Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json)
Hash identifier: xtb8z96jFvLSoGbkwx2n4p/4STKTrX9P5lcOUGEpi08=
Subject key identifier: 1E:0C:89:3B:E0:02:5C:22:4A:2E:1E:70:B2:92:B4:2D:E4:A3:FE:67
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 01A0D1244D8B990EA49EED957A08BA912A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 02:00:12 +0000
Manifest this update: Thu 24 Sep 2026 02:00:12 +0000
Manifest next update: Fri 25 Sep 2026 02:00:12 +0000
Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: f925J89/HydHB/6IrzGSutDDNcEXAXKI1xBUKuVSwL0=)
2: HyHzV1MU9ElmfLFYo26pHGiN3IQ.roa (hash: FAwtBrWvr9mjLRzQVdNQzXl4BGzCudYJ6kq3X7cDbdU=)
3: xc2N92zCzE8dOyiUB1DKEECW9u0.roa (hash: zdTFoZAtDppROLcUt1HO+ZMDOiFUGUnqXWfKYmpZP6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:4d:8b:99:0e:a4:9e:ed:95:7a:08:ba:91:2a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Sep 24 02:00:12 2026 GMT
Not After : Sep 25 02:00:12 2026 GMT
Subject: CN=1e0c893be0025c224a2e1e70b292b42de4a3fe67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:ec:b7:cf:4b:a0:a7:ad:52:a5:27:2a:d3:
4f:50:cf:a5:ca:b5:9e:f1:e5:2e:99:b2:ab:5c:bd:
34:47:1e:1e:72:a7:06:4b:03:43:84:22:04:f9:ce:
3a:ca:d6:27:13:e7:60:e8:24:e6:1f:36:c6:e9:6f:
8a:2d:82:98:ee:c9:8f:4b:33:63:69:42:3e:2c:d7:
cb:39:b5:6d:12:85:c9:3a:55:b7:fe:ca:f5:73:32:
cc:21:e9:12:cf:13:83:90:ff:19:22:66:99:0f:1f:
e0:d9:11:19:96:15:f7:1c:8b:51:bc:59:9e:17:00:
0f:6e:b8:26:d7:b5:08:67:4f:f3:f5:95:be:df:12:
ac:ba:bc:8e:75:7b:73:39:c2:ae:84:f1:c6:e9:4a:
7e:ee:cc:f9:34:41:4f:4f:3e:5b:c0:00:ae:f6:d7:
0c:32:ca:02:c1:a5:76:b2:73:02:20:e4:b7:80:25:
fa:ae:70:20:16:3f:ca:97:85:54:cb:8b:1d:8a:7e:
13:29:4e:29:64:03:e7:4d:ba:0a:09:2a:d2:19:f2:
f3:4c:c1:f8:07:18:81:c6:a3:51:39:1b:ba:c7:e3:
ee:3f:32:58:b0:a9:3f:03:4b:7c:76:ee:e8:91:fd:
0f:76:ba:57:cd:34:be:28:bf:6d:6e:e1:d2:12:ea:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0C:89:3B:E0:02:5C:22:4A:2E:1E:70:B2:92:B4:2D:E4:A3:FE:67
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0b:c3:c0:e5:d8:c6:fd:9a:0b:86:63:e4:60:d4:a3:f4:da:
d9:fd:60:e6:21:80:72:a1:db:1c:db:2f:8f:8f:2a:29:31:ff:
ff:62:7e:99:84:5d:99:ce:a3:42:cf:d8:e1:1a:57:f2:d0:74:
91:16:f2:c0:4d:8e:33:37:f5:13:f5:67:d5:e1:07:b9:ae:ac:
98:5b:c6:f7:01:4a:19:71:65:23:c4:2a:4e:90:ca:3b:84:bd:
c5:d3:17:a1:3a:0d:72:bd:0b:ed:c1:37:c1:67:08:48:4a:21:
7c:c5:6a:e2:59:00:8b:dc:b7:2c:e5:3d:bb:68:f3:f2:8a:eb:
37:23:b5:be:b1:99:50:1a:f9:3a:58:c3:35:12:df:ed:c8:29:
69:47:89:d6:58:da:22:b2:a7:17:32:57:a7:38:26:d8:9d:94:
34:9d:3c:35:eb:a4:41:ee:21:8f:c3:64:26:fb:6a:6f:62:02:
e8:03:c0:fe:56:82:7c:51:35:46:44:b0:fc:44:46:c9:c4:9a:
1a:1f:5a:0b:43:e0:3f:f0:18:90:0b:e7:ba:ca:af:d4:0a:e7:
56:ec:08:4a:a5:6a:5e:c4:96:be:df:bf:7e:d1:e4:8a:8f:69:
0d:57:de:a7:f0:03:b7:cd:8a:77:17:22:57:b1:ff:89:bc:2e:
8b:6d:c1:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJE2LmQ6knu2Vegi6kSpKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZjkyMTI5ZGY3YWFhNzE1N2UxNTk3M2MyNDc1M2UxMThj
OTA1N2QwHhcNMjYwOTI0MDIwMDEyWhcNMjYwOTI1MDIwMDEyWjAzMTEwLwYDVQQD
EygxZTBjODkzYmUwMDI1YzIyNGEyZTFlNzBiMjkyYjQyZGU0YTNmZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMXst89LoKetUqUnKtNPUM+lyrWe
8eUumbKrXL00Rx4ecqcGSwNDhCIE+c46ytYnE+dg6CTmHzbG6W+KLYKY7smPSzNj
aUI+LNfLObVtEoXJOlW3/sr1czLMIekSzxODkP8ZImaZDx/g2REZlhX3HItRvFme
FwAPbrgm17UIZ0/z9ZW+3xKsuryOdXtzOcKuhPHG6Up+7sz5NEFPTz5bwACu9tcM
MsoCwaV2snMCIOS3gCX6rnAgFj/Kl4VUy4sdin4TKU4pZAPnTboKCSrSGfLzTMH4
BxiBxqNRORu6x+PuPzJYsKk/A0t8du7okf0PdrpXzTS+KL9tbuHSEuquGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4MiTvgAlwiSi4ecLKStC3ko/5nMB8GA1UdIwQY
MBaAFNT5ISnfeqpxV+FZc8JHU+EYyQV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUt
OWYzOGM4YjhhOTI4LzEvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC85Y2ZlNWQtNTc3MC00YjVkLTg5MzUtOWYzOGM4YjhhOTI4
LzEvMVBraEtkOTZxbkZYNFZsendrZFQ0UmpKQlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgvDwOXY
xv2aC4Zj5GDUo/Ta2f1g5iGAcqHbHNsvj48qKTH//2J+mYRdmc6jQs/Y4RpX8tB0
kRbywE2OMzf1E/Vn1eEHua6smFvG9wFKGXFlI8QqTpDKO4S9xdMXoToNcr0L7cE3
wWcISEohfMVq4lkAi9y3LOU9u2jz8orrNyO1vrGZUBr5OljDNRLf7cgpaUeJ1lja
IrKnFzJXpzgm2J2UNJ08NeukQe4hj8NkJvtqb2IC6APA/laCfFE1RkSw/ERGycSa
Gh9aC0PgP/AYkAvnusqv1ArnVuwISqVqXsSWvt+/ftHkio9pDVfep/ADt82Kdxci
V7H/ibwui23BRA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:34:59 2026 by rpki-client