Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
File: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json)
Hash identifier: Nivi2PIRGpGjUwB1h70w+U/6Kc88+fEviZPEYuqD7Rk=
Subject key identifier: 86:A6:2E:B3:63:A5:7B:CF:AA:F2:37:26:9B:0E:34:0D:30:25:14:58
Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471
Certificate serial: 01A0E1AB2D4D21AF6DB15AA035013603C20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 07:01:26 +0000
Manifest this update: Sun 27 Sep 2026 07:01:26 +0000
Manifest next update: Mon 28 Sep 2026 07:01:26 +0000
Files and hashes: 1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: hEmrridErjdp5i80omR5en5/LDD5DeyWtEvPBJDjJw0=)
2: Xt7SYxDoMD7f1JMsQqo2iBPwXMs.roa (hash: WGtYGe9kCICp8bvBpPPbaske1TWvTE4WqSyYb2snIwU=)
3: cAmf4fFwxBOF5X-O_EChDpWAvt8.roa (hash: S1GNYBesOR3SinnMOoqnXekNsmRmZx3vpxOqHl53nP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ab:2d:4d:21:af:6d:b1:5a:a0:35:01:36:03:c2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471
Validity
Not Before: Sep 27 07:01:26 2026 GMT
Not After : Sep 28 07:01:26 2026 GMT
Subject: CN=86a62eb363a57bcfaaf237269b0e340d30251458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:4c:2c:04:1a:24:f1:04:a0:37:cd:6f:7e:
d6:08:a0:72:2d:0b:82:fc:6a:f8:97:46:61:b7:96:
fc:d7:17:26:13:af:46:99:87:de:83:99:a6:25:8f:
01:08:97:2e:ca:e6:a7:68:fa:06:7b:d5:a5:e5:21:
4c:fe:1c:b0:89:a8:58:22:8f:e6:ec:42:6b:fa:03:
9b:05:08:7e:c0:6a:74:b0:36:25:c5:79:dd:09:9d:
7f:dc:f9:f8:17:f9:ce:41:5d:ca:de:43:cc:f2:59:
81:44:86:ab:cb:57:7d:e1:87:5c:33:8c:bb:96:d9:
1f:64:b3:93:39:95:55:0e:6c:93:bd:f6:bd:9c:f5:
86:9c:f7:77:5a:3a:8c:89:54:c7:3f:ff:d0:ee:07:
e5:b0:ad:9e:b5:d6:47:93:bc:ff:56:d5:dd:ae:8c:
c8:08:40:4e:24:4f:96:71:40:23:a9:11:8e:ea:39:
ed:ad:e2:44:11:95:a4:8d:c3:f7:3a:ad:99:c2:89:
f0:73:1b:07:4a:2a:fe:0a:8e:ab:e1:37:00:84:a0:
c2:22:25:85:37:7c:9c:a4:c5:dc:dd:26:9b:36:ca:
0b:e6:9a:9d:d8:e1:18:9a:bc:b9:be:94:20:e8:18:
1e:f3:ad:d9:b0:9d:4f:d6:2b:4e:0b:5c:48:ea:60:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A6:2E:B3:63:A5:7B:CF:AA:F2:37:26:9B:0E:34:0D:30:25:14:58
X509v3 Authority Key Identifier:
keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:66:e4:10:fa:69:4a:cc:de:97:49:5b:b7:f4:54:60:98:35:
eb:c4:6d:d7:9a:10:a7:fc:15:6e:0b:ee:2b:ca:bd:b3:79:65:
22:de:4b:38:1b:f7:5b:f2:9d:f2:dd:56:84:de:61:17:9c:97:
38:1f:7c:be:e5:ed:2c:b3:be:a7:c9:32:c5:a0:e8:29:c9:8e:
41:a2:b1:5e:f4:84:f4:94:4b:ee:de:0c:86:44:68:e3:7e:4a:
a4:c7:bd:00:39:5b:f4:dd:d8:fd:ec:9f:47:c4:c3:51:72:ea:
ac:60:1c:c8:e8:f0:5a:2c:2e:11:d6:68:a9:99:3d:59:f3:98:
f2:ac:75:2a:8a:11:09:a6:0b:e5:03:80:38:10:11:cb:a2:0b:
0a:ea:91:5c:de:18:14:fe:b4:8a:85:80:d4:79:f1:f8:b6:8f:
9d:d2:6c:c6:82:ce:d4:ab:86:6a:8f:a5:8d:a5:fc:2e:4d:d0:
8a:62:1a:dd:77:eb:80:ad:58:a0:54:61:85:e1:62:97:90:45:
b1:aa:c1:1b:d1:06:e2:8d:f0:8c:94:fa:e5:c5:9a:20:67:f1:
8b:e4:f9:13:17:02:f5:a3:5d:c1:2d:13:ea:e8:41:21:cb:60:
5c:8f:62:20:6b:97:b4:00:bd:29:6f:5d:e6:67:c7:57:0c:5d:
4c:c4:44:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:01:59 2026 by rpki-client