Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: wY7wFeLXzLYciZNEa8L6f60Fe9atuuHKixB75rxv26Q=
Subject key identifier: 6C:DF:BF:B2:B9:5C:BE:93:37:6A:07:DE:5A:F2:14:77:D4:42:9F:BF
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 01A0CB59E82D8C9E51AA85FEA7FB434FE9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 0A4A
Signing time: Tue 22 Sep 2026 23:01:01 +0000
Manifest this update: Tue 22 Sep 2026 23:01:01 +0000
Manifest next update: Wed 23 Sep 2026 23:01:01 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: wX3hYv7u686v6KIYFf2qrGDTpudGnXgHmzPHPjuORK0=)
2: rMIMTjbHaNV7xR9gPtw0A_pkuLU.roa (hash: NFH0+DidyU00k9B3v8wVAxHBrFD7dy/UWv2YYeeqFAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:e8:2d:8c:9e:51:aa:85:fe:a7:fb:43:4f:e9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Sep 22 23:01:01 2026 GMT
Not After : Sep 23 23:01:01 2026 GMT
Subject: CN=6cdfbfb2b95cbe93376a07de5af21477d4429fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:e7:76:83:fd:91:42:bf:fc:70:1c:c1:ab:
19:08:75:40:99:3c:da:ca:21:5b:76:a7:1c:b8:91:
67:4d:00:c3:17:1c:be:19:69:36:df:b3:ab:97:6f:
d4:55:e9:1c:b6:b8:f1:57:ad:93:29:be:71:1b:9c:
bd:b1:4b:f8:2e:da:60:49:7e:61:98:5a:e3:e6:8f:
ef:7a:57:ba:51:80:94:2e:6f:72:af:2e:b4:6e:47:
ba:7c:b7:8f:cb:95:6f:a6:8e:75:92:74:38:28:52:
9b:ac:ad:8c:f3:4d:20:b7:96:76:ba:51:01:0e:8f:
fb:55:81:b5:c6:66:73:43:88:5d:af:5a:64:3e:ba:
be:4f:ce:2a:2d:36:28:c9:86:e1:f3:cd:3c:50:6e:
0f:01:e6:2e:10:10:f0:51:ae:21:cd:52:ea:9c:ce:
64:3f:c3:30:fd:e1:03:40:ee:43:b0:96:a8:b6:97:
6c:49:d9:08:36:7a:5b:7f:fb:f6:ba:74:44:bc:55:
52:f4:52:da:6d:08:98:69:2d:a0:c2:52:f9:f8:ad:
db:34:a5:f5:0b:f2:e0:8d:dd:93:da:88:49:93:39:
ed:04:b5:6a:53:2d:93:65:d8:db:2c:b8:58:5f:57:
39:3a:9f:af:a0:80:34:01:35:dc:c0:0c:d2:b5:ac:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DF:BF:B2:B9:5C:BE:93:37:6A:07:DE:5A:F2:14:77:D4:42:9F:BF
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d9:af:df:fc:b2:24:a2:4a:5b:6b:69:27:7a:c3:a4:0d:2f:
e7:f5:95:1f:bc:19:93:1c:ac:da:2d:ea:84:d6:7f:12:2f:7f:
60:1d:48:87:ac:33:4b:cc:14:f4:7a:12:39:08:68:3f:c6:e1:
60:ad:e4:50:58:73:c9:60:49:78:5f:e8:6b:a2:c4:ca:db:ac:
d2:29:af:81:e2:5a:0e:f4:83:24:0c:53:08:6d:eb:b8:81:6d:
31:bc:4f:bf:1d:36:c4:46:ed:74:23:27:26:3f:75:46:3e:49:
f8:37:53:f9:49:5d:81:8d:6a:e6:ea:a8:a7:54:22:8f:92:a6:
e2:da:78:c5:59:32:48:07:c5:3c:b8:d0:13:25:2b:9e:4f:2b:
13:bd:05:ad:e7:73:ca:5d:6e:6a:50:e4:bc:fd:2d:c0:8c:a3:
30:23:04:0a:14:d4:0a:1d:88:11:5d:ff:a1:ab:30:2d:84:54:
4a:d0:aa:35:45:91:16:c0:4d:b4:d7:4c:e0:23:2d:6e:98:94:
8c:73:9d:50:a3:bb:10:00:8e:64:11:65:14:a4:43:64:dc:5b:
64:7b:8f:a9:01:32:3a:54:ac:98:84:f7:2d:4f:f7:ee:bc:4c:
17:c1:e8:51:f4:5f:bc:6e:df:49:c5:f6:ec:7e:32:13:e5:12:
b5:f7:97:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:42:24 2026 by rpki-client