Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
File: 1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft (raw, json)
Hash identifier: WDbZrmupCKV/HGd6ErxUF4dw+FmFLgWL44Yjlr5WYVQ=
Subject key identifier: 72:70:6B:77:0D:D2:E9:69:19:C9:2B:9C:3B:C2:C8:50:3E:E7:A1:9C
Authority key identifier: D6:D4:AB:4F:B4:C5:76:40:56:48:81:DC:77:B3:A6:61:FC:4C:C4:35
Certificate issuer: /CN=d6d4ab4fb4c57640564881dc77b3a661fc4cc435
Certificate serial: 01A0DF179B1EC6F7F97BC531EFC44704D6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
Manifest number: 03DA
Signing time: Sat 26 Sep 2026 19:01:01 +0000
Manifest this update: Sat 26 Sep 2026 19:01:01 +0000
Manifest next update: Sun 27 Sep 2026 19:01:01 +0000
Files and hashes: 1: 1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl (hash: UavJZE2tTXWZfNI0vJvGKNJ42fMR2d4E7FgQ5gs1Eog=)
2: hrDir8hInSlFPN-Q1uO1aajy_9g.roa (hash: LO9s/4upanODPdu0Y/QyxRsG/lztm/48QBv0SUqV5f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:17:9b:1e:c6:f7:f9:7b:c5:31:ef:c4:47:04:d6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d4ab4fb4c57640564881dc77b3a661fc4cc435
Validity
Not Before: Sep 26 19:01:01 2026 GMT
Not After : Sep 27 19:01:01 2026 GMT
Subject: CN=72706b770dd2e96919c92b9c3bc2c8503ee7a19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0d:14:d0:51:9a:6f:eb:da:43:9e:48:8e:a8:
98:79:7e:26:94:f8:ed:27:3e:54:5e:24:2e:52:2b:
20:04:08:cd:e0:a0:7d:3f:0a:82:6f:85:94:4c:96:
de:8b:e3:b3:f0:5d:45:5f:19:0a:1b:6f:96:3a:61:
52:1f:33:2a:ae:96:9a:54:a6:16:58:33:ad:0f:2d:
08:26:0f:bc:01:6b:ab:a8:bb:3a:33:63:4a:66:09:
f5:1a:30:d9:33:8c:6e:40:a1:3d:95:93:b5:9b:78:
0b:7c:b4:d8:6e:07:3f:58:54:61:d4:ac:e7:47:b1:
6d:1c:e1:7b:b4:00:b1:77:6a:4f:71:80:29:fd:94:
fd:30:7b:47:76:90:67:32:b5:f9:36:5b:f0:ca:b8:
04:3f:4a:c0:68:c1:3b:98:f3:e4:7a:44:08:d9:9c:
c7:08:48:15:de:e5:22:0c:ae:36:2d:47:a8:82:c6:
80:59:00:0b:1c:04:ea:16:f5:6a:49:42:0e:15:9b:
82:c6:e4:e7:3e:5d:fd:6a:5f:fa:53:e1:1e:c5:4a:
b4:5c:17:54:28:14:77:3c:b5:20:b8:dd:65:c9:da:
95:61:0e:97:47:d2:f4:9d:2d:12:14:a1:a2:10:a0:
5d:ea:00:2c:dd:a6:07:df:30:7b:f8:c1:56:36:6a:
b3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:70:6B:77:0D:D2:E9:69:19:C9:2B:9C:3B:C2:C8:50:3E:E7:A1:9C
X509v3 Authority Key Identifier:
keyid:D6:D4:AB:4F:B4:C5:76:40:56:48:81:DC:77:B3:A6:61:FC:4C:C4:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5b:1c:54:d1:73:75:d7:59:45:a6:30:18:5a:37:8c:53:4f:
9b:84:28:1a:d8:56:36:1e:0d:e1:49:96:32:3f:6d:e5:6b:6a:
ad:95:36:33:cc:59:05:a5:24:3c:47:cd:aa:1b:36:4e:dd:a6:
f4:da:9b:5b:ec:be:df:e1:71:c1:ed:d2:34:05:8a:7a:6d:c2:
55:d4:78:9d:b6:15:2f:1b:ac:3b:fd:cb:1e:3e:99:af:46:ac:
d9:91:3b:ce:87:aa:55:86:54:bb:a7:6f:fe:52:ae:26:7e:32:
34:f5:17:d1:76:9b:7e:db:a7:2d:83:8d:d4:05:79:62:80:b8:
96:71:e7:41:ae:e3:15:75:99:5f:d3:cb:39:c9:35:fb:36:f0:
9f:c5:99:42:cf:cb:bc:32:f1:56:ee:91:c1:26:97:48:4d:19:
92:df:ba:e5:48:60:7c:cd:4f:75:d0:b0:0a:36:6a:80:38:2f:
ec:76:b3:c0:75:3b:10:5d:40:ab:d4:8c:88:0b:a0:98:69:a0:
43:c4:38:8f:4f:a8:31:aa:20:c6:71:53:75:9d:4f:f7:6b:a5:
48:dd:03:99:89:96:71:c4:d9:6a:87:a6:33:1b:2d:60:4f:42:
45:c8:32:04:2e:58:a2:ed:b7:8a:4d:fb:f7:21:51:2e:00:c1:
a9:cc:7a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:19:11 2026 by rpki-client