Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
File: 1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft (raw, json)
Hash identifier: 9Wakfl8zjbJEs2Gy4aUBjKaGzItPR6eotkVckOLEJlA=
Subject key identifier: F2:44:54:DD:B6:28:6A:88:B6:68:62:20:0E:9D:D3:86:9B:4B:C2:11
Authority key identifier: D5:A0:CC:9E:6A:5D:5B:97:DB:EA:96:66:4D:D9:4A:C3:E4:22:7C:F4
Certificate issuer: /CN=d5a0cc9e6a5d5b97dbea96664dd94ac3e4227cf4
Certificate serial: 01A0D983AD63F6C7382C95D863332C876E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aDMnmpdW5fb6pZmTdlKw-QifPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
Manifest number: 023B
Signing time: Fri 25 Sep 2026 17:01:20 +0000
Manifest this update: Fri 25 Sep 2026 17:01:20 +0000
Manifest next update: Sat 26 Sep 2026 17:01:20 +0000
Files and hashes: 1: 1aDMnmpdW5fb6pZmTdlKw-QifPQ.crl (hash: iayBsxwfDfGaGJlDAVuwtQ82i68ITLgKMv6qlG4TvjI=)
2: o0b3FLGT6_KTAMziRPFBDuoxIFs.roa (hash: HuGKkmAJlpIF3je5dBAlXM+W0Ozh9HwD67fbKdy/D8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aDMnmpdW5fb6pZmTdlKw-QifPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:ad:63:f6:c7:38:2c:95:d8:63:33:2c:87:6e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a0cc9e6a5d5b97dbea96664dd94ac3e4227cf4
Validity
Not Before: Sep 25 17:01:20 2026 GMT
Not After : Sep 26 17:01:20 2026 GMT
Subject: CN=f24454ddb6286a88b66862200e9dd3869b4bc211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:54:b4:f1:a2:fd:6d:68:cf:7b:c2:75:88:
86:d8:3b:43:ca:41:2b:8b:a0:fa:65:49:10:aa:e9:
02:02:a8:2c:3f:ed:98:f6:94:57:41:02:07:6c:b4:
55:36:84:85:51:d9:22:f8:26:17:d8:1b:0c:0c:d2:
6f:0b:6a:20:8e:7b:e0:63:c2:b2:e6:bb:ae:9a:5c:
72:f3:66:d8:cb:e1:fd:14:bf:36:a1:95:9b:03:ca:
f1:42:10:b3:67:98:2e:02:af:4f:22:f6:2e:d7:66:
15:e0:f6:10:bc:4a:08:32:ab:b4:d7:32:a6:b3:8c:
3f:ea:62:bf:49:17:61:b9:48:b9:2f:de:8b:e4:29:
d9:9f:4f:0a:d6:41:fd:f5:d1:9e:51:98:35:73:b0:
51:a6:6e:7f:90:4b:6a:d2:61:36:e8:87:c4:9e:60:
2c:ed:43:cc:fb:94:d4:93:de:63:2d:7a:12:c6:68:
12:a2:59:c6:91:92:d8:38:12:8f:3c:7f:43:6c:e9:
53:cf:a9:a9:96:cc:c7:40:a1:74:14:2e:df:46:29:
e0:0a:67:1a:f2:44:fc:39:e9:bd:ad:e3:9b:3e:39:
98:6a:0b:cb:78:ed:bc:cd:a2:e6:da:ee:9f:71:3f:
13:99:7b:70:01:9c:b6:b3:d1:da:6b:7b:c0:f8:25:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:44:54:DD:B6:28:6A:88:B6:68:62:20:0E:9D:D3:86:9B:4B:C2:11
X509v3 Authority Key Identifier:
keyid:D5:A0:CC:9E:6A:5D:5B:97:DB:EA:96:66:4D:D9:4A:C3:E4:22:7C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aDMnmpdW5fb6pZmTdlKw-QifPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f0b6ad-8597-48b2-81a5-1d55cbd3f22c/1/1aDMnmpdW5fb6pZmTdlKw-QifPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7c:8e:b1:19:7e:97:58:e2:c9:40:33:7f:c2:d4:ec:89:0a:
50:6a:74:fa:3f:2f:29:06:97:ce:cc:3e:b8:15:be:59:ae:3e:
07:80:ae:99:83:9a:d6:14:88:3f:54:03:6d:a7:2f:ff:27:23:
52:99:70:5a:4f:96:30:e7:29:48:3f:c3:80:76:b4:cc:21:b9:
07:d5:3b:17:1d:49:ab:7c:a3:e3:50:34:9a:5e:75:f2:1c:94:
59:60:dd:fc:5f:45:14:c6:8b:b3:a4:5d:f1:31:7c:af:37:90:
57:56:9e:a1:e6:a9:e6:9c:c6:1a:ae:56:5a:30:bd:09:4b:4c:
82:21:3b:c8:86:83:99:3f:38:fe:c5:83:4e:4e:f9:ea:11:e2:
a9:9c:9f:80:ba:1d:f3:19:3c:f6:31:c3:6a:be:20:08:31:7b:
06:2f:a5:1d:a1:ab:69:67:ee:90:24:42:92:67:a1:36:da:52:
05:5e:fe:bf:c6:b2:47:ae:ae:b9:3b:6b:ca:26:15:3d:6a:6e:
8c:4b:2a:31:0c:69:9b:e0:0c:1d:12:12:ee:ef:62:57:f6:e8:
18:f3:b1:69:fc:d1:c5:7d:32:2c:81:17:53:51:39:e8:78:5b:
a1:d6:35:14:b1:de:0b:05:ea:dd:bf:a2:dc:b7:b9:14:8d:16:
e5:02:8d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:03:14 2026 by rpki-client