Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json)
Hash identifier: v2PJ9xdzUZE0qmuuHYTA5VfUxE5ugqH63WW/xdeKJB8=
Subject key identifier: 3A:8A:C1:0C:A1:1B:23:5A:76:31:64:6F:50:34:BC:CB:6B:D3:B4:C4
Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Certificate serial: 01A0D916D7F50E617EC60FE7CFADEB51C168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
Manifest number: 0441
Signing time: Fri 25 Sep 2026 15:02:27 +0000
Manifest this update: Fri 25 Sep 2026 15:02:27 +0000
Manifest next update: Sat 26 Sep 2026 15:02:27 +0000
Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: 7SvYZ3YguBmExnVEusZMCoOovjSkOzZpe3AEMixhHfs=)
2: ksxu6ED0JYb4LkMNNBkeQrtTihg.roa (hash: hNrbAjwRe4DO2TxA72QQ5fqj3uvFtHcLzhkdLVrG1xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:16:d7:f5:0e:61:7e:c6:0f:e7:cf:ad:eb:51:c1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Validity
Not Before: Sep 25 15:02:27 2026 GMT
Not After : Sep 26 15:02:27 2026 GMT
Subject: CN=3a8ac10ca11b235a7631646f5034bccb6bd3b4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:04:ba:99:d2:e9:ff:7c:37:c4:36:28:ac:
fd:51:b1:d7:72:2f:db:e7:58:52:7b:58:9a:56:71:
66:29:99:6f:46:3f:d3:e7:f6:54:a5:34:c3:79:94:
4d:ae:2c:e6:d0:7d:8f:c6:a7:bf:9f:dd:7f:2b:a1:
cc:68:a5:72:8e:65:45:04:00:87:f1:18:06:38:03:
78:d2:86:a3:ee:ce:58:e9:07:3e:45:9f:20:04:29:
39:16:31:00:30:df:e3:e8:47:b5:bb:00:fa:cf:57:
17:d0:70:92:e7:9e:3f:a0:13:32:71:95:0f:50:d5:
4c:cc:45:5a:61:0c:cf:b3:00:af:4c:38:81:04:56:
71:0f:46:44:28:66:b9:3a:1c:29:4c:d6:24:db:9e:
86:c8:3f:9d:be:9e:01:53:6f:1a:a2:60:43:3d:ec:
95:f3:8d:6f:70:60:d7:3b:61:7a:3b:06:32:74:9d:
f5:f5:3b:63:ab:8e:70:aa:ef:9d:76:05:3c:a7:92:
f1:fe:63:bd:96:60:c0:df:3e:ae:d4:3a:6e:32:14:
53:06:3e:4d:a8:eb:f2:a6:ab:b5:b3:85:6c:96:3c:
88:34:1c:a5:97:3a:5b:b6:e2:9b:93:2c:2c:3a:2b:
c7:03:7f:02:07:65:6d:74:2e:e1:1d:53:1c:f3:4f:
8d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8A:C1:0C:A1:1B:23:5A:76:31:64:6F:50:34:BC:CB:6B:D3:B4:C4
X509v3 Authority Key Identifier:
keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:43:44:54:04:bb:b2:9b:fa:d2:66:9d:11:9a:f2:9e:f4:45:
08:ce:c3:16:d7:62:8b:61:29:93:7b:98:12:87:37:ed:9f:d3:
1a:b6:7e:20:47:a2:b3:2a:95:38:95:3e:c0:42:27:2d:f4:11:
16:4a:93:c5:c4:7a:93:2e:1b:3e:d1:bf:be:e9:a0:bc:82:2d:
de:a6:78:27:74:8d:22:14:48:0e:0e:4e:87:93:cd:29:1b:57:
5d:db:5c:81:e8:13:af:9a:4d:a4:97:c6:8f:a2:df:b9:a1:e8:
46:b4:b5:18:9e:b7:ff:a9:68:67:b2:53:b4:d5:d7:25:b8:a2:
d3:18:75:9a:dc:78:a8:6c:a3:81:04:db:f0:32:c2:9b:9c:35:
5f:a6:46:b1:dc:7c:7b:9a:a5:64:d1:a4:91:08:85:14:ec:34:
50:ef:3e:e6:1a:58:3b:d8:0d:0a:a7:fc:25:a0:dc:b3:b8:19:
69:0c:a8:b6:1f:f3:9b:77:3c:ea:40:26:4a:df:cf:51:03:a5:
8c:db:ba:d2:aa:f8:92:01:1d:a2:5c:02:a7:d2:1c:20:2d:0d:
ef:7f:4c:2e:55:ec:b8:cd:ac:6e:25:cd:ea:93:de:79:79:fd:
d2:47:b0:8b:7d:0e:23:d6:dc:1d:94:3d:75:8c:0e:e5:b5:5d:
14:3a:12:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:22:39 2026 by rpki-client