Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
File: 1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json)
Hash identifier: xGAojl69FmrN7jZ7ugnAKGubQ0FFVfQHLlW+0YHuBVI=
Subject key identifier: 77:D7:49:2E:33:AD:63:08:99:25:F1:77:A2:40:F3:31:B9:DB:8F:15
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 01A0D7CD15EA169C62B5F9F74AD4080FFBE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
Manifest number: 1A8A
Signing time: Fri 25 Sep 2026 09:02:16 +0000
Manifest this update: Fri 25 Sep 2026 09:02:16 +0000
Manifest next update: Sat 26 Sep 2026 09:02:16 +0000
Files and hashes: 1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: pLgYA9Giq8wsTQa09UwI9ALeoxZZ1hQzFW89F+8lqME=)
2: GHpyOsYTNKmVmhPbkKJQADisTWI.roa (hash: o5rzkIYDjSc9NrU4Ms8QG9BjrnW0HZXGqRoHU2L0bZM=)
3: mjCkDc_goLItqwLjBQWXD9IpNSI.roa (hash: FC0jN/3qdUHziMgksh5FjASN2bhckVnKX7P7UBiZNIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:15:ea:16:9c:62:b5:f9:f7:4a:d4:08:0f:fb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: Sep 25 09:02:16 2026 GMT
Not After : Sep 26 09:02:16 2026 GMT
Subject: CN=77d7492e33ad63089925f177a240f331b9db8f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:50:b5:6a:61:d2:73:49:cf:fd:1c:1f:84:7a:
3b:d6:5c:d8:f4:c4:73:43:7e:83:b9:8d:24:ce:c5:
dd:db:df:55:4d:59:41:bb:db:bd:51:22:e3:b0:42:
39:17:b6:81:8f:ae:92:d1:59:f1:3f:d3:ac:3c:1d:
19:64:b3:a8:e7:b9:5d:18:16:99:0e:ac:f3:54:79:
6c:fc:b7:f8:1f:0b:5e:3a:1a:aa:d2:5e:f2:49:93:
84:72:06:5f:29:32:f3:37:c8:0e:1e:2f:02:9b:54:
25:85:47:03:3c:14:c6:a8:db:09:ae:71:fe:b8:a5:
5c:a8:e8:fe:6a:51:1e:02:10:3c:88:d6:a6:69:c9:
cc:f2:50:2a:f1:86:28:13:b1:87:f7:c5:6b:3a:b8:
dd:5d:6b:c5:45:99:14:4e:8d:3f:19:04:c2:bc:53:
2d:cd:42:fe:1a:6b:28:a2:d2:fc:a2:2e:97:3c:79:
36:eb:cd:3c:cc:0d:bb:7f:1f:05:66:dc:b8:7c:96:
5c:2c:ad:09:43:92:da:fc:dc:c0:a6:25:1f:f7:9e:
91:ee:83:03:d9:42:94:c0:0e:63:9b:e0:cc:3c:45:
ae:77:1b:55:a6:ef:db:bb:8d:06:9a:f7:4b:27:28:
43:be:02:d9:90:31:24:af:a1:08:1d:72:9b:2f:3a:
9b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D7:49:2E:33:AD:63:08:99:25:F1:77:A2:40:F3:31:B9:DB:8F:15
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:08:78:fd:03:4b:64:04:90:21:41:a4:61:d3:95:7a:c1:da:
8e:d5:fa:6a:04:27:af:30:f7:97:9f:c9:a0:bc:03:7a:17:aa:
be:7d:80:e4:22:06:76:e6:9f:eb:8d:1d:74:72:8b:d3:74:7e:
e6:c3:71:79:c5:c8:b1:76:c9:b4:9f:6f:59:45:78:6a:61:22:
97:95:73:b2:f5:ec:75:65:3e:53:32:22:08:d4:5a:06:c2:0d:
f8:80:5a:92:3e:54:21:6d:f9:06:d6:82:35:a9:46:dc:92:0e:
28:ac:f5:15:db:5b:42:ae:1c:cd:a2:3c:02:91:48:39:e7:39:
fb:81:7f:a0:cc:48:d1:1a:ec:50:b5:a5:61:7d:81:f8:3b:19:
b9:35:61:65:ee:fb:6b:74:fb:5a:b2:b5:32:4d:8c:fb:b9:11:
d2:f4:b2:cb:d0:4d:93:0a:42:cf:21:19:5f:98:71:82:4c:66:
db:df:ec:6e:e7:59:41:d4:8f:c1:16:df:0d:0e:4c:90:4d:d1:
f3:86:21:11:49:0d:32:af:f1:92:45:1f:fa:69:9c:02:9e:50:
cc:61:d8:18:4a:7d:17:f3:3c:af:b4:d0:12:f9:64:61:a7:0f:
6c:51:05:16:68:cd:8a:65:ec:7c:27:c8:b8:d4:86:1f:1c:ec:
34:3b:11:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:47:26 2026 by rpki-client