Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
File: 1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json)
Hash identifier: oXP8guHEOERKzcZNJn4hK32++HiL1yADoKHC9psGWn4=
Subject key identifier: 39:CB:31:8C:98:BB:D2:90:94:32:37:10:4C:F1:D5:12:77:8E:00:B0
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 01A0CEC89AEF6C039E2D83121F06E125278A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
Manifest number: 1A88
Signing time: Wed 23 Sep 2026 15:00:48 +0000
Manifest this update: Wed 23 Sep 2026 15:00:48 +0000
Manifest next update: Thu 24 Sep 2026 15:00:48 +0000
Files and hashes: 1: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: 6Rgf5NAwxGPci9c9PR8BWpYPZaDfJNIBxB2HF8iT4M4=)
2: _fx4TtZl912PDxKt3SpPKkcaW4A.roa (hash: dK8lG/+XmK+y1Z83e8NRgEb93MJfhW6m6ThSMLB6k4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:9a:ef:6c:03:9e:2d:83:12:1f:06:e1:25:27:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Sep 23 15:00:48 2026 GMT
Not After : Sep 24 15:00:48 2026 GMT
Subject: CN=39cb318c98bbd290943237104cf1d512778e00b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7a:14:a6:ee:ba:77:e3:a9:1d:43:26:44:e3:
77:7e:50:2a:ae:df:17:8a:a8:b3:5f:4e:73:db:51:
cf:19:83:06:98:3f:6d:37:42:08:e7:c1:f2:ff:24:
4e:08:1b:aa:6b:4d:89:8d:b6:27:d1:41:f3:92:51:
17:42:c9:8e:05:0c:cf:1a:49:ea:3a:a3:6d:ca:92:
2f:66:d6:3f:9a:6e:15:bd:d2:cd:26:43:6a:dc:82:
6f:30:29:28:48:e8:70:cd:10:c2:f4:27:c0:c4:3d:
01:ba:31:c5:1b:4b:24:df:90:33:bd:ed:70:2a:72:
dd:49:e5:69:14:1f:4e:e5:9b:b4:f5:f8:de:55:26:
3b:ca:4e:e3:3a:a4:50:30:7a:9f:27:c9:0a:c6:02:
ff:06:c5:1d:dd:fd:f3:15:61:64:3f:f0:41:e3:c3:
95:66:fb:51:d9:11:81:0c:75:db:5f:a8:9c:b7:6d:
64:06:63:a2:73:8a:b9:bf:72:3c:01:18:fc:04:8e:
09:58:cb:da:a3:62:05:94:c1:82:32:aa:0d:68:35:
08:4c:3e:25:66:cd:96:d2:57:5f:08:4a:80:0c:10:
56:6d:1c:30:96:98:43:37:e7:41:b4:55:91:1d:ce:
ed:69:fc:27:e0:81:71:28:f3:7b:33:37:90:7e:9a:
5d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CB:31:8C:98:BB:D2:90:94:32:37:10:4C:F1:D5:12:77:8E:00:B0
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f6:a1:bc:4a:3d:25:b1:c4:d1:c8:2a:e5:6b:6e:82:7b:01:
96:8c:8d:41:5d:e5:35:1e:23:5c:af:71:4f:9e:2c:47:78:a0:
97:7d:8a:83:ce:6f:0a:5a:81:d1:bc:6d:d9:c0:45:1f:83:c3:
3a:b5:2a:38:13:7e:6a:94:23:45:d7:82:59:80:8e:46:89:22:
4f:7d:88:18:a1:b4:b8:0f:6a:a9:b9:16:83:b5:17:20:41:1b:
61:34:e0:dc:d5:ed:f1:b5:75:86:08:f8:e3:3e:ec:7f:cd:fc:
c7:9f:a8:20:6c:60:75:17:25:cd:7d:1d:b9:d7:72:bc:2d:0b:
db:2b:cc:13:6c:4c:ae:cd:f4:95:74:95:80:6c:23:b0:a8:23:
d1:90:5d:90:3b:a6:6e:0c:04:9e:81:15:10:43:79:7d:72:b8:
83:7c:80:f6:5b:2c:47:3f:fa:22:5b:b7:78:ff:6d:df:f2:25:
16:ce:a2:de:b1:16:34:b0:cb:ea:cd:1c:b1:d3:9d:23:a1:36:
42:fe:b8:71:90:4a:58:47:e1:9c:5b:1c:9c:e2:5b:87:35:2d:
2f:50:1b:04:3b:4f:1a:6e:2d:12:65:1d:1b:3f:1d:b6:37:a1:
3e:43:98:96:90:be:f4:ac:14:d7:d7:1d:2f:9a:ab:18:a1:96:
af:a2:ef:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:09:39 2026 by rpki-client