Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.mft
File: 1rsTICf-ZVBHbMrEPpL4rYE_DzA.mft (raw, json)
Hash identifier: ax2o6dKrIUBojkteEYh2S8D0hcHZp1vakWHo1CwzFQ0=
Subject key identifier: 94:A4:89:56:FB:58:73:A3:B2:C9:7B:97:2E:7D:79:18:1B:B8:DB:4A
Authority key identifier: D6:BB:13:20:27:FE:65:50:47:6C:CA:C4:3E:92:F8:AD:81:3F:0F:30
Certificate issuer: /CN=d6bb132027fe6550476ccac43e92f8ad813f0f30
Certificate serial: 01A0D4942611280639976D0455331D6B14AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rsTICf-ZVBHbMrEPpL4rYE_DzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.mft
Manifest number: D2
Signing time: Thu 24 Sep 2026 18:01:13 +0000
Manifest this update: Thu 24 Sep 2026 18:01:13 +0000
Manifest next update: Fri 25 Sep 2026 18:01:13 +0000
Files and hashes: 1: 1rsTICf-ZVBHbMrEPpL4rYE_DzA.crl (hash: rj/QH+jIZyDB6wOBqgXExddbeIAmWQ1+VgJSwyR2lM4=)
2: HGygdQ-Y-gCZzdzCa6B6oIjdjFM.roa (hash: sd3DHouChJiiWx6aUYWxL5mwg+5RY2ZI/mpyAHXQkl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rsTICf-ZVBHbMrEPpL4rYE_DzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:26:11:28:06:39:97:6d:04:55:33:1d:6b:14:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6bb132027fe6550476ccac43e92f8ad813f0f30
Validity
Not Before: Sep 24 18:01:13 2026 GMT
Not After : Sep 25 18:01:13 2026 GMT
Subject: CN=94a48956fb5873a3b2c97b972e7d79181bb8db4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:92:9b:74:9c:0e:91:0f:c6:c1:e0:dc:fd:95:
ff:39:8a:86:19:6d:86:02:50:79:23:b4:64:b4:3d:
e4:35:8d:e9:18:43:dd:18:92:fc:19:24:53:a8:9b:
69:9f:56:99:cf:3c:7b:f9:b1:c2:5a:40:65:aa:34:
1e:4d:bd:a5:3c:59:a0:3a:b6:9c:87:99:2f:2a:7d:
47:53:6c:74:1f:5a:76:9f:0d:b2:70:fc:8b:e6:87:
c2:76:78:ce:f4:25:1d:43:7b:49:39:67:47:45:7e:
74:ba:02:a0:6f:51:a6:0a:ea:08:b5:57:39:5a:fc:
e5:6c:53:c1:42:17:00:c8:fb:cd:97:d5:34:d0:4a:
3a:ec:91:fc:d9:91:6e:6c:f2:b4:c0:a2:53:70:86:
f3:69:d7:af:84:a2:3f:cb:42:c6:dd:06:bc:e3:69:
cf:55:76:4c:81:5d:fe:41:fb:b9:fb:71:de:37:5f:
c4:7e:ee:34:ce:ef:5d:a1:43:c5:56:e9:b2:e9:a7:
aa:85:0b:0c:fb:a9:3f:5b:35:66:79:7f:e0:34:20:
5e:9d:ec:97:75:d3:34:0f:79:cc:cf:97:06:3f:8d:
c3:9f:bb:3c:fe:58:b7:49:ee:d2:ea:29:3f:2b:ad:
ac:04:9c:cd:45:ef:40:7f:d5:3b:23:de:26:b9:fe:
9d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A4:89:56:FB:58:73:A3:B2:C9:7B:97:2E:7D:79:18:1B:B8:DB:4A
X509v3 Authority Key Identifier:
keyid:D6:BB:13:20:27:FE:65:50:47:6C:CA:C4:3E:92:F8:AD:81:3F:0F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rsTICf-ZVBHbMrEPpL4rYE_DzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:32:fc:d4:e0:02:77:e1:bf:1f:07:25:09:fd:72:6d:94:b1:
ca:95:8a:28:2c:50:d7:64:ba:6b:d7:33:04:8e:4d:01:34:5b:
32:9a:3f:7c:37:12:97:81:60:4c:91:1b:63:f0:c1:d7:e5:7a:
ed:ad:9b:85:3a:65:5c:36:1c:e7:b1:ec:b1:c8:da:74:04:af:
1b:fc:12:f7:06:07:36:69:05:f5:4f:68:4e:ee:11:95:8b:bc:
a3:71:9e:17:f6:56:26:f7:78:a6:20:5d:bd:30:41:53:b4:6c:
9a:28:07:0d:0c:6c:94:02:44:ec:bf:86:55:aa:ac:fe:b6:bc:
d5:14:d4:00:c2:ce:20:c2:68:1e:7e:0f:cd:85:4e:1b:8f:4f:
09:57:40:46:70:04:97:28:90:c1:93:17:94:a0:73:cd:65:9b:
96:a6:b1:0b:d0:43:48:d6:00:9a:a0:9e:8f:b0:d4:fe:22:b4:
16:d2:4d:75:bc:2b:d1:04:e0:c9:bf:1e:7a:c3:7d:d3:10:0c:
b3:c4:55:70:61:b9:f9:ca:1c:3e:e5:6e:21:0a:fe:47:cb:0d:
7c:b9:a9:1b:bf:4b:09:ab:85:5e:79:f1:72:23:3f:b8:4a:a0:
3f:05:ca:18:83:ec:f0:15:00:41:dc:a4:f3:1b:e6:1c:f4:8d:
9d:b5:ed:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:45:55 2026 by rpki-client