Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
File: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft (raw, json)
Hash identifier: 4IB9YElFHuqb+qIRjcb5i6NIwk0UnKFppajKI4PVZDI=
Subject key identifier: 11:79:AF:5B:72:71:EB:7B:A9:8D:D6:6F:CB:33:93:FF:7C:79:70:E5
Authority key identifier: D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
Certificate issuer: /CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Certificate serial: 01A0CF35F35AC39A6EFD9087E25CB58BA136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
Manifest number: 0BA2
Signing time: Wed 23 Sep 2026 17:00:14 +0000
Manifest this update: Wed 23 Sep 2026 17:00:14 +0000
Manifest next update: Thu 24 Sep 2026 17:00:14 +0000
Files and hashes: 1: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl (hash: JO2Ttji6OMTXmtH0N5OEgwZebh55oSj0GeUu5pcthBM=)
2: GYutIkRnUUe6rU3f0KqhJg3i2C8.roa (hash: T8JwYcJCmU9VHg+cmAioCuzk66qEr5evLlhmPjOOj8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:35:f3:5a:c3:9a:6e:fd:90:87:e2:5c:b5:8b:a1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Validity
Not Before: Sep 23 17:00:14 2026 GMT
Not After : Sep 24 17:00:14 2026 GMT
Subject: CN=1179af5b7271eb7ba98dd66fcb3393ff7c7970e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:1f:6c:48:a5:cd:0c:5f:18:22:c0:af:91:
3e:46:54:8d:54:b6:1a:23:a6:e4:44:d3:da:bd:66:
bf:bf:15:f5:64:00:81:58:10:d1:12:a1:d6:17:5c:
00:93:e0:f7:5c:0f:9e:0a:9f:9a:63:90:23:43:37:
64:9a:49:87:ca:15:5f:55:9c:09:1c:43:99:64:90:
45:a0:d0:9b:6f:fb:f2:0d:8c:a3:53:d6:32:bc:9f:
0b:f5:dc:55:12:cc:93:0d:47:6b:f1:7d:30:82:97:
7c:f1:e7:9a:09:8f:2e:0b:85:a5:b9:ed:41:07:b5:
b1:f4:e0:ff:79:9a:01:ac:2f:46:b9:8a:26:b9:07:
92:00:a9:97:d9:47:20:22:33:57:7a:81:84:d7:13:
34:cc:a3:98:9f:57:ee:62:0c:f9:98:01:14:27:49:
a4:78:99:cd:35:45:9e:b9:2e:b6:36:a2:22:67:e7:
f4:7f:b0:6c:ff:51:85:67:bb:23:36:2e:6e:4f:5c:
80:e2:ff:bc:15:a0:ec:40:f5:3e:9d:9f:e2:e6:cf:
53:96:24:90:7a:f3:8d:a2:f6:ab:ee:cc:9e:a7:85:
a2:08:5c:e5:60:c9:10:1f:dd:32:da:ce:95:9d:ce:
08:9f:80:42:8f:86:59:d3:64:b2:07:a2:ef:51:1e:
45:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:79:AF:5B:72:71:EB:7B:A9:8D:D6:6F:CB:33:93:FF:7C:79:70:E5
X509v3 Authority Key Identifier:
keyid:D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:33:f1:8c:09:c4:1e:51:8b:5b:6f:05:c6:3e:58:2c:bb:63:
c0:cd:13:61:b6:29:45:40:a9:19:e6:d4:30:aa:eb:f2:45:07:
b0:51:54:3f:99:02:12:8b:1f:25:33:1c:c6:50:3b:57:81:11:
24:7a:c3:c2:aa:09:f7:de:6c:5e:03:e6:68:b9:17:3a:3f:0d:
7e:0d:a8:5e:d2:c6:2a:f8:35:96:6a:a6:97:19:8a:ba:74:01:
40:fe:c6:21:f7:84:88:31:15:0e:1f:7c:03:6e:ef:14:44:fb:
53:c7:0d:75:6e:18:af:05:24:49:80:28:6d:08:7c:a4:eb:e0:
81:45:c2:6f:0b:50:09:ba:c4:e0:3c:6b:40:01:41:bb:7a:05:
b8:d0:5b:2c:35:f6:b7:8c:e9:24:cb:96:63:a4:1e:89:e0:4e:
4c:bc:d1:85:10:b4:18:57:97:5f:d2:80:b0:75:8c:b0:db:4f:
c9:94:a3:dc:45:19:d5:c6:08:a0:4c:1a:d4:e2:a1:90:b2:2e:
81:96:c6:3f:62:af:50:6f:de:de:96:ac:f9:85:f0:64:0d:1c:
d5:5e:33:e2:82:f8:bc:7e:64:3a:00:9b:d6:b5:8b:c0:03:ff:
03:41:34:77:93:05:2b:a1:14:24:a6:ff:aa:f0:fd:0b:8f:0b:
05:05:1e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:42:10 2026 by rpki-client