Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier: gULm1gEA8yjHlOZ2XvvZL9mKXBTUK4s4TPJ03ShqhhM=
Subject key identifier: 60:4E:A8:05:01:F5:38:34:98:29:4A:56:C8:69:3B:F2:32:AF:B4:86
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 01A0D15BFF4EE40BBC66861BD219E0A5A9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number: 0F7B
Signing time: Thu 24 Sep 2026 03:01:02 +0000
Manifest this update: Thu 24 Sep 2026 03:01:02 +0000
Manifest next update: Fri 25 Sep 2026 03:01:02 +0000
Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: zFuNNLswYYigjw3MKuGRQCxgU8oGiTJlVXYAJV8tAxM=)
2: 3SGaIwhtWysQLWn0sQ-j25aYWzk.roa (hash: 6nFcHI9+JyUVi2ufE9HEixwgDofNaQHxTSquSnDsJV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:ff:4e:e4:0b:bc:66:86:1b:d2:19:e0:a5:a9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Sep 24 03:01:02 2026 GMT
Not After : Sep 25 03:01:02 2026 GMT
Subject: CN=604ea80501f5383498294a56c8693bf232afb486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:76:07:c3:21:bc:d0:cb:bf:7c:b4:51:1c:df:
eb:c7:3b:34:d8:d8:e2:a1:06:e1:d4:03:bb:58:81:
be:47:6b:65:29:43:80:56:75:d5:e2:22:10:f8:21:
ef:a6:81:2b:ba:f4:19:a3:fc:28:66:ea:c2:98:c0:
b5:7d:2c:f5:16:c0:a4:57:63:c1:bc:ab:2f:2c:89:
79:54:18:03:be:78:0c:cf:f4:a8:3a:3a:4b:37:7b:
4f:0e:5d:b3:cc:7d:0a:e9:2b:e7:38:6e:54:20:49:
12:b8:13:36:bd:f9:c4:11:25:b3:7d:ff:4b:cb:1c:
67:26:db:11:6e:0a:9c:07:8a:f0:95:af:a8:07:f5:
c8:ce:e3:d3:43:1a:54:c9:a1:fc:11:cf:62:3a:63:
66:55:84:ac:f6:11:96:69:b9:ea:bb:97:97:da:c5:
75:03:cf:16:5b:69:6d:ff:cc:0b:a3:1f:a2:7f:8c:
1f:fe:f9:f8:ee:d3:1e:25:cb:0f:ad:80:44:7c:cd:
0d:f1:8e:19:56:03:6b:90:57:50:80:bf:04:d7:e5:
fb:04:79:e8:1c:6f:5d:78:c2:48:db:95:11:81:a5:
39:7a:e9:78:f2:61:b4:70:30:24:21:4b:37:37:0e:
0c:53:44:94:02:d4:0f:24:2e:06:32:7f:41:50:12:
a2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4E:A8:05:01:F5:38:34:98:29:4A:56:C8:69:3B:F2:32:AF:B4:86
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d2:3e:50:6b:c6:d2:d9:db:19:37:cb:67:1f:22:5f:37:f1:
31:04:56:70:d9:e3:5b:ed:c6:4d:c6:d9:46:ac:c6:16:c8:1a:
bb:79:65:6b:dc:83:4c:59:55:d6:b1:85:a8:9e:d7:a7:31:ff:
57:03:4b:55:1b:e3:94:b3:78:dd:58:50:43:da:3b:5b:6a:d9:
27:ac:c5:10:c1:74:6a:2c:8d:42:87:cc:e4:e2:00:12:32:86:
66:c4:d9:0f:24:fd:e7:e0:85:e1:45:fa:b5:a9:0e:d8:e6:ed:
33:9e:73:a0:ee:58:fd:3b:d9:38:c9:7d:99:0f:6f:36:20:89:
02:96:e6:c0:8b:a1:1e:94:0c:3e:91:bf:54:be:be:45:d2:3e:
38:29:88:60:9c:96:e2:86:9b:a3:9d:5f:42:d5:37:01:91:37:
44:fe:f1:75:b9:b4:22:45:f1:cd:c1:6c:5a:34:ed:e6:91:47:
7d:dd:90:38:50:ad:26:1a:26:7e:e7:b8:49:a2:61:aa:a5:8f:
19:f1:c0:ce:b6:72:67:96:74:67:93:98:65:ad:d3:50:f8:bf:
24:88:0d:e7:83:9e:f7:e3:d9:0c:ef:9c:c7:99:96:3f:2e:79:
55:f7:45:6c:5d:db:d3:31:0b:26:70:51:c5:d7:55:b9:f6:60:
1a:aa:29:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:04:53 2026 by rpki-client