
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
File: 1dhc7fCdgveSwYDZClqaI21qcFw.mft (raw, json)
Hash identifier: QcHe3iP2VJYFrKS6Zl45jb4mZm1QFVyQb5MGyVZ5uLI=
Subject key identifier: 73:4C:AF:04:11:DB:06:FD:5A:BA:B3:12:92:F7:FC:E1:6E:3F:90:72
Authority key identifier: D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C
Certificate issuer: /CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
Certificate serial: 01A0D0800EAC34E928EFB949F3A11EB405D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 23:00:48 +0000
Manifest this update: Wed 23 Sep 2026 23:00:48 +0000
Manifest next update: Thu 24 Sep 2026 23:00:48 +0000
Files and hashes: 1: 1dhc7fCdgveSwYDZClqaI21qcFw.crl (hash: iWOxUJJi79vZpVIckWRNsx+fkHmp1hN1SOzadAmhPJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:0e:ac:34:e9:28:ef:b9:49:f3:a1:1e:b4:05:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
Validity
Not Before: Sep 23 23:00:48 2026 GMT
Not After : Sep 24 23:00:48 2026 GMT
Subject: CN=734caf0411db06fd5abab31292f7fce16e3f9072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:6f:32:ab:0c:b2:46:16:79:83:18:f3:29:
e9:c2:59:65:00:cd:03:fa:a5:cf:37:3c:2f:bb:4a:
87:4d:ec:7b:05:99:bc:6a:ee:ca:91:d0:24:01:51:
37:36:4e:a6:14:38:f2:bf:4c:15:bc:27:33:89:fd:
aa:b4:9c:37:77:87:37:54:9f:a9:32:a7:d9:3c:d7:
8d:f6:da:02:6e:f7:ba:f5:32:63:72:7d:26:df:a2:
2f:b3:a7:dd:93:89:65:0c:05:47:1c:f8:21:16:1c:
12:f4:03:cb:a3:22:fe:8a:1f:ab:94:bc:af:81:0e:
9d:2f:2f:18:4a:5e:0e:5d:d2:74:21:05:8f:7b:ae:
5f:e5:49:e5:59:96:5b:3f:f8:a8:99:29:03:66:91:
5f:bd:bf:2a:d4:5b:ff:c7:d3:37:b2:02:57:be:1c:
0e:8d:c9:91:86:64:a0:04:9c:7d:fb:2d:28:77:46:
67:18:06:6f:f0:b9:f5:3a:bc:a8:32:bb:4e:43:d7:
54:11:d6:4d:b9:4e:31:aa:19:25:a0:7e:5f:b2:50:
5c:dc:77:17:da:79:83:fa:7b:42:a7:d9:ec:c3:3b:
1c:b8:d7:f2:09:70:25:29:0c:7c:fa:db:ef:d5:e5:
1c:00:4d:08:31:6e:b2:07:5b:26:4e:2a:b9:2b:d2:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4C:AF:04:11:DB:06:FD:5A:BA:B3:12:92:F7:FC:E1:6E:3F:90:72
X509v3 Authority Key Identifier:
keyid:D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a5:25:9c:41:9b:9b:65:ea:b4:b9:bf:8f:ca:23:4a:f5:ff:
25:6c:bf:e6:a8:88:df:6d:ba:bc:63:57:71:83:a5:04:7e:e3:
e5:25:9c:7c:d8:fc:79:76:2c:e5:7b:6c:f8:0d:ad:f8:9f:1c:
42:4c:08:1f:16:56:a4:6e:b6:81:e2:ac:2f:c0:b9:ce:8e:ec:
b6:19:f3:1f:6e:2e:a8:d5:5c:5b:07:04:2f:7d:03:53:53:ad:
67:41:46:e4:4b:e9:68:06:04:89:ad:2d:95:10:93:cc:f7:80:
72:41:11:30:ba:0b:3c:33:fa:79:63:a7:ac:ec:ca:08:b2:e0:
84:80:af:20:a1:58:0a:3c:c1:88:1d:3f:f0:1d:0c:2f:80:a0:
7a:e7:6a:18:55:f5:c4:55:d2:74:ef:c8:a0:e4:a0:a6:73:ba:
78:ca:51:7a:91:c6:56:9c:93:30:af:19:55:b9:a3:a1:6e:cf:
76:cf:1d:4e:8b:ed:71:ac:74:9d:bc:b0:03:6a:a0:32:a6:25:
72:5e:c5:aa:75:bc:ae:d6:37:7e:43:52:fd:5d:ba:3f:49:cd:
08:1d:d0:6d:7b:52:55:13:b4:0c:b3:35:26:51:7f:17:76:0b:
79:4c:eb:46:ce:ba:27:44:69:9a:72:cc:02:d5:bb:ac:a0:1c:
af:a5:8c:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQgA6sNOko77lJ86EetAXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDg1Y2VkZjA5ZDgyZjc5MmMxODBkOTBhNWE5YTIzNmQ2
YTcwNWMwHhcNMjYwOTIzMjMwMDQ4WhcNMjYwOTI0MjMwMDQ4WjAzMTEwLwYDVQQD
Eyg3MzRjYWYwNDExZGIwNmZkNWFiYWIzMTI5MmY3ZmNlMTZlM2Y5MDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvNvMqsMskYWeYMY8ynpwlllAM0D
+qXPNzwvu0qHTex7BZm8au7KkdAkAVE3Nk6mFDjyv0wVvCczif2qtJw3d4c3VJ+p
MqfZPNeN9toCbve69TJjcn0m36Ivs6fdk4llDAVHHPghFhwS9APLoyL+ih+rlLyv
gQ6dLy8YSl4OXdJ0IQWPe65f5UnlWZZbP/iomSkDZpFfvb8q1Fv/x9M3sgJXvhwO
jcmRhmSgBJx9+y0od0ZnGAZv8Ln1OryoMrtOQ9dUEdZNuU4xqhkloH5fslBc3HcX
2nmD+ntCp9nswzscuNfyCXAlKQx8+tvv1eUcAE0IMW6yB1smTiq5K9KpkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNMrwQR2wb9WrqzEpL3/OFuP5ByMB8GA1UdIwQY
MBaAFNXYXO3wnYL3ksGA2QpamiNtanBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YTU2NmMtZjk5ZC00ZTcxLWEyNzAt
YjFmN2M3MWIyMDFiLzEvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82YTU2NmMtZjk5ZC00ZTcxLWEyNzAtYjFmN2M3MWIyMDFi
LzEvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqUlnEGb
m2XqtLm/j8ojSvX/JWy/5qiI3226vGNXcYOlBH7j5SWcfNj8eXYs5Xts+A2t+J8c
QkwIHxZWpG62geKsL8C5zo7sthnzH24uqNVcWwcEL30DU1OtZ0FG5EvpaAYEia0t
lRCTzPeAckERMLoLPDP6eWOnrOzKCLLghICvIKFYCjzBiB0/8B0ML4CgeudqGFX1
xFXSdO/IoOSgpnO6eMpRepHGVpyTMK8ZVbmjoW7Pds8dTovtcax0nbywA2qgMqYl
cl7FqnW8rtY3fkNS/V26P0nNCB3QbXtSVRO0DLM1JlF/F3YLeUzrRs66J0RpmnLM
AtW7rKAcr6WMjw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:08:04 2026 by rpki-client