Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File: 1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier: iqSBZaLIXlHO79s3wL0OCXQsEGkK+7tTlQfhAJzkqdA=
Subject key identifier: FD:31:4D:87:CE:DB:CE:B2:C5:41:16:EB:60:FB:B2:CF:5B:76:3F:15
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial: 01A0D8040E4F5F0EA5972E6F59233376CC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number: 0D3F
Signing time: Fri 25 Sep 2026 10:02:19 +0000
Manifest this update: Fri 25 Sep 2026 10:02:19 +0000
Manifest next update: Sat 26 Sep 2026 10:02:19 +0000
Files and hashes: 1: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: dNB129YTRBRZ7C56A7t4PlhuyYep5yG/3xIDazu8ysA=)
2: Ac8C988WG2rKoPAyM0PJx2rNaoE.roa (hash: 89LOHLJ7QAy8vGNQbBqFUdTxIH6fXbqoySpOcf8nHiY=)
3: Hs0IPvXPiiu5SRQabWCm2vLaUng.roa (hash: Jz9KhpCFWy1oS1Y7LmpahQlNI+tRAYvjIo9xoWdqMAY=)
4: IHsIqdWKW3oXqrv8CC_-_K3HeCM.roa (hash: dZCFigPRpz1prER5FdjelyGWWX2YW17+YhrDgGzAMCw=)
5: LpR-LQvQfXymcif_LMaWE0JZD3g.roa (hash: zhvd1luynFJPjxGKrx2N652wizkvdv3su1q7wp46nxA=)
6: URkF_3wWv4caQ7gSHuTsb7r6MGI.roa (hash: Gjnz59P638W/IUVQMIM+Nm7HP3jZwW2uLN6LQ+PZObA=)
7: hnX6AgrOaoGB1pS6d2IohDyU9YY.roa (hash: TyBpxjx7ARYI2/qA9SgTNdxkKgP/znTGEAT9++KH4mc=)
8: vAK4daozNSO59AKfeMnlfBD0uBI.roa (hash: BWOG9qwyAhGR7urMCtstbKhY8qOFr3C+wcw1uSuJqsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:0e:4f:5f:0e:a5:97:2e:6f:59:23:33:76:cc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Validity
Not Before: Sep 25 10:02:19 2026 GMT
Not After : Sep 26 10:02:19 2026 GMT
Subject: CN=fd314d87cedbceb2c54116eb60fbb2cf5b763f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:73:da:ff:29:c5:28:90:35:e5:d8:3e:8c:
dd:4f:9b:d0:be:5b:17:89:91:c3:c4:10:09:5c:81:
08:99:3f:96:43:a7:fc:38:52:04:01:3d:d0:07:af:
34:90:97:92:79:eb:92:05:6b:66:d5:bd:0f:47:e2:
6a:5c:30:3f:4b:e8:9a:7a:c3:34:6a:03:f1:54:54:
96:bb:11:a5:85:c0:35:a1:94:ee:03:56:9e:2c:5c:
da:3a:5b:21:50:84:ac:bb:50:a0:b9:08:98:9b:05:
a6:d1:61:09:12:b4:26:e4:3d:35:46:dd:24:c0:64:
8f:06:57:20:8c:d4:e8:14:28:18:fa:f1:f2:07:6f:
0d:7b:77:0e:c8:fa:40:ac:ce:c7:dd:fa:7a:ea:e8:
52:30:73:35:f0:c8:fd:d7:21:4d:4e:45:7b:e8:b7:
dc:4a:cd:17:ba:d0:6e:b4:3d:f9:28:30:9d:f9:4a:
2e:cd:1d:84:9a:9f:57:52:da:63:49:b5:cc:3a:3a:
8a:7e:05:00:8c:a6:91:89:e3:e2:cc:78:b9:b0:ce:
0e:14:1d:f6:ef:d0:12:14:63:fd:61:bc:b8:66:ba:
47:71:65:ad:fd:cd:27:eb:da:a6:62:23:8a:e5:18:
4e:ce:e7:57:9d:09:af:32:3f:18:3d:5d:2d:0a:fa:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:31:4D:87:CE:DB:CE:B2:C5:41:16:EB:60:FB:B2:CF:5B:76:3F:15
X509v3 Authority Key Identifier:
keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cf:31:07:32:97:31:dd:d1:aa:09:45:a7:ef:1e:69:87:9e:
7b:17:a4:cd:1a:2c:84:c3:99:d7:62:b3:e1:a1:23:31:8d:09:
71:23:88:1f:37:52:08:4e:cc:36:6c:6b:96:c7:73:06:1c:71:
06:93:2c:f9:2e:a7:ea:90:46:e1:77:af:f8:a1:7d:b4:b0:9a:
ef:e1:8d:0d:14:cd:e9:63:e5:75:ec:e7:8a:cc:23:7b:e3:7e:
4f:f3:6f:88:55:fa:e9:db:8d:43:f8:9b:4f:b4:96:10:6e:59:
37:96:39:5b:bd:9e:c8:77:75:62:ee:e0:d8:e0:ab:a6:74:a5:
27:6a:8e:43:c7:dd:a8:77:50:c9:e9:ba:66:24:da:b4:f8:f4:
8a:a3:9e:06:f9:02:6d:ad:76:1f:57:55:85:00:ae:95:86:0d:
96:dd:9d:d6:5f:f7:a5:9e:45:1c:96:3d:51:ac:68:97:d6:51:
b6:7c:c9:60:91:ad:2e:2f:27:4d:24:2d:4c:9e:d8:0c:f0:94:
8f:a6:fe:33:7a:13:38:0e:c6:b7:c1:2a:4f:ae:c5:94:9c:c2:
2c:7b:24:98:1f:46:6c:1b:4b:3e:d9:54:61:a1:5a:29:54:98:
9a:35:93:88:08:d0:82:d1:49:b5:8f:b5:9d:e6:6e:71:d3:df:
c0:af:f9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:18:11 2026 by rpki-client