Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: 3z0vJB40AJyRXai3UI2DEHwVw0DkwxxFSB+aNsqmUYs=
Subject key identifier: B5:45:2A:C9:55:89:94:D0:6A:51:CE:5C:8A:D5:B0:99:ED:2D:52:0A
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 01A0CDB59310A0BFFD1401A5F7E1188E48F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 0660
Signing time: Wed 23 Sep 2026 10:00:23 +0000
Manifest this update: Wed 23 Sep 2026 10:00:23 +0000
Manifest next update: Thu 24 Sep 2026 10:00:23 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: F36x6NWwPM60zIfXKZI1tDN9m9PheklUINDY8JfCSBs=)
2: 94RSIfdi4Wu_3u_5Fxt7y2P-IZg.roa (hash: KQBiX0qPyskq77ewW4ksZcWfJF9WrYtw2Dq9ll73ZI4=)
3: nKSVCDWOLc_L-u8R349_O7dpE-0.roa (hash: 3mbBV8zfrwDYTj5UVPeGBqMVBLvBI0mE8QTCzzuoTPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:93:10:a0:bf:fd:14:01:a5:f7:e1:18:8e:48:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Sep 23 10:00:23 2026 GMT
Not After : Sep 24 10:00:23 2026 GMT
Subject: CN=b5452ac9558994d06a51ce5c8ad5b099ed2d520a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:4c:0d:3f:e4:6d:44:5b:6b:0f:22:9f:21:
76:c3:23:b2:7c:8c:69:33:74:e3:dc:1f:94:c9:51:
2b:a1:54:b8:ae:63:ff:06:6b:e9:5b:13:42:4c:48:
b9:9c:4d:e1:4e:56:e3:d2:7a:bc:6f:f9:40:94:33:
af:c5:19:c5:2d:1e:ab:f0:d2:31:db:8b:25:2d:44:
48:73:5a:51:4d:bb:5f:09:39:92:73:38:ca:62:59:
21:6c:f1:96:35:9f:9d:cf:1e:ad:34:56:89:0a:31:
d3:09:77:56:84:d6:73:46:28:69:59:b2:7d:28:10:
aa:c2:bc:c2:78:d6:20:7b:86:c4:ff:00:d5:f0:72:
d7:2f:b7:67:3e:3a:6e:59:a7:fe:db:52:25:24:4a:
ec:c4:e9:a7:b1:ea:2d:74:be:c2:70:2c:1c:98:9d:
4d:e9:72:20:b5:95:4c:05:d8:59:1f:67:23:42:5c:
27:55:73:5b:a5:0c:22:6a:cb:aa:61:1d:04:f0:f5:
dd:1c:d7:3a:ca:72:7f:d9:a7:67:1d:77:87:2e:28:
21:54:c8:b1:bb:1d:56:51:d0:4a:13:f9:5e:3a:4e:
67:dd:9f:a3:de:23:5e:b6:e3:80:3d:16:24:37:48:
1c:91:01:0a:49:cb:a9:7d:68:0d:37:b5:c1:ca:df:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:45:2A:C9:55:89:94:D0:6A:51:CE:5C:8A:D5:B0:99:ED:2D:52:0A
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a2:c5:98:68:91:b6:5b:57:27:ea:52:2e:4c:50:6f:d4:c2:
11:a1:35:c0:9d:a3:a0:3c:c9:6b:e5:a6:c3:e2:b5:0a:47:0a:
45:b6:cc:ec:cf:93:28:7e:6d:04:44:c5:c3:4e:a7:b0:a2:0d:
0c:88:1b:a3:30:98:64:47:83:4e:07:e1:17:13:16:ab:bd:c7:
7d:25:1b:86:0c:87:0a:97:a2:a9:44:19:42:f8:29:f4:62:16:
7a:9d:13:95:a4:c9:08:b7:2f:ec:bc:e1:a2:fb:c1:2d:a4:2a:
fb:83:56:d9:b9:07:8d:af:23:87:7f:23:41:a2:a9:39:be:65:
33:52:61:ae:ef:d2:78:a2:3f:4b:95:b4:e2:29:5a:45:ce:a9:
26:08:35:f2:17:aa:e6:16:03:df:b2:96:d4:8f:9c:30:1d:08:
80:64:53:44:93:cd:22:1d:22:8c:ba:f4:ae:85:92:64:92:ad:
9f:cc:c6:88:62:00:e9:83:1f:38:00:df:b8:42:05:1d:2b:1c:
8b:24:1d:ec:22:49:35:a9:1d:be:20:cc:40:f0:24:0d:99:e0:
3c:92:d1:97:db:dc:9e:ad:ee:80:d2:16:8d:09:de:af:d1:98:
57:6a:ac:62:fe:76:c8:61:03:7c:5e:13:28:b7:29:fd:3c:45:
81:f4:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:09:20 2026 by rpki-client