Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
File: 1ITgzuV1xhkFP47isQBMxEL9LO0.mft (raw, json)
Hash identifier: sN8WeeUwVDrWKbPlnLQG+3ujuy4mXyeqWeiHmNUk+oY=
Subject key identifier: AA:90:F4:6F:03:61:3C:01:0B:1B:A2:05:3A:AF:E3:D7:F2:25:04:C1
Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Certificate issuer: /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Certificate serial: 01A0E81CA2EF4B4FC79DAD0FD6F49B5BACE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
Manifest number: 18A1
Signing time: Mon 28 Sep 2026 13:03:05 +0000
Manifest this update: Mon 28 Sep 2026 13:03:05 +0000
Manifest next update: Tue 29 Sep 2026 13:03:05 +0000
Files and hashes: 1: 1ITgzuV1xhkFP47isQBMxEL9LO0.crl (hash: 2tgnfTQ1giaq2rFrOt/vWvy4XBDZg2vHB8mbsi9AUo8=)
2: VGhk2cDF1jTB8yf6DPPbRT2NsSU.roa (hash: P3BuUVRGKsw3eiebCq9ip9oGlC6+nCgvMNwUPBdCFVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:a2:ef:4b:4f:c7:9d:ad:0f:d6:f4:9b:5b:ac:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Validity
Not Before: Sep 28 13:03:05 2026 GMT
Not After : Sep 29 13:03:05 2026 GMT
Subject: CN=aa90f46f03613c010b1ba2053aafe3d7f22504c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:46:6c:f7:22:df:bd:5b:93:b3:35:14:97:4d:
cd:27:a8:d6:08:9f:c9:b5:4a:ba:e2:5d:80:17:13:
7f:b3:37:09:41:e5:17:9d:ea:16:db:23:59:34:12:
8f:00:1f:5c:d5:aa:9d:26:e7:a1:45:b9:ba:2f:5c:
7c:eb:db:0e:1f:d2:0c:4c:0d:6b:87:da:a8:66:99:
60:17:1d:5d:80:b1:d9:12:bd:47:f4:ce:55:4e:32:
d7:28:da:f9:fc:86:ea:e2:6e:22:e3:5c:9a:60:d0:
19:69:69:0a:c3:f0:f0:6c:1c:98:f1:b3:a5:ce:47:
2c:62:50:91:d0:35:ea:b1:79:2f:69:70:56:d2:02:
9d:c9:7e:da:c9:7c:89:f6:fe:6d:d0:4d:a3:22:94:
c2:01:17:d9:46:c8:80:2e:28:90:ad:a7:00:62:75:
48:d5:a6:f8:95:90:0e:bb:5d:d3:bc:0c:45:40:36:
1e:39:e4:fc:52:a4:da:19:77:4f:32:b3:19:d7:c6:
5d:08:84:fa:80:c7:64:9b:6e:62:b6:ae:86:fe:43:
f1:a2:88:2f:34:15:bb:8d:be:9c:82:19:bc:00:43:
e3:10:c6:bb:8d:d6:e4:d7:e7:f5:a6:51:3d:7d:20:
da:37:38:22:f8:f1:f5:6d:f0:1f:24:d2:e7:f5:f3:
bb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:90:F4:6F:03:61:3C:01:0B:1B:A2:05:3A:AF:E3:D7:F2:25:04:C1
X509v3 Authority Key Identifier:
keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c1:6d:83:51:63:aa:1a:45:2b:84:7f:a4:78:93:c9:5e:61:
f9:02:2d:92:00:28:2b:e7:5b:3d:1e:01:1f:08:37:61:a9:c4:
23:39:74:82:db:c6:5e:cf:e2:01:03:c2:b4:bb:5f:26:d6:34:
b3:7b:48:d3:37:f7:58:c4:f5:13:c5:57:4d:7d:bc:56:eb:49:
63:c0:82:ef:bd:6f:be:1f:73:b9:f0:c4:1a:fc:a7:11:f3:5d:
b9:0a:90:5a:57:56:ed:cf:15:7a:c3:0f:c9:4f:76:38:eb:d2:
f7:c6:ce:47:02:d5:aa:0c:b9:79:01:cd:39:0d:d5:20:b3:b3:
3a:94:de:8f:ed:59:8e:c2:53:dd:d6:34:49:fd:89:4a:fc:92:
94:f9:2d:b5:91:7f:de:25:48:b1:7b:fd:cf:54:9f:f4:0b:43:
05:66:ea:fe:91:24:27:36:ff:98:b3:01:62:95:36:b6:30:ff:
f4:cc:cb:7b:2c:65:06:c7:99:66:ff:b3:c4:15:57:5d:ae:84:
5d:8c:55:e6:07:b0:66:a1:5e:f2:83:46:16:52:4c:cc:41:e6:
d8:45:7c:57:d2:64:c9:67:24:6a:cb:5f:db:01:a7:87:68:85:
55:1d:0d:e5:d2:e3:58:71:d2:43:01:3c:e4:b1:5e:a9:f9:0d:
17:bd:a0:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoHKLvS0/Hna0P1vSbW6zlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODRlMGNlZTU3NWM2MTkwNTNmOGVlMmIxMDA0Y2M0NDJm
ZDJjZWQwHhcNMjYwOTI4MTMwMzA1WhcNMjYwOTI5MTMwMzA1WjAzMTEwLwYDVQQD
EyhhYTkwZjQ2ZjAzNjEzYzAxMGIxYmEyMDUzYWFmZTNkN2YyMjUwNGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UZs9yLfvVuTszUUl03NJ6jWCJ/J
tUq64l2AFxN/szcJQeUXneoW2yNZNBKPAB9c1aqdJuehRbm6L1x869sOH9IMTA1r
h9qoZplgFx1dgLHZEr1H9M5VTjLXKNr5/Ibq4m4i41yaYNAZaWkKw/DwbByY8bOl
zkcsYlCR0DXqsXkvaXBW0gKdyX7ayXyJ9v5t0E2jIpTCARfZRsiALiiQracAYnVI
1ab4lZAOu13TvAxFQDYeOeT8UqTaGXdPMrMZ18ZdCIT6gMdkm25itq6G/kPxoogv
NBW7jb6cghm8AEPjEMa7jdbk1+f1plE9fSDaNzgi+PH1bfAfJNLn9fO7hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqQ9G8DYTwBCxuiBTqv49fyJQTBMB8GA1UdIwQY
MBaAFNSE4M7ldcYZBT+O4rEATMRC/SztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83ODQ3ZmItZjU1YS00OTk1LTg1MzEt
ZWMwMjYyYWIzM2YxLzEvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC83ODQ3ZmItZjU1YS00OTk1LTg1MzEtZWMwMjYyYWIzM2Yx
LzEvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsFtg1Fj
qhpFK4R/pHiTyV5h+QItkgAoK+dbPR4BHwg3YanEIzl0gtvGXs/iAQPCtLtfJtY0
s3tI0zf3WMT1E8VXTX28VutJY8CC771vvh9zufDEGvynEfNduQqQWldW7c8VesMP
yU92OOvS98bORwLVqgy5eQHNOQ3VILOzOpTej+1ZjsJT3dY0Sf2JSvySlPkttZF/
3iVIsXv9z1Sf9AtDBWbq/pEkJzb/mLMBYpU2tjD/9MzLeyxlBseZZv+zxBVXXa6E
XYxV5gewZqFe8oNGFlJMzEHm2EV8V9JkyWckastf2wGnh2iFVR0N5dLjWHHSQwE8
5LFeqfkNF72gLA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:44:03 2026 by rpki-client