Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
File: 1qVTYS2UsJGzZZshILyO-yYOfTA.mft (raw, json)
Hash identifier: eUW1zOglSL4qthZi415dWI6K3MNuIp/PePxRl0SJZgE=
Subject key identifier: DD:EE:18:74:9D:B5:3A:2F:7E:AC:CA:43:F0:F8:9D:BC:9D:62:72:23
Authority key identifier: D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
Certificate issuer: /CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Certificate serial: 01A0D5DE1283A36689FA79BE5861092B21B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
Manifest number: 0340
Signing time: Fri 25 Sep 2026 00:01:35 +0000
Manifest this update: Fri 25 Sep 2026 00:01:35 +0000
Manifest next update: Sat 26 Sep 2026 00:01:35 +0000
Files and hashes: 1: 1qVTYS2UsJGzZZshILyO-yYOfTA.crl (hash: nU827jLeKCQ3wGtnzMch/DT7oBf6olxfqowkBV2qZ7E=)
2: YUX5rzp00o400A0WbJALi9ABx8I.roa (hash: x86fl/4qgkCI4hFoudrfc/jIoc01pQrYzS8Cq8H366U=)
3: yMSdih1BEkH3pQ4fKRRG34haBVs.roa (hash: zQcIZwJ6Pu/eO5hnk91XHasGs0yD2RAKEuFEjFFSfEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:12:83:a3:66:89:fa:79:be:58:61:09:2b:21:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Validity
Not Before: Sep 25 00:01:35 2026 GMT
Not After : Sep 26 00:01:35 2026 GMT
Subject: CN=ddee18749db53a2f7eacca43f0f89dbc9d627223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b5:83:a0:8e:09:3d:14:63:32:71:fc:34:c0:
66:3f:83:36:d6:d6:25:77:0d:91:8c:b8:90:68:cd:
a5:7c:21:ac:30:0d:72:e8:3c:0d:56:a3:63:71:38:
a3:12:ad:99:06:27:d7:19:3e:cf:d9:25:06:25:9c:
29:14:32:de:eb:14:5b:d6:6f:82:61:cf:a3:1d:b0:
a9:30:cd:da:df:a2:9a:a2:54:88:f7:41:8c:d9:64:
0d:2b:24:7d:68:13:93:18:bd:60:bc:49:7b:47:ae:
cb:45:49:b6:38:95:fa:22:a7:e9:67:a6:5c:07:8f:
b0:29:70:40:44:c6:49:12:23:f3:99:aa:26:43:81:
87:fb:fd:9b:0e:27:93:48:34:a5:c2:ed:3a:92:98:
55:7d:cf:ee:96:11:41:56:31:1a:a2:e6:ce:d6:a7:
1f:8e:4d:f0:a3:cc:fa:fb:37:f3:7f:28:aa:77:74:
62:16:f2:aa:38:78:62:aa:4a:61:cd:85:1f:8c:6a:
a7:37:3c:0d:73:d9:16:10:c2:2d:28:14:37:0b:7e:
ed:2a:31:6e:87:db:24:db:ed:0d:59:f9:dd:61:e5:
69:53:b4:0d:02:54:2c:29:e8:af:e8:be:4b:a9:42:
96:7d:80:85:86:57:0e:2f:dc:36:0e:f2:f1:5c:88:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EE:18:74:9D:B5:3A:2F:7E:AC:CA:43:F0:F8:9D:BC:9D:62:72:23
X509v3 Authority Key Identifier:
keyid:D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0d:05:bd:69:5c:43:4b:09:b7:15:41:4d:09:75:69:d7:ca:
37:27:24:03:12:c7:7b:c5:48:42:59:4c:49:4b:c5:ff:9d:8c:
ce:57:cf:4b:5f:0b:e2:aa:67:d6:f4:ab:b0:d7:06:33:b1:24:
17:ca:7a:b4:78:fc:81:03:3a:7f:a4:3d:96:0a:1a:7e:c0:b3:
11:52:f4:f1:24:80:73:a7:45:81:42:a9:e3:95:4d:81:5e:e6:
63:02:2c:44:c6:77:f2:58:bf:42:55:68:c3:4d:7b:eb:6f:87:
9b:00:db:df:e6:40:13:ea:06:a0:25:30:f4:ce:7c:d1:5b:ef:
76:6f:44:02:18:f5:7a:43:f8:29:b7:d4:bc:db:b0:40:62:02:
78:ad:d9:f9:7c:63:8f:b6:3b:75:ea:8e:dc:4f:f1:a6:c5:6c:
a5:0b:e6:79:75:2b:cc:df:60:8a:90:3d:d6:83:16:16:85:0f:
56:12:0b:a5:6e:94:d3:51:dd:28:7b:84:da:a4:f7:d5:f7:6f:
e1:8a:ba:9e:50:a4:e0:1f:33:ca:4b:21:10:39:20:cf:ad:2d:
c2:ac:6f:92:0a:ef:2f:a2:7a:7f:a5:57:b6:d5:fb:08:19:c6:
ad:50:8e:ed:60:49:aa:30:d2:5c:d4:8c:78:c0:34:9c:ea:9c:
56:c1:c7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:27:48 2026 by rpki-client