Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
File: 1AjPCbarAFupM7KnpKbSfqa7cso.mft (raw, json)
Hash identifier: fsdLtLBl6gJnyBB4WXnvt7AE5LvFWruvOWSPVfwdQb4=
Subject key identifier: 78:04:C2:F2:23:C8:27:35:FE:AC:B9:2F:08:4A:E5:9F:AC:8A:72:A9
Authority key identifier: D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
Certificate issuer: /CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Certificate serial: 01A0CF6D46DFAB6BC19276C043AE084F06E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
Manifest number: 0784
Signing time: Wed 23 Sep 2026 18:00:40 +0000
Manifest this update: Wed 23 Sep 2026 18:00:40 +0000
Manifest next update: Thu 24 Sep 2026 18:00:40 +0000
Files and hashes: 1: 1AjPCbarAFupM7KnpKbSfqa7cso.crl (hash: du9mV/hS37X94mFcMulYLETmBJ6sp4LDTuBzSgieVRg=)
2: tK1_7kYoh8HPJEz9gt6VcaD4nUE.roa (hash: S18bPoeACVyQQ3iZwMpVkRKWBkpl4d3ZgQ7DJM72ZW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:46:df:ab:6b:c1:92:76:c0:43:ae:08:4f:06:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Validity
Not Before: Sep 23 18:00:40 2026 GMT
Not After : Sep 24 18:00:40 2026 GMT
Subject: CN=7804c2f223c82735feacb92f084ae59fac8a72a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:be:50:01:dc:ba:4d:bd:39:73:cd:97:38:
8b:22:1e:0b:48:bd:63:c0:ea:cd:68:65:a2:6a:bc:
8a:d6:13:35:8e:55:5e:9a:86:f7:c2:58:da:da:5b:
d4:4d:e4:9e:cc:8f:54:4c:ed:bc:97:f9:5e:97:8c:
62:2e:bd:45:ba:4b:84:1f:51:99:bd:24:e2:c4:b7:
0b:4a:3d:cd:ca:81:f1:ce:e8:a0:f0:ff:7c:24:94:
8e:8e:2b:67:23:97:9e:54:1d:08:3c:13:12:9f:08:
9f:2c:92:01:53:a6:67:58:5f:c2:3e:97:0c:e6:1d:
f3:17:62:dc:47:12:06:58:37:97:d4:9b:8b:d7:4b:
8a:ca:91:08:2a:a9:cc:5c:0f:b0:9e:77:4c:dc:29:
3b:67:65:50:0b:e7:8e:97:a4:00:ed:04:8a:80:66:
f1:c0:8a:2f:64:85:6b:93:4c:dd:94:71:a1:31:d9:
7e:a3:9d:b9:1a:6d:76:8d:06:bc:96:b7:af:73:dc:
d6:38:a8:fb:81:9d:f5:6d:6d:e7:55:24:c8:04:d9:
3a:42:6b:f9:8f:2e:48:5f:58:3e:6b:7e:4a:47:53:
f7:58:47:ea:fc:42:be:de:0f:ca:bc:c1:8a:98:4e:
30:6b:61:51:1b:87:9f:2f:fc:a0:14:a2:dd:5d:55:
bb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:04:C2:F2:23:C8:27:35:FE:AC:B9:2F:08:4A:E5:9F:AC:8A:72:A9
X509v3 Authority Key Identifier:
keyid:D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f5:1d:aa:ce:17:d1:59:cd:11:9a:b2:ed:5b:82:d5:74:87:
93:3d:f2:64:78:97:7e:76:db:b1:76:de:6b:34:97:57:c3:7c:
f3:5b:28:70:1a:84:44:da:51:2d:01:be:8a:fa:6e:82:6f:28:
cc:d3:48:a0:66:92:ea:2e:0f:9f:bb:40:58:a1:fa:66:ff:9b:
58:09:96:f9:22:89:d0:c1:8d:99:0c:d2:76:cd:0e:44:5f:78:
78:ff:a8:5b:19:7d:21:d7:6a:40:f9:6a:ad:b0:81:bf:71:71:
fa:c7:3b:ee:df:93:5d:63:e6:e6:07:87:e2:cc:2c:41:48:3d:
8c:88:ef:21:41:c4:29:f3:fe:c1:83:c9:03:5e:c3:ee:d5:42:
72:a6:9a:f9:e0:af:60:45:eb:ec:b7:4f:01:c3:72:bc:c2:45:
8b:ff:df:bd:cc:d4:aa:40:90:b4:f1:b1:4e:5d:e3:5e:ec:55:
06:12:77:8a:9e:48:6e:cd:10:1b:73:61:bc:8d:69:c3:fb:e3:
8f:5b:f1:a0:bc:00:be:7d:cb:f9:22:a2:80:06:ea:83:d8:3a:
51:06:f3:c7:68:fe:4d:fd:19:8f:f5:1d:e3:4a:f7:ca:20:78:
5d:78:2a:11:07:e7:11:24:e9:85:dd:b4:a2:b1:c1:56:c3:26:
9a:42:d8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:31:15 2026 by rpki-client