Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
File: 1cH3vxvczjWLoL_c-_aWTzvqI2I.mft (raw, json)
Hash identifier: 9oZadznCxyOMkscBtGT95A+/evu9MpUc4FfnLysuNz8=
Subject key identifier: 47:66:E1:66:8B:25:89:35:8E:FD:89:DF:F4:FD:89:5C:3F:22:48:4C
Authority key identifier: D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
Certificate issuer: /CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Certificate serial: 01A0D4CBD93975F19894A0E7A1C2D851D582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
Manifest number: 0427
Signing time: Thu 24 Sep 2026 19:02:04 +0000
Manifest this update: Thu 24 Sep 2026 19:02:04 +0000
Manifest next update: Fri 25 Sep 2026 19:02:04 +0000
Files and hashes: 1: 1cH3vxvczjWLoL_c-_aWTzvqI2I.crl (hash: Wfa0vbF/9o32dn48hibaZhR5agn37UyPKCcFCwREQUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:d9:39:75:f1:98:94:a0:e7:a1:c2:d8:51:d5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Validity
Not Before: Sep 24 19:02:04 2026 GMT
Not After : Sep 25 19:02:04 2026 GMT
Subject: CN=4766e1668b2589358efd89dff4fd895c3f22484c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c0:b5:6a:60:eb:6b:2a:d6:76:7f:78:02:5e:
29:98:6b:4c:5c:a0:74:4a:a1:c4:75:ef:5f:c2:ff:
f9:41:80:fa:1d:2d:18:c6:80:54:a2:6f:12:0d:ca:
a5:df:6c:81:fb:d7:1c:3d:57:7c:f5:dd:d5:8d:1e:
38:81:0a:aa:09:05:e9:c8:f8:7b:1f:d3:3a:7f:51:
a8:97:6c:ac:07:84:67:e9:08:21:36:fa:06:c0:e2:
ed:8e:2a:d4:46:2f:52:d8:a7:73:5c:be:19:eb:aa:
ab:8b:4f:28:cd:c7:19:76:e6:3c:29:1b:2d:ca:9b:
28:0f:a1:e6:cc:74:53:f6:29:83:0d:cb:19:68:93:
01:3e:f6:ac:29:67:9a:d5:57:40:c4:09:3b:40:41:
3b:dc:49:90:63:fa:3c:c2:09:24:7d:fe:64:33:57:
1d:a7:40:42:5a:89:7a:72:ad:93:eb:8e:01:25:7e:
e7:a9:05:2b:c5:90:5b:58:49:3c:46:40:5b:22:c1:
f9:9d:03:f2:15:00:a2:e9:54:4d:5a:9c:dc:2e:66:
8c:cd:9f:1b:2f:7e:37:6f:b0:99:c2:04:77:d3:73:
33:ab:96:69:bc:cd:a0:e1:2d:62:a2:82:f0:d1:06:
c8:73:7b:f3:74:25:cc:e3:02:3d:3b:2a:60:bb:dc:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:66:E1:66:8B:25:89:35:8E:FD:89:DF:F4:FD:89:5C:3F:22:48:4C
X509v3 Authority Key Identifier:
keyid:D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d7:2f:97:02:9c:f1:76:17:52:ad:e2:d5:f4:d2:d2:8d:fa:
df:ac:f3:72:36:7d:15:f6:69:e9:c3:e6:b5:80:5e:b6:eb:b0:
e8:7e:a1:9a:c4:f6:74:07:5f:d4:59:f8:40:b7:63:7d:50:b4:
1f:dd:9b:99:8c:d0:a7:f4:4a:e4:e1:fc:1b:14:90:60:81:5a:
e7:65:d5:21:9e:9e:35:0e:a7:5b:bb:4d:4b:7e:8b:f0:39:6e:
c3:c1:81:d4:57:71:b7:55:f6:9d:25:d6:0e:e3:85:b9:90:90:
3d:2c:0c:8e:e9:e0:08:5a:5a:66:8a:f8:60:60:62:d1:1a:93:
29:e7:44:51:02:26:41:2b:d5:d8:3a:c5:44:7c:45:28:0d:06:
c7:08:71:e7:a6:a9:e1:2b:4c:c4:42:d2:ce:1d:69:e4:62:79:
8d:3e:69:2c:53:e3:80:7a:5a:a1:f7:a0:f9:48:88:1e:5c:43:
ca:cc:73:38:d7:a7:b6:d0:5f:ec:4e:01:83:55:0f:49:8f:1c:
69:f7:e1:88:65:e8:fc:12:b2:5a:5b:05:05:63:d9:8b:fd:cf:
d2:38:ec:af:33:42:b9:d3:5d:db:70:b8:78:31:ef:95:80:3f:
cc:2d:08:1f:7c:c0:a8:60:03:10:96:b7:4c:a2:95:c3:b7:80:
f1:08:40:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:37:18 2026 by rpki-client