Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
File: 1oFRD_A-lUZKxySioFlNpAfwWwc.mft (raw, json)
Hash identifier: CJOO/ojtdHygYWcmY67XHaxoHocJEHPyTNNTPPUlYNo=
Subject key identifier: 5E:8A:29:1B:29:FD:BC:7A:78:A5:29:74:7F:6C:AF:62:C7:70:AE:E0
Authority key identifier: D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07
Certificate issuer: /CN=d681510ff03e95464ac724a2a0594da407f05b07
Certificate serial: 01A0C96AC925D9B0AB7B922966040F5D3BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
Manifest number: 01D1
Signing time: Tue 22 Sep 2026 14:00:13 +0000
Manifest this update: Tue 22 Sep 2026 14:00:13 +0000
Manifest next update: Wed 23 Sep 2026 14:00:13 +0000
Files and hashes: 1: 1oFRD_A-lUZKxySioFlNpAfwWwc.crl (hash: U+l+CNmw7uu2g2EWTVZDs6CV8TQFXgvJM9xiALlOc0o=)
2: DjQMqg2kffWJVFlf9YdB26kT8mU.asa (hash: Cp0XT0ge1mZD2iIW7l9FB0V1yVWibAjRZhffKMIEnu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6a:c9:25:d9:b0:ab:7b:92:29:66:04:0f:5d:3b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d681510ff03e95464ac724a2a0594da407f05b07
Validity
Not Before: Sep 22 14:00:13 2026 GMT
Not After : Sep 23 14:00:13 2026 GMT
Subject: CN=5e8a291b29fdbc7a78a529747f6caf62c770aee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:71:00:b3:1a:a3:4e:4b:bb:47:eb:27:17:
84:f7:e2:f6:ee:c1:15:28:27:0d:f8:74:e0:ef:98:
f3:86:a7:ee:2a:40:92:68:69:b0:64:32:cd:fa:40:
19:7b:6a:11:98:7d:41:da:d9:3a:97:bf:8f:70:b3:
ec:4c:01:50:4d:9a:a7:a2:d1:84:05:50:6c:ba:80:
b2:c5:5d:61:69:e7:d9:2c:83:46:cf:76:9c:e3:4c:
32:4a:8c:d5:e4:a2:c4:3e:38:fc:98:8d:c0:9a:03:
ba:1d:75:fc:b2:2c:c3:e4:a2:a5:2f:22:8e:b1:b8:
1c:0b:b8:fe:ed:ce:b6:39:98:5f:7a:0b:ac:c9:1b:
23:07:64:4f:aa:30:70:8f:24:38:95:f7:44:8d:76:
db:92:66:b4:39:78:ac:b1:42:ce:61:cf:46:56:af:
6d:c4:ff:57:8b:94:0c:32:17:57:dd:09:60:3e:27:
92:01:a1:94:5a:43:9e:df:ea:ab:fc:d3:3b:2e:cf:
81:05:e6:8a:2d:1a:64:dd:6b:0a:47:25:7c:89:ef:
4b:56:84:67:9e:a5:35:8f:26:dd:75:41:88:c6:ab:
bf:15:16:ca:e0:93:f5:4a:80:e8:19:ed:97:ca:2e:
b3:df:c8:20:d6:2b:2a:9e:01:3a:ae:72:97:a4:ce:
83:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8A:29:1B:29:FD:BC:7A:78:A5:29:74:7F:6C:AF:62:C7:70:AE:E0
X509v3 Authority Key Identifier:
keyid:D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f6:f8:0c:2b:3d:3f:c6:49:32:bd:04:b2:4a:44:68:e2:d9:
ad:bd:61:d9:c7:04:cb:2a:e7:fb:55:2b:7f:bc:50:32:f5:39:
7b:06:d4:c5:43:d6:81:4a:29:1a:84:1d:cc:de:49:db:f4:6b:
b5:f5:9c:36:37:ab:50:a5:3a:ce:a2:28:99:27:23:05:98:a1:
ab:69:2d:64:3e:74:f3:ef:5c:fb:89:9a:94:f9:93:7f:a9:af:
97:0d:a6:67:1b:71:a1:e4:05:a0:5f:78:87:89:63:9f:6f:4d:
ad:3b:7e:28:be:70:ab:5b:15:83:fa:be:22:b7:bf:8a:8b:62:
65:4d:cd:94:e2:26:61:f7:1a:65:82:56:af:3a:81:9b:e4:b1:
1c:1f:c3:e3:77:ea:a7:58:40:24:46:a0:d1:ba:ca:a1:54:b9:
e2:b1:94:ae:c8:86:b4:44:45:68:08:2a:7a:c7:6b:96:c9:c4:
b7:f9:6d:85:55:15:3d:5f:47:81:2d:ba:c0:d7:00:15:94:2c:
a7:74:38:db:c4:68:eb:9f:ca:a0:48:91:79:17:18:15:18:30:
70:fa:67:c5:a9:54:77:38:a3:26:77:1b:90:ee:1b:68:2a:a4:
1f:d5:b9:29:1a:80:85:00:91:d7:35:c6:4b:bb:e9:1e:7f:24:
3a:31:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:43:23 2026 by rpki-client