Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: 0h74j8rT9LiFp0HYQnH4Npg3f6lyTn4Z04JSC3DQJL8=
Subject key identifier: 1C:72:EF:13:D7:5C:82:6E:A3:38:58:7A:69:3F:7D:73:04:E6:3E:85
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 01A0DA285B69AA2633176A7BE129FD6DF707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 19B5
Signing time: Fri 25 Sep 2026 20:01:12 +0000
Manifest this update: Fri 25 Sep 2026 20:01:12 +0000
Manifest next update: Sat 26 Sep 2026 20:01:12 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: 10y4g+J4YKVM09or5F1gvwV8KoajwiPWOyn6wfxm1FM=)
2: W8PXcMyrmfRSqYOFlpTyQQni5Fg.roa (hash: dRzn2uxU587w+8HTL/6mVCqJFuzClYuZ55vRVG+mWEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:5b:69:aa:26:33:17:6a:7b:e1:29:fd:6d:f7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Sep 25 20:01:12 2026 GMT
Not After : Sep 26 20:01:12 2026 GMT
Subject: CN=1c72ef13d75c826ea338587a693f7d7304e63e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:37:00:b4:8a:87:cb:19:c9:fc:02:50:c9:ad:
91:ba:72:34:ff:c9:ec:e8:3f:c0:d7:70:ad:e0:7c:
38:ed:e1:2b:d7:98:26:5e:d1:21:02:08:c6:3f:08:
6c:fc:32:42:ac:a0:78:57:8e:d2:f0:a9:4f:6e:e4:
66:d9:73:ab:de:97:7b:c8:6e:23:45:c6:ed:14:44:
fa:46:32:b6:29:7e:6d:aa:5e:84:c5:9e:c2:fb:8b:
47:56:c9:bf:26:86:62:ae:75:a7:bc:5e:c7:70:10:
19:2f:69:d5:62:0d:37:36:42:0b:94:8b:87:01:76:
a4:8c:e0:c0:b4:c4:f8:62:92:de:c3:a0:76:af:c9:
7f:be:48:3c:1b:f1:73:99:ce:6f:8d:c4:c1:b5:63:
04:5b:be:a2:41:57:07:fa:1b:0c:70:6f:58:b3:c9:
14:34:b5:a1:03:60:23:c6:96:ce:2a:4c:43:5b:8e:
11:f3:fe:44:13:c6:9f:d9:94:07:cd:58:fa:f0:31:
48:90:59:e2:12:30:e4:cf:4d:73:56:99:ee:2a:24:
e7:d5:e4:68:9b:dd:39:4f:be:71:92:86:8c:b6:c9:
52:4f:84:ae:ff:fa:a5:f6:09:00:45:6c:1b:a0:96:
79:b4:ba:f6:ac:ba:00:1f:e6:6f:dc:be:2e:b0:16:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:72:EF:13:D7:5C:82:6E:A3:38:58:7A:69:3F:7D:73:04:E6:3E:85
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9b:84:d6:6d:ca:09:b3:40:a5:0b:05:35:7c:17:78:ac:aa:
d2:8e:41:51:e3:60:64:78:d0:5c:e4:af:b4:2e:12:b6:99:63:
04:97:32:2d:69:ae:8b:10:e4:1b:23:95:3d:a7:31:8c:d7:3c:
fd:64:d1:64:71:18:2c:8a:95:62:4c:c6:db:15:e3:1a:7a:0a:
38:bb:ed:93:94:15:53:e1:3c:87:71:a7:0f:6a:8c:17:f2:d8:
b8:0c:1c:44:ef:23:e3:c7:af:43:3c:cb:cd:bc:5e:a8:53:bc:
47:dd:5e:f1:b0:5d:b5:d6:d6:b1:7f:9e:d0:f0:b6:87:d3:65:
c6:c4:ec:be:65:a8:38:2e:49:1f:76:d3:73:6e:d5:5d:f4:d8:
e9:41:84:72:05:8a:6f:03:cd:ca:33:be:bb:84:f0:54:24:f6:
50:d0:73:97:f5:22:0a:62:ec:b2:96:b4:df:48:ec:3e:a8:f0:
01:45:f9:93:72:d6:b9:07:d3:b0:fb:0d:7c:cd:df:b7:74:9d:
c4:de:1c:76:53:ed:74:89:0d:7a:e8:74:8d:6b:10:fc:3f:24:
bc:3d:62:2c:a9:89:5d:46:6c:0c:95:43:45:51:65:65:31:c3:
63:51:50:5c:c6:20:37:87:39:48:8e:87:53:ad:51:5b:ec:e9:
3e:85:4e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:03:44 2026 by rpki-client