Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: 56hiE8S4hF/PZc/nfPx/BONx0g+ucxwfym0au0pslhA=
Subject key identifier: 67:7E:8F:C0:2F:1F:C3:9D:0D:96:18:3A:E1:16:9D:36:91:CA:E0:6B
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 01A0E09843B45680E365AC4E7BCB4BDBC411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 17B2
Signing time: Sun 27 Sep 2026 02:01:10 +0000
Manifest this update: Sun 27 Sep 2026 02:01:10 +0000
Manifest next update: Mon 28 Sep 2026 02:01:10 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: IUXAP9KjgKCNxHpyPbLuvexvmuQER8Be80vmTquTumI=)
2: 2ztr66xhOcOr2Kq6L1D4fEoRjwo.roa (hash: amz+yTvX9x7rzj0FFfB2aTlKhOEfzIXqA7tCgNwl8L8=)
3: ypNsMEiA0eytbHpILkkUcrUHiuI.asa (hash: MB36B+UQExuZ+YHIlLlB3WxM9/xtf1qsLE+t7spjDH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:43:b4:56:80:e3:65:ac:4e:7b:cb:4b:db:c4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Sep 27 02:01:10 2026 GMT
Not After : Sep 28 02:01:10 2026 GMT
Subject: CN=677e8fc02f1fc39d0d96183ae1169d3691cae06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:ee:8c:77:14:ff:10:06:17:7b:e7:00:77:
51:9b:b3:a1:dc:02:f8:1b:8e:c7:25:37:eb:cc:01:
d5:33:6b:57:ab:6c:97:c6:78:85:5e:49:9f:8b:18:
e6:db:89:92:a2:19:47:51:46:5c:87:06:d9:07:5e:
ce:42:9e:e9:ab:05:68:da:13:b6:91:00:f5:e1:4b:
50:8d:8a:7d:4e:05:80:20:39:c4:9b:fb:de:b5:e0:
8f:f5:41:b8:a5:c9:64:0c:32:67:66:a4:80:3d:48:
65:4a:d8:3c:44:b4:9c:43:dc:3a:fe:0a:1d:28:03:
12:75:f8:c3:ac:c4:28:c6:ea:cd:d0:88:bb:36:9d:
25:53:41:d8:b7:19:63:68:97:34:ef:f1:f0:af:2c:
34:cd:55:1d:25:b7:ec:f1:31:75:e8:3e:ea:9f:35:
60:e8:be:06:13:c5:40:c2:af:f7:c8:7f:db:9b:94:
14:d2:ad:e6:2b:39:5f:0b:73:b1:89:64:9c:f7:61:
68:f0:49:64:96:40:35:e2:f8:ef:a4:d3:70:16:20:
a4:1a:a0:2a:c9:1c:1c:4e:e8:46:2e:9d:7f:d4:c8:
8b:d2:b7:56:00:2a:43:02:a5:6e:05:f2:d6:55:a4:
cf:14:b1:2b:69:72:ed:15:04:e2:4e:05:5f:e1:87:
a3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7E:8F:C0:2F:1F:C3:9D:0D:96:18:3A:E1:16:9D:36:91:CA:E0:6B
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:11:01:16:8d:5e:05:34:bf:97:c6:28:22:9f:bc:65:4d:c6:
bb:98:c3:d2:e8:d6:51:05:a3:a8:31:ea:ec:aa:6b:5a:b5:6f:
c4:d5:02:33:52:65:17:fa:7d:0d:42:de:41:ce:f7:e9:7a:a0:
24:d9:7c:99:72:4d:a0:73:c3:a5:43:55:59:43:72:cd:28:96:
5e:91:db:d1:55:5b:f6:29:09:4c:ce:90:82:93:fd:69:7f:7f:
4c:3d:67:66:21:9b:9e:bf:32:3d:77:13:12:20:ec:36:81:2b:
8a:a6:6d:27:0c:96:b2:69:36:5d:fe:6f:ad:3d:cb:23:75:e1:
13:69:0a:5c:73:c7:46:7b:05:19:46:62:80:81:1e:2b:3f:5c:
36:85:09:c1:23:d4:b7:a9:cb:fb:89:48:63:59:ca:3e:c6:89:
26:89:2f:97:30:0f:7a:8c:e4:8a:73:1c:a0:cb:80:f6:ce:fb:
36:60:ad:3f:b6:c1:d0:a6:92:c6:d4:a8:53:9b:ea:09:49:68:
96:0f:c3:7a:3d:d9:10:04:a0:ac:ae:6e:ac:0c:9a:fd:db:5d:
e4:3f:47:f8:73:90:4d:e4:76:cb:df:49:54:66:ae:56:21:5d:
08:a2:95:ba:0a:b5:df:25:df:dd:3e:e2:d1:44:f1:ec:8a:b0:
62:bb:99:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:23:10 2026 by rpki-client