Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
File: 1fPMerDTZIuMvnYlNTOnFLoAnAM.mft (raw, json)
Hash identifier: l0srVk3npt/0HFG9En0aKU/ELlCaDBY/ko0fUisEYBg=
Subject key identifier: 2C:AC:87:EA:4E:67:2F:59:A9:19:F3:01:7A:5A:AD:63:E7:03:86:18
Authority key identifier: D5:F3:CC:7A:B0:D3:64:8B:8C:BE:76:25:35:33:A7:14:BA:00:9C:03
Certificate issuer: /CN=d5f3cc7ab0d3648b8cbe76253533a714ba009c03
Certificate serial: 01A0D2007439AB2D0A77B65484486ED343B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
Manifest number: E6
Signing time: Thu 24 Sep 2026 06:00:40 +0000
Manifest this update: Thu 24 Sep 2026 06:00:40 +0000
Manifest next update: Fri 25 Sep 2026 06:00:40 +0000
Files and hashes: 1: 1fPMerDTZIuMvnYlNTOnFLoAnAM.crl (hash: hLK2DMxn6B7jj7if5rNXCzOjEXC9uscbKw+kN3g4fP8=)
2: BVJvwz2lh6qW2nCUQKTYIFcAKjQ.roa (hash: kaLfha+ZH+y5bWDO7gX0LkZS212RgAQ6Anv4ur63M5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:74:39:ab:2d:0a:77:b6:54:84:48:6e:d3:43:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f3cc7ab0d3648b8cbe76253533a714ba009c03
Validity
Not Before: Sep 24 06:00:40 2026 GMT
Not After : Sep 25 06:00:40 2026 GMT
Subject: CN=2cac87ea4e672f59a919f3017a5aad63e7038618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dc:72:c6:fe:61:14:1e:60:7b:0e:07:9b:c2:
37:0b:15:b0:48:5f:9e:68:3a:64:c5:df:99:1e:a6:
49:35:87:5d:e0:0b:5d:21:ae:e2:eb:36:36:f9:f7:
90:e0:3a:78:01:7d:06:79:21:e7:10:3e:c5:2e:1c:
1c:dd:6d:80:9c:e1:fe:a8:cd:31:76:40:0b:d6:cc:
7b:82:b5:63:41:88:21:e3:df:0e:f0:c4:52:14:b2:
c3:3d:f4:95:dd:63:0d:10:12:04:b4:7b:18:02:21:
6b:b3:c3:b8:da:63:60:e1:ed:53:23:80:60:bb:c3:
47:c0:61:13:b8:04:7f:5b:ef:51:88:31:8e:e1:09:
28:22:20:9f:a8:f2:4a:a7:cb:07:c3:15:1a:6d:61:
00:6a:64:35:04:e6:26:d6:24:40:93:da:a5:4f:44:
45:4d:b6:55:2f:a6:eb:0b:2c:73:cf:c0:ce:6b:0a:
f0:b5:32:e4:5b:f1:bd:89:70:c0:64:ad:d8:72:f0:
eb:7a:2e:52:bb:77:ea:0b:2f:9d:c6:ca:01:f3:b4:
aa:85:f3:4a:90:55:3f:2c:6e:c5:a6:8d:e3:1f:12:
5f:53:6c:8e:59:e1:fc:f7:24:b1:f7:e8:ad:c6:9e:
9c:32:24:8d:74:ce:0a:6d:03:d7:18:6f:64:5d:2d:
14:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AC:87:EA:4E:67:2F:59:A9:19:F3:01:7A:5A:AD:63:E7:03:86:18
X509v3 Authority Key Identifier:
keyid:D5:F3:CC:7A:B0:D3:64:8B:8C:BE:76:25:35:33:A7:14:BA:00:9C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e2:b9:b5:61:61:20:cd:9c:cc:1d:ee:90:c4:c0:42:a2:cc:
94:01:bd:6c:84:b5:0d:85:32:fe:e2:3e:91:32:fa:9d:30:1f:
bd:62:60:6f:cb:7b:99:87:82:a6:4c:81:df:69:86:db:f0:af:
b7:cd:66:39:ab:5d:0f:77:63:9b:b2:da:ee:e6:bf:02:ce:10:
00:e4:99:18:60:5a:cb:3c:c2:0f:3e:40:41:df:ac:1a:05:50:
27:bd:98:78:74:7f:f9:05:ed:98:d0:fc:f9:03:9a:10:cb:72:
25:eb:ba:0a:f1:c5:55:ef:35:a7:36:8f:3f:ee:54:2f:30:62:
00:68:a2:ab:21:89:19:eb:d8:c2:b5:f1:4d:d4:03:bf:46:6f:
74:e7:d9:1f:0f:38:9b:2e:4b:6e:9e:c1:96:b5:23:32:94:9a:
2d:2a:2e:b5:16:bd:9d:41:30:fb:d8:1c:e2:78:52:d5:c8:94:
70:0b:01:fb:45:7c:13:31:a8:58:79:ad:29:06:db:88:97:05:
94:dd:e6:6a:24:eb:c1:a1:ca:ce:3f:7d:90:32:9b:ce:73:ec:
75:a5:29:30:66:0d:a4:f9:28:f2:f1:8c:f6:c8:ea:68:1d:e0:
46:19:a4:7a:40:63:6f:8b:90:a5:42:f1:93:34:a8:05:c9:0f:
3a:56:5a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:15:49 2026 by rpki-client