026 13:00:20 +0000
Manifest this update: Tue 22 Sep 2026 13:00:20 +0000
Manifest next update: Wed 23 Sep 2026 13:00:20 +0000
Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: 73pyH93pNnGBvn+mYQADP3JFEDXiPy1jVRUa5UEzYEk=)
2: 4ZvAi-gn1pF-qrIQmhpNRfK8kj0.roa (hash: fHKVM+9R/f9S25YhWf0k6ch7xqovB3duuxyKCTErDx0=)
3: IWwnPa171sfGXqpY2mWfswCRM5U.roa (hash: 6A+J6jDcFtUHVF1QTU8jgrZFLP13CFzG45TXvJZuPBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:33:f6:06:88:f9:03:16:9d:8f:21:36:0b:81:52:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Sep 22 13:00:20 2026 GMT
Not After : Sep 23 13:00:20 2026 GMT
Subject: CN=d09bda819f263163ff26ef9c0e03c4bf9805755c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:d3:4d:ff:ea:37:fb:43:f4:bd:89:cc:ce:
f1:79:81:b3:4a:79:c9:dd:17:62:fd:30:aa:66:bf:
c8:9d:e4:cb:56:a2:72:5d:8b:c9:a4:bc:53:15:ec:
1b:1c:32:e2:9d:84:3b:e2:fe:73:98:53:9f:b8:45:
df:f9:61:df:ce:ad:50:c8:86:de:ac:f7:7f:37:fd:
83:1b:91:4a:73:5c:3b:9a:1b:89:09:73:32:53:85:
d7:cf:fb:bc:3a:4e:56:89:7c:b8:73:45:87:3d:9a:
a5:65:b8:b0:a5:96:35:16:96:2e:9a:b7:e7:2f:45:
e1:e7:ba:19:cd:49:39:8e:51:07:cf:2a:f7:a7:ed:
11:18:ff:2d:6e:ea:78:bf:69:bb:c5:18:27:5b:36:
36:52:69:ba:bb:74:a6:ee:90:69:43:f8:5e:2a:82:
38:38:88:6f:58:6f:87:51:eb:d9:bd:d3:4c:f7:f2:
c3:47:8e:10:d8:66:87:e7:71:a6:dc:1b:5f:d1:63:
41:be:31:5a:35:13:24:e9:53:e4:11:76:66:78:2e:
6d:eb:24:1c:be:da:c7:20:bd:68:62:26:77:4b:3f:
7a:67:e6:d1:df:e0:ee:f9:65:57:1f:65:d8:2a:c8:
73:2e:00:63:0c:df:43:ca:7e:5b:74:4d:c3:c3:4e:
bc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9B:DA:81:9F:26:31:63:FF:26:EF:9C:0E:03:C4:BF:98:05:75:5C
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:90:4d:bf:6b:4c:cc:26:5d:bd:f0:a1:2f:cf:40:df:c8:14:
11:81:b7:74:d2:56:44:b2:53:83:b0:58:0e:3a:12:08:89:dc:
2a:82:f1:cc:3d:da:56:99:05:e8:f2:16:4f:59:ad:b4:23:09:
e4:66:3e:27:d7:e2:15:db:7f:09:ef:e1:53:ce:15:24:d1:ce:
45:aa:87:a0:f8:5f:ee:5e:13:76:98:73:cb:e8:1a:30:07:f7:
3a:1b:fd:77:94:1e:fe:8b:9f:6f:55:07:ae:73:a3:26:b6:1e:
0d:a0:87:1c:59:2c:fd:35:ef:f9:e8:78:15:5d:ce:00:2a:5a:
34:a3:48:2c:43:4a:33:9a:6b:8c:f5:55:ed:49:93:e3:e5:91:
1e:21:f2:e7:a3:29:51:03:fc:3c:74:69:d3:5a:d1:e9:33:d6:
96:b4:0e:5d:aa:24:c9:f1:00:88:f0:8f:05:71:c5:61:a0:77:
5d:b2:c8:48:94:70:f2:1b:2c:c5:49:0f:c2:9a:2b:60:00:d5:
0d:4f:8b:f7:0b:40:37:3c:36:fc:d7:fe:6f:88:15:55:c3:e9:
32:3d:65:ac:47:c8:3a:8d:7a:de:ca:35:fc:39:4a:2d:4f:14:
74:d6:c6:6e:e5:1b:2e:71:6e:de:de:f3:f9:29:2e:c9:05:2a:
dc:01:7e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:14:45 2026 by rpki-client