Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json)
Hash identifier: hd1lN4F6O7qJocMoCKMNghSz9gwZSI9syXL4Nwe9Xbg=
Subject key identifier: 7E:CD:49:A8:9A:7A:59:45:AA:9C:55:31:85:AB:CF:24:F2:C7:17:08
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 01A0D501DC8B353337F9F8FA5837383C642D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 20:01:03 +0000
Manifest this update: Thu 24 Sep 2026 20:01:03 +0000
Manifest next update: Fri 25 Sep 2026 20:01:03 +0000
Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: yX27HPYOFxp1QDWqjkUGlxFkrvuhnxQgwsEjvdmifV4=)
2: HyHzV1MU9ElmfLFYo26pHGiN3IQ.roa (hash: FAwtBrWvr9mjLRzQVdNQzXl4BGzCudYJ6kq3X7cDbdU=)
3: xc2N92zCzE8dOyiUB1DKEECW9u0.roa (hash: zdTFoZAtDppROLcUt1HO+ZMDOiFUGUnqXWfKYmpZP6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:dc:8b:35:33:37:f9:f8:fa:58:37:38:3c:64:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Sep 24 20:01:03 2026 GMT
Not After : Sep 25 20:01:03 2026 GMT
Subject: CN=7ecd49a89a7a5945aa9c553185abcf24f2c71708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d8:e2:3f:82:7e:ec:11:ae:54:e3:ad:58:ad:
a5:20:de:78:22:52:56:d6:c5:5a:aa:87:d0:ab:04:
52:1d:fb:4a:77:6f:f3:9a:b3:66:f2:b2:21:d6:9a:
38:ed:76:d6:87:0e:95:58:74:c1:f4:94:5d:16:38:
b8:35:46:03:fb:d8:70:f4:a4:0e:c0:45:17:ad:0f:
04:56:6f:d1:b1:17:4f:b9:58:3f:4e:c2:ec:63:50:
01:46:59:a0:32:80:b4:16:05:b3:97:d9:9f:d6:88:
12:16:c3:9e:80:02:c6:0e:cd:c9:d3:26:f8:66:14:
29:29:48:1f:e4:07:3e:16:9c:21:f0:98:24:ae:f9:
86:87:b0:90:ba:10:9a:98:e0:09:72:cc:28:58:01:
57:42:4b:95:51:1e:d8:30:ea:46:91:b7:43:71:f9:
ad:43:d0:ed:f5:18:3b:97:2a:05:c5:80:be:5a:1e:
e6:ad:02:81:72:f5:31:59:ae:4c:83:f8:d6:39:00:
2d:91:10:cc:a0:af:6e:b8:16:2a:bf:7f:ee:2f:f1:
fd:ed:ac:e4:6d:d3:61:28:1e:8b:e4:86:ce:0f:04:
18:53:94:97:cf:af:5e:a6:39:ca:e2:eb:bf:ed:75:
d6:3d:d7:f9:85:b3:f6:dc:f1:42:4a:52:9a:c7:d0:
4f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CD:49:A8:9A:7A:59:45:AA:9C:55:31:85:AB:CF:24:F2:C7:17:08
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9b:8d:b0:c1:25:ef:13:6f:85:f0:23:5a:62:45:8c:80:b0:
ad:89:97:ef:14:2e:f0:93:d1:5f:f3:4f:b5:18:54:42:c2:e7:
2c:f6:44:1e:2f:e9:95:71:62:50:4b:1d:0d:86:5e:20:f0:86:
fe:b9:d2:64:86:98:ec:27:0a:47:ca:67:5a:ab:5e:23:ed:9b:
c6:ac:4f:36:c9:8a:17:71:b3:1e:e4:c5:d5:b9:8a:72:28:a7:
3e:3c:87:2e:70:5d:83:07:6e:29:89:34:30:5f:b0:0b:25:ec:
60:0b:79:7d:f0:0c:30:b2:2e:ed:08:2b:bc:8f:f6:cd:ef:25:
76:5c:b1:44:ea:59:5e:6b:1c:4a:73:2d:f0:29:f4:51:1e:e9:
ab:cc:bb:a5:37:8a:e5:e0:0d:c5:06:ab:43:fb:33:6f:e6:a5:
5a:a2:97:db:b4:40:e2:10:5a:9d:f0:9a:21:e0:b8:a7:62:b5:
61:83:5a:9a:8b:ba:76:20:07:90:76:66:7d:08:e4:2a:b0:e4:
5c:77:1a:d1:e6:88:76:b9:94:42:18:f8:1a:9c:a6:05:e6:6d:
a4:de:70:5e:6c:b0:bb:46:96:3c:34:25:ad:f2:21:bf:10:e1:
f3:77:62:ca:ed:a2:44:60:3a:f0:55:1d:55:d4:c8:39:a5:6b:
56:e0:fc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:48:00 2026 by rpki-client