Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: atfg14NAtCkGx82jjBwZMMkDS98K98Zp8jevGjGfctY=
Subject key identifier: AC:F9:D0:AA:A7:2A:E4:E2:D2:EA:91:53:8C:9F:B8:49:2B:FA:8D:E4
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 01A10E4CA3B7D3AB7A07872D01E7304F541F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 1432
Signing time: Mon 05 Oct 2026 23:01:06 +0000
Manifest this update: Mon 05 Oct 2026 23:01:06 +0000
Manifest next update: Tue 06 Oct 2026 23:01:06 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: VvhzRqrukN0W3HOQednKJ/zYuK3XsLxKwOAYLsKumgA=)
2: QbADnR-7JONR9psZmp25EkZo4_M.roa (hash: 8N891Zzq6DPXhsamgFNwmwRuiKpJQ8ss9kc+k3yiq9U=)
3: kneTFHssdpRkfp917HvR9pp0knM.roa (hash: Q0Z0lTZO2s3Ki+igcl/rjlfo3o507lYeXHkCl1jp7DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:4c:a3:b7:d3:ab:7a:07:87:2d:01:e7:30:4f:54:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Oct 5 23:01:06 2026 GMT
Not After : Oct 6 23:01:06 2026 GMT
Subject: CN=acf9d0aaa72ae4e2d2ea91538c9fb8492bfa8de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:d2:12:a7:70:52:fe:a3:88:ed:1a:d9:9f:
b5:7c:8d:d6:c5:1a:04:b4:e5:52:1a:27:b1:57:c6:
bf:d9:bb:a5:a6:77:e4:92:fa:e0:a6:21:48:f1:16:
4d:03:cc:86:ea:50:3e:8c:65:a7:1c:69:4f:f6:c9:
92:cc:e8:9a:5b:6b:ec:c1:37:cf:69:d5:03:1c:13:
38:5c:9d:94:d7:d9:70:c8:4b:26:21:53:0b:ee:ba:
bc:20:5e:26:91:68:8c:af:51:7e:57:b3:8a:de:04:
fa:73:c1:43:02:a6:e5:be:f6:fb:35:97:11:50:da:
60:6f:93:87:09:3f:bd:90:ff:d1:3b:be:94:70:45:
a6:70:7b:2a:dc:84:ff:98:44:d7:7f:5f:7f:d1:42:
ad:e9:19:df:73:d2:d3:e8:6d:a1:b8:4c:41:f8:1f:
5d:e3:cb:15:9a:f5:81:ad:66:32:ce:49:4d:c2:1c:
51:da:aa:d6:d9:bb:eb:56:75:08:2f:83:35:f4:2c:
f1:97:1b:71:39:0b:7c:db:41:16:e7:01:46:6c:bf:
c2:fe:09:b6:0e:14:ce:ca:6c:fe:be:b7:cc:ea:9c:
3f:aa:9f:10:4e:5f:91:0d:1e:0a:21:34:c5:d2:f1:
ea:ea:af:a9:39:96:dc:5f:9e:24:25:a1:2a:43:2b:
7c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F9:D0:AA:A7:2A:E4:E2:D2:EA:91:53:8C:9F:B8:49:2B:FA:8D:E4
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c3:98:18:b7:af:05:7f:47:50:f2:a5:c6:59:b5:37:4e:ff:
18:9c:21:33:14:15:95:83:b6:c4:4b:4c:fc:e5:31:cd:e2:15:
2c:81:9d:ef:d2:7c:da:4c:28:20:6c:b0:ce:1f:30:bf:ed:ff:
1f:7b:45:dd:9b:17:18:5e:0b:0b:56:b1:91:a7:07:27:ed:34:
45:a0:13:10:e4:84:f0:9a:d0:40:d4:d3:e7:2f:f1:70:af:6d:
f7:50:71:b6:d7:12:08:3f:d6:5b:d7:2f:2b:87:b5:a6:11:6a:
91:70:05:50:51:f3:f1:73:2b:5a:6c:56:c3:93:d8:31:c5:91:
88:43:ba:87:6d:f7:15:22:97:92:7e:1b:c8:e1:22:3a:40:79:
e2:c6:af:5d:6d:03:f6:0a:52:ca:41:47:6d:da:80:53:49:96:
7f:73:94:9f:a9:ec:4e:e2:1a:46:d5:ea:61:57:25:39:58:51:
14:66:78:58:2b:2e:e0:9a:4c:74:de:9b:25:5a:55:94:27:85:
00:91:e7:5b:19:db:d0:d5:90:5e:a4:33:56:98:0b:0b:36:f8:
f3:cd:18:7e:4e:15:79:3d:37:26:24:8f:f0:de:f6:0e:49:e7:
61:77:14:eb:d5:8c:57:d3:a1:bd:fe:c3:df:ad:17:3d:c3:32:
33:b6:8a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:45:01 2026 by rpki-client