Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.mft
File: t117sKuToIYWkQen4ubKOCYZ5_Q.mft (raw, json)
Hash identifier: LJ+e/jPDXQR1FPGJxpSYLig7oh9r6PQbhMUF2ceDko0=
Subject key identifier: CA:58:17:83:D9:A2:7B:F2:09:52:2E:73:F7:A5:3D:F9:95:E2:B9:FB
Authority key identifier: B7:5D:7B:B0:AB:93:A0:86:16:91:07:A7:E2:E6:CA:38:26:19:E7:F4
Certificate issuer: /CN=b75d7bb0ab93a086169107a7e2e6ca382619e7f4
Certificate serial: 01A0DC17115A38CCB646D48955A0010A81E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t117sKuToIYWkQen4ubKOCYZ5_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.mft
Manifest number: C1
Signing time: Sat 26 Sep 2026 05:01:34 +0000
Manifest this update: Sat 26 Sep 2026 05:01:34 +0000
Manifest next update: Sun 27 Sep 2026 05:01:34 +0000
Files and hashes: 1: t117sKuToIYWkQen4ubKOCYZ5_Q.crl (hash: 9iMUmQlJuVgQCYbLlHM11xZVRCA5Pi0HNZ9IgFTq1tg=)
2: ySPvKfV_aWMJHJvsDTSVOAVpx9Y.roa (hash: yQfb3ZLV9S1QRrvHBaPCBs3YoUagPeU3hc7wS3zLy1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t117sKuToIYWkQen4ubKOCYZ5_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:11:5a:38:cc:b6:46:d4:89:55:a0:01:0a:81:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75d7bb0ab93a086169107a7e2e6ca382619e7f4
Validity
Not Before: Sep 26 05:01:34 2026 GMT
Not After : Sep 27 05:01:34 2026 GMT
Subject: CN=ca581783d9a27bf209522e73f7a53df995e2b9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:4a:2c:6b:c6:31:70:a6:4d:47:ab:b2:c8:
9e:b4:84:b1:07:4d:4f:22:89:10:83:8b:b6:3a:d7:
3b:1e:2c:ec:49:25:0c:21:f9:44:3e:fb:70:75:b6:
fb:9e:70:32:58:e4:72:d9:5c:a0:03:44:a3:42:f4:
ea:bc:3f:42:f4:1d:3b:54:eb:05:b1:68:47:ab:db:
15:64:94:32:e4:92:e4:73:f0:a6:3d:98:18:cb:47:
70:d1:1b:b7:be:f0:46:3f:bd:c5:58:29:80:25:ae:
d9:45:01:9e:d6:12:03:3c:42:4c:62:ac:5d:8e:b8:
96:b2:da:4b:39:17:dc:6a:df:06:cc:05:c9:59:f8:
58:05:6e:a9:a9:fa:9c:4c:01:7b:1d:25:cf:e7:53:
50:4c:47:04:ff:d6:7b:d1:7a:48:71:2c:27:10:67:
ff:3a:92:e5:a3:8c:6a:dc:57:1b:29:4d:be:12:af:
8c:e0:8c:34:29:28:11:79:c2:92:5c:08:dd:2d:46:
c4:0d:14:bc:cb:e1:6e:5d:26:e0:45:1e:ea:34:c5:
65:62:40:9d:54:4c:af:17:ea:ed:34:79:0f:9a:07:
62:e3:f4:a4:56:46:6c:99:59:39:fa:54:50:10:34:
e8:fa:f2:39:52:90:0a:19:94:75:eb:28:f1:58:ed:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:58:17:83:D9:A2:7B:F2:09:52:2E:73:F7:A5:3D:F9:95:E2:B9:FB
X509v3 Authority Key Identifier:
keyid:B7:5D:7B:B0:AB:93:A0:86:16:91:07:A7:E2:E6:CA:38:26:19:E7:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t117sKuToIYWkQen4ubKOCYZ5_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a06325-8915-4778-bd0b-e499abf2b9a8/1/t117sKuToIYWkQen4ubKOCYZ5_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:00:b3:65:1a:0e:bc:3d:2a:1b:45:78:78:2c:be:52:08:b6:
23:0d:5d:a7:e2:37:83:17:a3:d2:e2:89:82:81:15:d9:2d:70:
d8:a1:cc:7b:9a:fe:7f:58:a4:22:da:7c:08:ea:d6:d8:2c:97:
ca:bf:a4:59:af:a1:e1:f9:20:33:bc:61:6a:7c:ab:a3:c3:fe:
c9:c6:e1:3d:ea:b4:dc:d4:27:29:e0:f4:ca:19:1c:b1:56:da:
6e:54:0b:6c:04:b0:ed:d5:b6:49:bf:d0:9f:fe:2f:27:90:31:
7d:dd:4b:57:c0:54:80:73:a9:79:ad:96:e7:50:03:75:9d:cd:
78:f3:be:b4:7a:78:98:e4:98:2d:53:0b:43:bb:51:0d:4a:6a:
fc:09:33:fb:af:f2:a0:5a:b8:c8:8a:04:09:8e:37:47:a7:03:
e4:be:2b:e9:87:ea:fe:13:c5:27:8b:08:cb:36:35:79:41:6e:
d1:1b:7c:c9:29:6f:75:f5:4a:74:f6:3e:85:4e:c2:42:7d:80:
99:e1:b7:d0:a5:59:51:03:69:4a:93:de:d4:a4:1a:ce:20:6f:
10:af:87:35:5a:d9:b4:de:0b:90:76:80:83:f7:2e:b9:37:23:
c7:b7:bd:e2:44:bf:08:36:16:4f:37:63:74:e4:f9:7e:5d:fa:
9f:4a:47:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:16:11 2026 by rpki-client