Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
File: 1flHhtA2aFRAkBo9zlozTPEycqA.mft (raw, json)
Hash identifier: +NxwoDYla7XmDex/OKXBQalmmrKqNMRfoOMZOyo/cBw=
Subject key identifier: 94:C5:75:5C:63:E7:C7:5C:33:D8:5E:42:78:8F:9B:18:BC:B7:55:7A
Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
Certificate issuer: /CN=d5f94786d036685440901a3dce5a334cf13272a0
Certificate serial: 01A0D3153EF584680FE3FF8598AA2DF263AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
Manifest number: 0EBE
Signing time: Thu 24 Sep 2026 11:03:00 +0000
Manifest this update: Thu 24 Sep 2026 11:03:00 +0000
Manifest next update: Fri 25 Sep 2026 11:03:00 +0000
Files and hashes: 1: 1flHhtA2aFRAkBo9zlozTPEycqA.crl (hash: ujGsBOk9qa9OXVmD5tcAsnRFjcAMiM/+x79iHR0U//g=)
2: P79D1v19Ian523KEZhSWszXoZD0.roa (hash: XkrTvVGVwlwgPhzg8wu1CLzCIaP1i1FjUsoY2a47FY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:3e:f5:84:68:0f:e3:ff:85:98:aa:2d:f2:63:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0
Validity
Not Before: Sep 24 11:03:00 2026 GMT
Not After : Sep 25 11:03:00 2026 GMT
Subject: CN=94c5755c63e7c75c33d85e42788f9b18bcb7557a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c0:2e:5f:59:d3:7b:aa:16:56:67:fc:4a:4d:
83:4f:63:d3:6b:06:d4:a2:84:64:7c:61:fc:78:4a:
31:5c:23:df:d5:43:ca:01:94:26:fa:f5:90:00:60:
9f:3d:3d:06:d7:f5:13:27:27:9e:0a:8b:b6:3c:70:
89:dc:b6:b0:82:77:f1:4a:63:7b:74:93:f6:49:c2:
19:37:ab:b3:46:cd:cf:a9:27:40:c9:06:f2:39:c0:
06:23:8f:c6:d8:d7:91:ae:2d:5f:56:dd:53:69:63:
dc:20:e1:c1:ba:6a:e6:6d:5b:11:f2:f7:e8:0a:60:
86:dc:ca:32:78:0c:61:d4:cd:d3:cb:7e:15:78:22:
3b:69:25:01:a2:92:aa:b2:0a:ad:be:79:74:3d:5b:
bc:6d:3c:43:b5:b0:3b:54:00:4a:f2:65:8b:4e:13:
92:1c:d9:9e:41:cc:77:dc:4f:de:9d:42:2a:00:54:
db:6f:89:47:9e:66:c3:48:40:f5:58:38:83:0f:4f:
e6:8c:ad:4c:b8:e4:d5:02:f2:5a:fc:d7:86:2a:c2:
ab:29:b3:d7:ce:30:3d:1b:66:37:a2:58:7d:f6:c1:
5e:0f:8c:b9:0b:33:dd:03:ae:05:8b:cd:48:47:17:
eb:e9:d1:4b:a3:34:e1:55:a4:7f:b4:a9:54:1a:47:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C5:75:5C:63:E7:C7:5C:33:D8:5E:42:78:8F:9B:18:BC:B7:55:7A
X509v3 Authority Key Identifier:
keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5a:0b:10:6d:04:e4:63:e3:8f:4b:34:10:e3:09:7a:63:c1:
2d:7f:8a:f2:52:e1:15:4d:2c:a1:da:00:48:d4:c4:23:b1:4c:
00:c2:99:3b:e0:41:39:3a:b3:68:af:f9:24:e1:c1:b5:f1:31:
6d:f4:99:07:6e:2d:6e:b4:f9:e1:e0:19:3f:80:5e:80:68:ca:
7c:43:c1:22:ab:1c:71:e6:30:7d:2e:92:d3:53:ca:e1:03:e1:
84:b9:83:2b:3b:f6:d0:da:0e:6a:ff:f9:ab:27:48:f6:50:df:
b1:4d:cb:1f:7f:47:d4:e6:4d:ec:fb:70:79:8e:6e:5f:85:0d:
71:16:d0:ad:fd:3e:ac:64:06:de:ac:f7:a8:9a:cb:18:5c:c9:
c4:32:e9:61:53:f2:56:13:15:3c:74:7c:25:ea:ae:4e:89:56:
7b:8c:55:3d:54:49:59:15:21:02:81:7b:fe:27:1d:68:66:6d:
65:77:d4:28:fe:fa:75:4a:f8:6b:de:97:5c:01:98:5c:eb:83:
4e:d0:1a:09:e3:86:7c:ba:96:f8:94:84:39:90:39:78:cf:23:
69:a1:ae:ef:e4:3f:cf:08:9a:09:7f:ff:82:bb:a0:46:5e:46:
29:2f:03:84:50:e3:0d:3e:92:6f:2c:81:32:cd:93:5f:de:c3:
e1:57:60:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:19:27 2026 by rpki-client