Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
File: 1bAhsehBJlk8722YgDQTqnLQAeA.mft (raw, json)
Hash identifier: r8qdh5YqLCy/DhFXjAWsrz9R4K2ULsoTxwdLMA04X7w=
Subject key identifier: 03:70:49:9F:D8:4C:78:C4:5C:EF:97:43:B6:32:54:00:E6:BD:C3:84
Authority key identifier: D5:B0:21:B1:E8:41:26:59:3C:EF:6D:98:80:34:13:AA:72:D0:01:E0
Certificate issuer: /CN=d5b021b1e84126593cef6d98803413aa72d001e0
Certificate serial: 01A0D6F01C21693B477630A2C513D378BB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
Manifest number: 039C
Signing time: Fri 25 Sep 2026 05:00:54 +0000
Manifest this update: Fri 25 Sep 2026 05:00:54 +0000
Manifest next update: Sat 26 Sep 2026 05:00:54 +0000
Files and hashes: 1: 1bAhsehBJlk8722YgDQTqnLQAeA.crl (hash: XZXlkaPwM0C3f0N0bnw548JX4ILVErtgE65rhVHC2DU=)
2: J4-0xOuc7ybl1SkKKEI_GYBUqr4.roa (hash: 2q5jjo4zIqBtwYfXVL0EEJ2OzEi2CDWkpY8YOeiu7aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:1c:21:69:3b:47:76:30:a2:c5:13:d3:78:bb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b021b1e84126593cef6d98803413aa72d001e0
Validity
Not Before: Sep 25 05:00:54 2026 GMT
Not After : Sep 26 05:00:54 2026 GMT
Subject: CN=0370499fd84c78c45cef9743b6325400e6bdc384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:66:9a:f8:3d:ba:59:4e:51:65:68:25:48:74:
34:94:1f:45:6a:af:01:dc:83:d9:08:45:0e:b0:71:
38:f6:98:f0:7d:e3:0d:3d:22:0b:ad:4a:55:13:2f:
bb:ae:e2:05:82:13:4c:0e:da:8e:5c:ce:41:52:1e:
82:fe:7a:3f:3e:dc:0b:35:d3:64:ba:a6:44:b6:96:
49:e9:b4:ee:6f:4d:69:d1:03:a6:de:8a:0b:d4:b9:
3d:d0:39:46:47:74:10:55:e0:5d:1e:53:d5:d8:f5:
8e:7b:58:49:24:0a:af:92:43:7e:cf:84:be:6e:b9:
60:72:8d:c3:24:8f:48:1a:96:00:d9:ab:a2:8b:2a:
ca:c5:8b:6a:68:5f:8c:6a:59:19:a8:87:56:cb:55:
14:3f:ec:46:83:8d:31:74:64:d4:73:ec:d6:82:ee:
7d:75:62:5a:43:89:55:d6:ca:81:eb:f6:56:75:06:
26:f8:05:6f:0f:8a:7d:95:80:fd:6e:84:25:13:0a:
d6:e1:7e:8e:e8:b3:aa:b8:71:84:91:eb:ac:d0:1a:
b9:b6:5d:78:d5:01:14:bb:bd:20:7f:57:b4:cf:ff:
0a:bd:4e:81:4c:94:4b:02:a4:bf:cc:b5:e3:26:02:
10:32:b0:7e:a2:31:2e:c4:63:85:02:f1:fd:6b:be:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:70:49:9F:D8:4C:78:C4:5C:EF:97:43:B6:32:54:00:E6:BD:C3:84
X509v3 Authority Key Identifier:
keyid:D5:B0:21:B1:E8:41:26:59:3C:EF:6D:98:80:34:13:AA:72:D0:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f0:1b:39:a6:86:e3:1c:07:cd:ef:63:23:82:94:33:21:0e:
31:7b:0c:4c:18:69:7d:f7:fb:96:ff:77:68:e1:44:b2:8c:79:
7c:8e:df:ce:d8:8c:36:22:40:09:52:d2:50:71:f3:46:4f:7e:
ae:bf:be:9c:e0:53:bf:e4:20:0e:e1:0a:e1:21:de:e6:93:2e:
e6:2b:71:a0:4b:e5:c0:51:57:c6:be:44:7c:46:58:2c:54:99:
b2:18:f6:b1:96:94:ac:4d:d9:26:79:76:e7:c9:d5:00:2c:d6:
9d:4e:ea:09:d3:fd:85:98:1d:29:c7:9c:d3:2f:8c:47:7d:0e:
15:53:7a:b8:9a:43:9c:78:92:df:dd:93:c9:f3:1a:df:75:67:
71:9d:4d:78:d1:d6:31:f9:0b:5b:2e:b2:60:14:03:37:02:da:
e3:cc:92:13:f4:48:66:2c:c3:f0:eb:10:a9:23:98:f0:69:65:
4e:40:e2:83:4b:f8:1f:30:12:7c:08:db:71:b6:89:e3:b7:9b:
16:ef:4c:8c:17:93:e6:34:87:99:97:6a:07:2f:2d:d2:83:8f:
b0:3a:dd:07:c2:cb:75:4f:f1:3c:d5:60:c1:52:93:62:14:1b:
2e:b8:61:f1:6b:41:94:6c:ef:4e:e4:52:e1:4d:c7:a8:74:73:
ba:e4:63:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:20:25 2026 by rpki-client