Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier: cSZzf2B9YavtxJCp3X+9pwbTmfwp6ieGMVyG09Hjd5k=
Subject key identifier: 34:75:23:5D:13:29:88:30:A5:15:00:DF:9C:67:7C:52:0A:F7:7D:00
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer: /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial: 01A0CBC7264E62BFA5478DE9D3958250D1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number: 0FAF
Signing time: Wed 23 Sep 2026 01:00:21 +0000
Manifest this update: Wed 23 Sep 2026 01:00:21 +0000
Manifest next update: Thu 24 Sep 2026 01:00:21 +0000
Files and hashes: 1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: C1AYP0PC8IQXQka9AQaPPznudhdEGaXKTZw5zJ4trxE=)
2: QZaZGDE-cuakmV83Cz5Lef8Azck.roa (hash: 2PUB2C+ejT//n1dG/GiuAYrRsrfPippeNMItlWaifDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:26:4e:62:bf:a5:47:8d:e9:d3:95:82:50:d1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Validity
Not Before: Sep 23 01:00:21 2026 GMT
Not After : Sep 24 01:00:21 2026 GMT
Subject: CN=3475235d13298830a51500df9c677c520af77d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:6f:1e:2e:67:6e:e7:d7:fe:a3:e0:7b:e6:
c2:6c:64:de:47:e9:da:4f:f7:9d:29:6a:c6:00:97:
c3:7a:1a:fb:61:3c:b0:1b:40:77:82:4c:0c:57:f5:
8b:fb:ae:9f:bc:b3:88:ec:29:8d:8c:08:81:07:f5:
9f:ff:ef:df:21:10:33:a3:83:be:08:9e:e8:3a:41:
70:95:c9:73:b1:f0:89:9a:a4:83:4c:db:71:80:9b:
2c:21:a6:be:07:10:16:7d:9a:c6:bb:5d:e2:09:06:
6d:a1:12:05:a9:9b:33:be:00:05:b8:03:e5:25:2b:
8d:cc:eb:83:33:d1:47:4a:a8:3e:77:9e:45:53:6f:
f7:4f:92:18:89:9e:68:b9:35:9a:00:62:cd:88:51:
42:d9:a4:11:fd:c6:f4:34:f4:35:7b:c3:13:15:6c:
b2:be:a8:07:fd:9f:89:24:b8:6c:7c:ec:e7:f0:af:
c0:a4:17:7a:7b:ac:f3:a7:9a:a4:72:71:a7:59:d9:
e9:13:6c:d8:6b:ba:8e:8f:f2:7e:9e:94:2a:8a:01:
4c:6c:ae:40:16:c4:8e:b4:6a:61:f1:9f:24:c8:3f:
8c:a8:ef:43:b3:69:f2:29:23:ed:a2:87:cc:9e:54:
e5:4a:01:bb:48:ae:a0:f8:34:05:33:1d:91:3e:90:
d7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:75:23:5D:13:29:88:30:A5:15:00:DF:9C:67:7C:52:0A:F7:7D:00
X509v3 Authority Key Identifier:
keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bc:0f:e9:07:40:30:08:ab:22:be:59:68:a0:7a:1a:9c:db:
b7:98:22:fb:f1:17:9c:fd:57:aa:00:2a:03:45:6c:2d:36:cf:
89:28:8a:02:a7:de:4c:04:46:25:fe:49:a6:63:ed:3a:79:f8:
cb:64:8f:f5:52:bd:b7:7d:80:4e:5d:6a:ee:f2:73:ca:67:71:
89:34:5d:3f:30:0c:0a:e0:ff:3c:29:8c:2b:c2:27:59:70:90:
f5:76:6f:27:8a:39:4e:23:7a:ba:87:8e:94:c0:0c:62:a8:58:
63:56:d0:ec:15:ba:0b:a7:4a:6c:b6:38:96:ef:24:62:f7:01:
e6:b8:9d:b9:54:bc:b7:63:77:fd:cf:a1:a3:13:61:ab:0a:a2:
8d:38:1a:84:7f:5c:67:b4:78:b2:c0:c1:36:5b:a2:89:aa:ad:
a0:e5:f8:9d:4a:56:25:b4:ed:53:dc:ea:56:03:a4:47:85:66:
01:15:fe:ad:34:fa:46:79:9f:c8:87:dd:57:91:1d:70:a5:55:
88:32:ec:09:14:6b:c1:6f:08:2f:3e:1c:a1:e1:2c:a8:e2:83:
9d:c2:2c:ee:2c:59:45:11:26:3a:3d:62:dc:c3:be:42:7a:0c:
3a:ec:51:29:59:e5:46:4b:94:3c:48:7d:8b:ed:5a:09:7e:7c:
b7:fe:29:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:22:51 2026 by rpki-client