Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier: 8kluDksGsqVfY5wHSFNw1+DqHq+AIy4doXKW4pe1xkg=
Subject key identifier: 91:2E:32:53:04:40:66:76:B4:E1:F4:E1:AF:2C:7B:E8:BF:DD:DB:39
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial: 01A0CFA46BDE4A98C488170B8A7A0E9EA024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number: 1A78
Signing time: Wed 23 Sep 2026 19:00:54 +0000
Manifest this update: Wed 23 Sep 2026 19:00:54 +0000
Manifest next update: Thu 24 Sep 2026 19:00:54 +0000
Files and hashes: 1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: SfsbHI5n95eSU1wn+JfJ8r+0B00tNkqQ9xXB5ULz6ZU=)
2: Gez5PpAamR2Dld4nToIpywC4n04.roa (hash: DLzb0cAOuJy5ZOk7xS5DW/f6ULYNGKEl0VG/BvqN4oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:6b:de:4a:98:c4:88:17:0b:8a:7a:0e:9e:a0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Validity
Not Before: Sep 23 19:00:54 2026 GMT
Not After : Sep 24 19:00:54 2026 GMT
Subject: CN=912e325304406676b4e1f4e1af2c7be8bfdddb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1a:cb:fc:f2:33:76:32:30:a7:58:b2:f9:e3:
a6:19:21:ae:59:c1:48:98:17:f0:c9:3f:7a:5e:de:
0a:0e:bd:33:b8:cd:3b:25:fe:9d:f3:2f:f2:03:b2:
ac:fd:25:eb:83:02:7a:a9:11:6f:15:8a:86:56:51:
0c:df:f2:95:f4:a4:ad:ed:7f:0b:63:6b:8c:09:20:
70:59:83:41:81:0d:ac:7a:17:39:ee:37:49:c5:1c:
42:85:d4:e2:e1:b0:a9:8c:97:00:0a:0f:09:b8:64:
ca:89:ca:41:0e:84:3a:be:ed:78:4a:eb:e1:5f:2d:
80:66:c7:4d:80:22:4d:4f:f0:da:9c:02:ee:5c:48:
a5:9b:be:02:6d:11:fa:11:f6:58:63:81:62:46:6b:
b1:03:1e:62:2f:05:64:9b:57:2b:39:d8:68:08:0c:
da:07:51:d2:dc:ec:aa:48:84:be:1b:30:6e:2c:94:
84:32:64:2b:c0:d3:d1:e5:93:7b:cc:9f:f4:bc:d3:
b0:3b:2f:ce:a2:c2:e4:96:77:64:1c:55:f0:db:2f:
fc:d0:60:94:0f:cd:49:fe:ea:e5:2d:63:65:d5:e7:
1b:1c:29:e4:95:ef:13:eb:0e:b1:6a:ae:bd:8e:f5:
42:dc:89:3b:5e:88:8c:83:e4:f5:ca:ce:ae:a7:2a:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2E:32:53:04:40:66:76:B4:E1:F4:E1:AF:2C:7B:E8:BF:DD:DB:39
X509v3 Authority Key Identifier:
keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5a:5d:de:98:b9:0f:b4:cf:d2:97:1e:84:ec:b2:b6:26:f1:
3f:b8:e8:4c:95:85:3b:62:f4:48:54:9b:d3:53:f0:1b:2f:ed:
3d:96:b3:b6:6b:32:5c:ad:e3:81:d4:f6:90:5d:aa:b6:50:18:
14:b1:17:e2:4d:e2:6d:e9:3f:da:11:d8:46:e7:93:0a:ae:45:
ac:79:cc:8e:f9:6e:be:19:88:74:06:ae:4b:e2:dc:b5:d4:20:
05:e8:25:a3:f4:94:bb:23:54:57:2a:5d:d3:a9:1c:0a:ed:0a:
3b:36:f6:a1:1f:f6:d0:d3:ff:40:32:ee:4e:a8:17:33:ff:05:
cf:46:c5:94:79:fc:76:c5:e8:e8:db:ab:be:22:1d:55:27:c8:
2b:52:47:bc:f1:b2:56:a6:a2:05:5f:32:a7:c2:a0:cb:93:c3:
2f:95:e6:69:4f:89:b7:17:25:1d:a9:ff:3f:15:8b:8b:b0:ae:
f1:e7:a2:2d:6b:9e:14:d7:67:87:31:ba:fc:a9:60:91:fd:5e:
47:28:5c:9d:94:11:63:be:5a:2c:d5:4e:28:91:fd:4a:bf:09:
4d:43:55:02:b1:2d:8f:98:bd:d6:76:4a:35:0d:60:01:40:9b:
c2:3b:18:bd:ac:be:a4:4f:6b:39:f9:1f:74:8a:c2:1b:63:93:
9d:0f:2a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:14:05 2026 by rpki-client