Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier: clxKXV8NSAH6ETWlp9I7u7YHBKAWZ2O+uOWTi5PwlHQ=
Subject key identifier: 1C:FA:85:37:07:25:98:E3:6C:03:E2:C9:D3:B6:D3:41:6C:41:CF:B3
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer: /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial: 01A0CFA4B8EB448B20DD27417EF173BB6304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number: 0FB1
Signing time: Wed 23 Sep 2026 19:01:13 +0000
Manifest this update: Wed 23 Sep 2026 19:01:13 +0000
Manifest next update: Thu 24 Sep 2026 19:01:13 +0000
Files and hashes: 1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: y/v/4IKRrsC49UvJ4vzfmhEvU5SpJ2IItsVX0ICR3TM=)
2: QZaZGDE-cuakmV83Cz5Lef8Azck.roa (hash: 2PUB2C+ejT//n1dG/GiuAYrRsrfPippeNMItlWaifDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:b8:eb:44:8b:20:dd:27:41:7e:f1:73:bb:63:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Validity
Not Before: Sep 23 19:01:13 2026 GMT
Not After : Sep 24 19:01:13 2026 GMT
Subject: CN=1cfa8537072598e36c03e2c9d3b6d3416c41cfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:8d:24:f1:af:fd:8b:38:be:77:4b:ae:af:
c1:2c:3c:64:dc:15:82:19:c8:95:5a:a3:4e:06:ad:
9a:e8:a2:22:90:75:99:15:8e:b4:b1:17:11:7c:75:
a4:71:49:14:09:37:b0:3c:f0:34:53:18:a2:58:54:
0e:3d:5c:38:d0:a1:0c:98:21:7e:c0:6d:f1:0d:f5:
99:d3:24:a8:9f:8e:ee:3d:5a:93:c5:c0:88:53:8a:
93:dc:be:46:3f:eb:ae:59:17:18:0f:b5:4f:b5:50:
03:f8:ef:ee:5c:50:89:c9:10:60:12:2e:16:06:c1:
e0:b1:25:5a:3d:e1:9e:78:72:6a:60:72:30:e3:53:
72:b2:62:15:d0:bf:cf:a5:be:f3:fa:79:08:0f:b1:
66:f5:32:32:28:33:72:79:6e:32:89:1b:6d:fa:52:
b2:c7:b2:63:91:77:cf:8b:fd:55:78:6a:35:ac:51:
0d:98:28:91:d9:63:2f:4e:53:c2:96:19:d6:18:c6:
66:dc:c9:b5:82:82:4c:11:e7:dc:b3:d0:97:e4:0c:
f7:7e:43:48:de:96:f8:8d:18:7f:f4:18:2e:6d:01:
73:5f:cc:98:80:8b:e9:a7:c6:eb:9a:81:0e:7c:6f:
b8:37:1a:0c:7c:42:58:52:6b:3e:09:07:02:ee:4b:
3b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FA:85:37:07:25:98:E3:6C:03:E2:C9:D3:B6:D3:41:6C:41:CF:B3
X509v3 Authority Key Identifier:
keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:12:4e:53:64:26:f3:21:61:40:2f:8e:0c:66:78:67:60:2e:
58:6a:88:6e:c7:51:4a:7e:5e:fc:77:45:e4:11:14:03:fa:1d:
6e:a0:be:c1:2e:42:03:c3:37:8d:15:c3:73:99:3e:a0:bc:cf:
4e:00:77:3d:01:b0:04:c8:98:88:20:ca:9c:bd:97:c5:fd:ba:
8f:5b:e0:7c:f8:8e:b4:60:36:0c:f4:9d:2e:5e:45:a1:b7:10:
8b:a2:55:4b:08:ab:02:99:14:ae:c0:3c:e2:01:89:16:cc:5e:
0f:59:be:3d:03:d7:c7:a3:2c:7b:83:2f:f0:32:1c:ab:a5:70:
cf:14:eb:12:d4:cd:a5:24:6d:64:09:ea:c7:17:f7:9c:90:a2:
15:9b:31:d0:d1:d9:ef:a3:1b:e9:9e:78:b2:64:0c:e6:d0:2a:
dc:99:96:15:e6:ec:50:f2:9a:6c:5a:76:d6:ec:80:e0:33:31:
44:e6:33:44:f4:23:23:40:a6:ab:7b:f1:dc:ad:e9:91:cc:49:
27:d4:12:80:47:62:17:54:7d:92:fa:27:90:94:bc:3c:32:41:
a2:26:70:6f:2f:16:d8:f6:3f:93:d8:4a:cc:49:30:ce:76:36:
88:c7:ce:c1:42:fc:c7:59:5c:e8:8b:6e:d0:83:4d:91:33:1e:
f0:82:8e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:51:17 2026 by rpki-client