Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
File: 1P97rGRNWVZyLl4YOiL7FFXnVUY.mft (raw, json)
Hash identifier: 4RkSN83loH4ET7MnzPsqXDTOZWeG0LYOX2o/6NHJcm8=
Subject key identifier: 04:A7:33:F3:94:50:60:13:3C:FC:67:C6:E8:FA:6D:82:77:90:AA:88
Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Certificate serial: 01A102B64B05D49B999205A7D55899BB9FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
Manifest number: 0712
Signing time: Sat 03 Oct 2026 17:01:03 +0000
Manifest this update: Sat 03 Oct 2026 17:01:03 +0000
Manifest next update: Sun 04 Oct 2026 17:01:03 +0000
Files and hashes: 1: 1P97rGRNWVZyLl4YOiL7FFXnVUY.crl (hash: BwnIDbuuSPP1H2ecUJoz95idT3pStw7p7lMdlszRHO8=)
2: nj_5MaQooSjXGiQr1BUruywSxrU.roa (hash: I6PmIQNv3jTKo04VZO+wfcI9Pmj3B2t3GE165A15SFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:4b:05:d4:9b:99:92:05:a7:d5:58:99:bb:9f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Validity
Not Before: Oct 3 17:01:03 2026 GMT
Not After : Oct 4 17:01:03 2026 GMT
Subject: CN=04a733f3945060133cfc67c6e8fa6d827790aa88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:d1:ca:a5:4d:b1:cb:b8:3d:f2:85:1e:9e:
e6:fb:23:d1:15:91:3b:25:09:f3:36:33:69:e9:bc:
37:72:e9:5a:a5:05:89:b5:1b:73:fa:89:d1:dc:09:
fa:3b:7a:c7:33:bd:2f:27:b4:5c:e7:57:cf:4c:2b:
e2:24:04:c4:b0:bd:72:3e:8c:6f:62:9e:fa:a4:b9:
8c:26:30:3a:e5:d5:e6:f2:ff:5a:b5:71:3c:b3:52:
3e:82:8f:08:9e:0d:78:3f:db:41:1d:a7:b3:7f:f3:
a5:b5:3e:b8:7b:76:a7:3d:75:b3:7f:d7:8e:a3:2b:
87:6c:0e:36:9c:9d:71:28:be:0b:46:b2:12:d3:b1:
a9:94:37:2e:95:9b:b6:90:8e:29:86:ee:35:7d:97:
88:69:b9:07:79:a4:0f:f0:85:77:3e:e7:a6:94:34:
a0:c5:8d:ed:f6:6e:a3:16:50:48:e9:c2:61:86:90:
0f:5b:76:7d:10:90:91:31:fe:77:1d:bf:d8:bb:61:
0b:5f:e9:97:12:0a:25:e9:7f:ce:78:51:57:a0:9c:
3e:4f:94:98:6b:fe:c9:f5:dd:4b:fd:b1:32:6e:32:
a7:33:78:bf:99:84:ca:ad:8f:9b:7a:f1:c8:02:28:
d4:4c:e8:03:b9:fe:18:67:ba:63:81:83:62:82:41:
8a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A7:33:F3:94:50:60:13:3C:FC:67:C6:E8:FA:6D:82:77:90:AA:88
X509v3 Authority Key Identifier:
keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:94:a6:01:0f:ab:08:fc:3b:ca:05:e2:8a:1c:22:60:26:ba:
a8:2d:29:15:4d:46:0d:70:d8:95:89:57:0c:7a:4e:40:08:a1:
7b:59:ef:f6:ab:e8:7f:7a:01:b7:e1:94:de:74:83:e5:26:7f:
27:b7:71:3d:71:ae:45:e8:f7:0f:a8:36:3d:fb:d0:a8:28:34:
86:cb:b9:8f:dc:92:d3:06:06:e5:9a:07:ae:b8:ed:0b:94:03:
c2:c3:62:5d:7a:e4:fa:56:a3:55:7c:14:21:78:6c:2f:92:d3:
67:16:31:c0:84:cb:2a:8b:e8:63:09:74:5a:ca:10:39:e9:35:
e9:e4:b1:27:38:df:68:59:da:3b:ce:4e:69:1a:36:8c:71:d5:
fe:7f:de:8f:c6:67:9e:ba:f2:16:36:cf:e1:d7:44:ae:9c:c7:
9c:ba:9a:0e:ee:2a:f3:4c:3b:95:96:9e:97:5f:2b:f3:ba:9e:
93:35:5c:c5:ec:71:23:1f:ff:bb:ec:dc:ba:b6:ec:f7:c2:9f:
9d:32:b7:1f:c6:cf:d7:38:9a:d9:7b:da:ae:50:04:d1:56:9c:
43:50:47:9d:ba:32:fc:73:7a:00:f7:f2:84:09:f9:16:f8:4f:
fa:a2:77:6e:d0:8c:22:91:3d:9c:76:a0:ec:30:4a:b3:4e:5e:
bd:8e:98:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:47:58 2026 by rpki-client