Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json)
Hash identifier: 9RBd+gaUTnWs8OlV8O8J4vr9ladZnFAb2tLlTzhKf+A=
Subject key identifier: 43:AE:2C:07:BE:5A:25:DE:46:30:E3:1E:1F:4B:46:E4:A1:42:B7:56
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 01A0DACD1E7FDE0C45171414089EA1FDAE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
Manifest number: 0CAA
Signing time: Fri 25 Sep 2026 23:01:10 +0000
Manifest this update: Fri 25 Sep 2026 23:01:10 +0000
Manifest next update: Sat 26 Sep 2026 23:01:10 +0000
Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: U2D+U1K3KI7ZNYVe8mrUz9md4apLz8GL02wgA92ntw4=)
2: SpCVnDCeEekxdblga7xr60e2Z5Q.roa (hash: 38e7O6zFRveFVAruc/e0fsqYdqeGU4GrUOL6ww1G6oQ=)
3: xKZaKt2ejyS1RvKxbygcbV14q7Y.roa (hash: pRhnCq62G3nLpLOE3zJBDzARRGgB05rKDlaS5XncNNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:1e:7f:de:0c:45:17:14:14:08:9e:a1:fd:ae:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: Sep 25 23:01:10 2026 GMT
Not After : Sep 26 23:01:10 2026 GMT
Subject: CN=43ae2c07be5a25de4630e31e1f4b46e4a142b756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:4f:fe:a5:13:c5:17:6d:f7:a5:08:db:5b:
96:72:24:82:01:e1:de:3e:e8:21:4b:ec:9b:5f:96:
09:31:42:c2:b6:aa:04:fe:42:4e:7a:96:28:cb:ba:
76:cb:ca:d5:d2:a0:37:ed:e9:a5:83:fd:6d:7d:5a:
bd:f3:54:93:81:1e:c2:8b:76:51:54:9b:95:7b:33:
85:0f:ff:89:97:7d:6d:ce:2f:3b:a7:74:46:17:42:
c1:92:c8:0b:4c:55:82:2f:51:e1:1d:ee:e0:cd:42:
76:bb:48:28:7a:14:ff:ad:e7:2d:ac:e4:c7:d5:82:
33:f6:51:af:84:70:08:93:22:ab:a6:ef:ad:ba:0a:
3e:9f:1e:b0:54:6a:a5:46:0c:27:00:49:8e:55:3c:
af:52:f7:29:c5:51:04:a5:03:3d:48:80:65:c1:23:
89:32:d1:a6:f7:d6:25:30:13:19:38:52:3b:7c:f4:
16:7d:68:a7:0b:7b:37:66:43:58:7e:91:68:77:ed:
97:05:11:4f:6b:82:94:49:d0:22:38:59:70:aa:07:
f9:b5:bd:8c:9b:13:fa:4e:1e:6c:1b:e9:de:91:c8:
6d:34:06:ce:74:30:0b:6f:80:51:d4:77:7f:6a:4c:
09:ea:f3:4a:34:88:21:55:59:51:d2:2a:65:67:11:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AE:2C:07:BE:5A:25:DE:46:30:E3:1E:1F:4B:46:E4:A1:42:B7:56
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:44:ba:02:61:01:3e:eb:16:e8:46:11:09:6b:c6:b4:a6:05:
67:2b:c4:a4:72:cb:f0:02:d5:80:99:e4:03:6f:b1:39:74:55:
ce:86:85:1e:89:4a:18:af:d3:45:63:56:78:c6:70:01:d9:08:
a7:a1:1c:5a:5a:aa:d9:7f:9e:12:78:a3:bb:6e:02:3c:ae:bb:
3d:a8:bf:c8:c8:14:18:e7:4f:dd:25:13:38:a6:5b:6c:67:a7:
d9:c3:a1:dd:c4:cd:12:3e:9d:88:49:1a:96:4e:7a:60:17:6f:
78:12:84:8a:2b:7b:cd:cc:bb:0d:66:6d:73:95:a5:96:8d:06:
ea:30:85:ee:60:3e:68:de:a5:86:d1:c1:5a:47:c7:8b:f4:09:
ed:63:dc:e8:1a:4e:69:df:49:c2:f9:ec:ee:00:d9:6a:db:96:
9f:78:93:c5:62:a5:28:44:af:11:99:01:8f:8b:13:47:cf:f4:
37:7d:de:8f:69:a8:78:2e:4e:9a:a3:86:be:c5:4c:c8:21:45:
40:09:40:1b:b1:65:a4:fd:cd:ba:3e:66:8d:aa:77:80:e9:d2:
68:cf:0a:73:03:c5:0e:db:59:b6:a3:09:70:7a:06:0f:24:fb:
9a:ee:9e:92:13:9e:c6:57:61:72:99:e1:73:ce:22:62:80:fc:
ba:59:b3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:02:03 2026 by rpki-client