Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
File: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft (raw, json)
Hash identifier: /jgkZKdSOYFYid2mK/G/bGw4wNyBbyT8LIXrHsIHInA=
Subject key identifier: 68:CE:D8:3C:23:3A:52:8D:96:72:1C:33:71:35:B6:C5:F5:F5:60:2D
Authority key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
Certificate issuer: /CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Certificate serial: 01A0CDB62EF798CFDFF27447CAB3C8C91053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
Manifest number: 18D9
Signing time: Wed 23 Sep 2026 10:01:03 +0000
Manifest this update: Wed 23 Sep 2026 10:01:03 +0000
Manifest next update: Thu 24 Sep 2026 10:01:03 +0000
Files and hashes: 1: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl (hash: GCNCxdhfv/pNA0UzlV0kaNYX/RjT2WyQvTIjKCCXgXA=)
2: 2O8krpss1XUBhd1z1aphhjRg5kI.roa (hash: y4ACY414P23FTUASLCD5rS3epsK/nudRTUHUj5PRHCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:2e:f7:98:cf:df:f2:74:47:ca:b3:c8:c9:10:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Validity
Not Before: Sep 23 10:01:03 2026 GMT
Not After : Sep 24 10:01:03 2026 GMT
Subject: CN=68ced83c233a528d96721c337135b6c5f5f5602d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:57:5f:a9:7d:71:f0:a0:1b:f9:84:1e:97:
3a:2b:bc:af:56:70:47:b1:58:30:f6:ba:97:00:eb:
45:75:ee:37:1c:60:4b:9e:ee:5b:0b:67:a5:cf:32:
18:95:88:66:14:72:e4:77:1c:de:44:bb:2b:4c:e5:
26:1b:f3:7f:8a:08:00:02:5c:86:e0:45:b6:7f:bb:
40:05:a0:db:80:c3:47:66:8c:c8:13:c4:f3:89:40:
e9:a6:d3:57:f3:36:45:b0:cd:98:a0:2b:ff:0f:71:
c0:8a:08:1c:f6:ac:ac:4d:be:44:f7:eb:d2:5c:58:
41:fe:83:6a:6d:b6:0e:a8:a0:75:b6:b5:b9:3a:cc:
3b:3b:6f:aa:35:a6:5d:d3:3c:8f:89:94:44:00:62:
83:db:57:df:3a:ff:0b:96:77:73:62:34:39:04:0a:
bb:19:3b:17:a0:dd:4c:51:90:37:62:3d:67:f8:f0:
ab:a9:1d:f9:0b:26:3f:74:a7:6b:6c:46:90:ba:f1:
5b:d7:c3:39:51:c8:c9:80:6c:f1:a6:a4:4f:eb:0f:
33:48:b7:06:ef:1b:6a:c0:90:1a:08:04:67:95:18:
e0:cc:b8:d4:f5:72:f6:17:95:ee:d5:ae:fe:c9:c9:
78:1a:07:68:ca:67:36:46:10:97:73:1c:51:72:05:
f7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CE:D8:3C:23:3A:52:8D:96:72:1C:33:71:35:B6:C5:F5:F5:60:2D
X509v3 Authority Key Identifier:
keyid:FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ad:42:fd:3e:02:42:20:70:bf:c9:44:94:92:b4:38:36:84:
c5:48:64:1f:86:f1:2d:81:38:02:b1:ed:68:b9:06:be:eb:30:
4b:c5:05:c1:c8:59:37:e4:be:ee:63:ca:1a:bc:10:db:dd:8d:
36:df:40:8b:95:02:ee:01:66:46:73:72:4c:db:ae:13:f5:f6:
c6:33:49:8c:a7:d3:56:ed:a0:b8:c2:a3:c7:06:ba:09:3d:6a:
07:0d:bc:61:de:d3:78:a0:e7:09:07:67:63:c8:45:1e:ab:7d:
9a:2c:14:6e:35:3b:d2:59:78:a4:6a:58:be:ec:17:c8:a0:61:
88:b9:7d:92:0d:4a:58:77:bb:9d:9f:48:78:89:4a:da:c4:eb:
e6:2c:e5:fd:e5:9e:f7:e8:64:5e:64:c6:9a:55:eb:5f:97:62:
3d:3b:98:57:03:63:64:d6:d3:ad:28:2d:bf:02:68:5d:72:c7:
d3:d9:60:ee:e3:b1:87:d2:da:24:52:9f:ce:36:91:bc:90:f4:
a8:1d:f4:9a:af:88:72:11:4a:56:9a:0d:1d:75:0b:62:41:63:
cb:ab:36:cd:ec:8c:ea:55:9f:00:fb:e2:2b:e7:a6:e9:9b:be:
1a:12:56:d7:5c:bf:cc:6e:51:4d:0e:04:2e:9b:d5:bd:27:6a:
44:ba:ce:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:28:00 2026 by rpki-client