Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
File: 1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json)
Hash identifier: wah14q3+kdlY6b+yKYLmkjw3oBR2fU8lB8gj3t8jKwc=
Subject key identifier: 02:24:6E:B0:72:A4:AA:EC:C3:11:F6:E6:75:79:E9:BB:3A:9E:7C:0E
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Certificate issuer: /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial: 01A0D42670D3E678213E2FAC2AF7272E27C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
Manifest number: 13DA
Signing time: Thu 24 Sep 2026 16:01:24 +0000
Manifest this update: Thu 24 Sep 2026 16:01:24 +0000
Manifest next update: Fri 25 Sep 2026 16:01:24 +0000
Files and hashes: 1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: kO/9/NP1Ac3RGS1ljW1vdylLDih9BeVMysgPXKmy47s=)
2: MNcRXpZmo9U1VGyp7iNoe-ahRYc.roa (hash: sUVdf+DEbppS/mcQWvKY4TguTZDnt2ApNazCAD8Sm+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 16:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:70:d3:e6:78:21:3e:2f:ac:2a:f7:27:2e:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Validity
Not Before: Sep 24 16:01:24 2026 GMT
Not After : Sep 25 16:01:24 2026 GMT
Subject: CN=02246eb072a4aaecc311f6e67579e9bb3a9e7c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:4e:30:75:50:82:2e:47:50:fe:0e:48:a9:
2a:c9:80:c3:b5:a3:22:ab:d7:ab:71:88:7d:01:78:
05:ae:25:0c:5f:11:d0:89:3a:1b:ba:ae:bf:12:50:
b2:29:8e:8a:b6:a1:1d:09:9a:6d:e3:f0:eb:93:df:
69:a8:e3:c5:6e:b0:16:39:9d:a6:92:1e:0a:1d:ce:
f1:49:64:b0:4a:3f:65:31:54:54:93:c6:76:42:5a:
3d:ca:de:d7:e3:10:f8:05:df:75:39:0b:ef:a7:20:
60:67:b9:bf:d0:e8:b2:1c:12:36:38:6b:e9:41:6d:
2c:46:1a:0b:14:bb:62:fc:70:2f:d4:bf:2f:ca:63:
8d:2d:a7:bc:cd:b8:ff:73:04:f9:99:b6:28:44:8b:
c6:87:a2:dd:d9:9f:fc:29:2c:53:06:e3:b4:86:6c:
64:ec:06:24:da:93:87:b8:19:82:f7:0f:71:e1:73:
a3:f1:09:95:46:df:89:bb:1f:be:e3:ae:03:a8:6e:
53:1c:01:8a:ae:bb:83:24:13:16:ca:c3:eb:7f:08:
e2:51:c2:5f:a9:65:2d:4e:04:1e:c9:ec:07:1e:71:
48:55:c7:b8:c8:a0:5b:b6:4b:ac:a8:11:1b:0f:c9:
51:de:61:73:91:ea:7c:52:4e:03:fe:85:53:0e:61:
f4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:24:6E:B0:72:A4:AA:EC:C3:11:F6:E6:75:79:E9:BB:3A:9E:7C:0E
X509v3 Authority Key Identifier:
keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c7:be:e3:03:e9:e4:a2:9a:1b:ef:56:61:b1:38:bc:35:4a:
45:c3:b5:75:a5:76:12:a4:a1:d4:39:8a:1e:02:9a:82:6b:cb:
72:f0:c5:c5:2f:f3:dd:34:d7:92:2a:10:68:a6:fb:f2:2d:14:
bd:16:4c:0a:b4:d1:f1:92:c7:7e:ee:4c:c1:16:89:38:00:ab:
17:52:e0:2d:4e:40:d5:f5:af:c1:f6:5b:5c:c6:56:f3:4a:ca:
e7:a7:97:13:22:35:03:b8:d5:06:d3:24:06:af:1c:0a:a4:77:
bd:49:f1:ac:67:cd:47:6c:c3:5e:bc:37:ed:82:4e:3c:2e:ff:
9f:8a:c8:35:cd:69:f7:04:4e:75:83:44:a7:fd:45:69:9c:10:
f5:6f:a1:bc:b1:98:61:69:88:cd:98:38:90:0b:d0:7d:c8:ed:
be:e0:b8:86:54:ea:62:70:86:43:af:48:07:19:94:44:5e:23:
0a:fb:46:1a:2f:f1:12:6a:fe:3d:dc:e0:c8:c2:1a:41:8b:89:
4b:f8:d3:ac:70:9c:d1:db:e7:db:f3:45:4e:cd:31:09:21:9e:
64:72:ee:64:94:82:5d:2c:08:a5:d0:c0:1a:7b:b5:f7:2a:1d:
14:4e:26:32:b1:ba:c0:04:06:03:b0:2d:fb:7f:61:28:4e:16:
7c:e4:32:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:23:09 2026 by rpki-client