Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: fp0fIQJl+2hYfyYtgL2WiL8PRWYq/MTH+66vJHL+Zx8=
Subject key identifier: 0C:0E:AA:7B:92:A8:26:B2:86:D9:A4:41:AA:79:7D:07:7E:02:59:2D
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 01A107DC9D3F27E2DBCF9F892142A1D2D499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 09C9
Signing time: Sun 04 Oct 2026 17:01:00 +0000
Manifest this update: Sun 04 Oct 2026 17:01:00 +0000
Manifest next update: Mon 05 Oct 2026 17:01:00 +0000
Files and hashes: 1: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: ZaqPahpbDIF+ndyeCUeaVCy1Jq+E19ZpXnuPQgbPU44=)
2: Y3xy27kzFffMPewtUpDREyfJrvY.roa (hash: tx10cTi8DLhzNW2hd7QG0hYENx9jGu/u+XgKab2XuPA=)
3: ZAUQOx8ZIoF_38vOnWSRuk7mSCM.roa (hash: xFSZDnEjwVDIcL0zURA7Oo3gZI5+yugqjcFTXmh2x0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:dc:9d:3f:27:e2:db:cf:9f:89:21:42:a1:d2:d4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: Oct 4 17:01:00 2026 GMT
Not After : Oct 5 17:01:00 2026 GMT
Subject: CN=0c0eaa7b92a826b286d9a441aa797d077e02592d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:0d:bf:66:07:9f:19:62:07:ea:e0:0f:c7:
ae:01:ea:d0:30:5f:d7:eb:4f:b2:c6:2f:f0:d8:90:
8a:bd:f6:2d:6f:05:fe:73:f3:d9:3e:cb:e0:0d:4c:
41:ad:68:f6:3d:2f:ec:b5:1d:a1:a9:5e:f3:d1:05:
fb:09:7f:cd:20:35:e3:25:dd:38:66:06:a2:7a:79:
20:81:3e:b8:df:4f:13:62:d7:f5:2a:d5:39:91:f1:
06:57:79:fa:58:c4:91:1f:7f:5c:6b:d7:30:a8:7c:
13:5d:af:88:b3:84:4f:a4:29:95:c7:6c:9a:eb:f8:
91:22:48:d1:a5:b3:90:51:bd:98:ae:2c:31:5d:77:
42:71:24:cd:7d:ed:81:c8:e4:1a:07:9c:bf:1a:ac:
9e:29:08:bc:7b:21:e2:7b:80:99:ca:63:f1:68:ef:
ea:34:48:ea:33:05:f9:83:32:08:2e:99:f7:d2:94:
15:c6:e6:8f:e0:2f:0a:1d:46:b1:3a:42:36:f6:be:
5c:c9:ed:0e:9b:41:1a:0b:0b:d2:d4:02:d4:f3:5d:
b8:a0:21:12:07:98:58:cd:91:d0:38:1a:47:ce:87:
11:8a:8d:83:83:b2:2c:39:2a:c8:1e:ae:ef:1a:4d:
83:6b:88:e3:73:b5:6c:2d:78:c8:96:0d:c2:ab:a8:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0E:AA:7B:92:A8:26:B2:86:D9:A4:41:AA:79:7D:07:7E:02:59:2D
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5b:c9:c8:40:16:0c:41:fe:8c:bf:ed:74:2a:4b:8a:f5:db:
d1:42:74:bd:21:b5:56:8e:97:f5:45:a5:83:ae:b5:6f:c2:53:
c4:97:c1:55:fb:83:68:2b:0e:51:93:ae:71:62:e7:52:b0:6f:
ca:f3:99:f1:89:e8:a3:a7:7c:f0:04:5b:55:49:ba:77:80:e4:
5e:dd:96:e0:df:b8:8f:fc:29:7f:08:72:13:8a:08:2d:df:51:
cd:46:c1:fa:72:0c:bc:84:e7:6c:46:15:33:78:2d:06:51:51:
8d:e9:ee:5f:a4:5e:93:44:9c:8c:10:ea:17:39:aa:4a:13:d5:
2b:01:57:18:9a:8c:2f:36:0b:06:75:c5:19:0c:f5:43:29:25:
6c:62:a2:e9:2d:62:f2:c3:0c:73:3c:8d:6a:c1:73:f0:92:69:
04:47:79:6b:76:91:35:35:a7:d2:82:b6:4a:b1:9a:56:1d:7e:
36:ab:d3:77:53:58:fc:26:69:08:b9:81:c7:ab:a7:bf:f3:3b:
e3:75:fe:8d:19:59:3b:ce:ac:e6:35:6d:9c:95:39:6e:73:1f:
9d:de:08:21:ca:e2:09:d1:a1:ea:ef:db:49:90:12:4b:76:68:
8b:35:dd:52:33:fe:27:48:89:b3:26:62:0d:7a:63:28:f3:e0:
81:cd:b8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:50:39 2026 by rpki-client