Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json)
Hash identifier: jOKFABKF/LVMHfuCyIrEVVW5Z+sVkLe/NNJOFWDSO54=
Subject key identifier: B4:2B:5C:45:6B:62:DA:44:F8:00:BD:27:A2:FA:FD:9F:0D:A1:20:47
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472
Certificate serial: 01A0CDB637922B0F2DBC04F2663DB3E076EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
Manifest number: 19FD
Signing time: Wed 23 Sep 2026 10:01:05 +0000
Manifest this update: Wed 23 Sep 2026 10:01:05 +0000
Manifest next update: Thu 24 Sep 2026 10:01:05 +0000
Files and hashes: 1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: fjX+u9QEU+fe0YiJFD0iEyIvUR9nl+xy/G2xppzH2e0=)
2: nmpthTHAT4WUcq8Q3IMochngGiw.roa (hash: WMNeejxSLtwCCkkRDHZIffdNUGROwkauBCQwzToW+EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:37:92:2b:0f:2d:bc:04:f2:66:3d:b3:e0:76:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d422367433765b541a37390a998997b737c46472
Validity
Not Before: Sep 23 10:01:05 2026 GMT
Not After : Sep 24 10:01:05 2026 GMT
Subject: CN=b42b5c456b62da44f800bd27a2fafd9f0da12047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:5d:e1:e7:b6:a5:67:9a:43:65:e5:90:99:
4b:1f:6b:f9:7c:0c:6e:06:de:1b:1b:b7:77:87:70:
e4:5a:c5:66:81:22:bd:d2:b0:94:17:0e:8f:55:74:
19:82:a0:f8:c9:bf:b3:df:53:f0:5e:39:3c:a7:10:
ba:e7:e0:ab:48:6c:05:8d:65:f8:e2:33:a6:78:4c:
01:4f:32:a2:95:15:b6:02:cf:92:45:b9:7b:61:6f:
77:20:32:ea:7f:ff:ad:fb:26:ab:fe:fe:d1:e8:33:
ce:82:fe:11:40:c8:df:dc:05:f4:eb:98:0f:37:0c:
b6:17:d7:ae:de:be:4a:b5:38:15:02:69:96:57:7c:
6f:2d:5d:ac:0c:65:9f:08:09:ed:47:33:a1:67:b0:
c1:cb:12:06:85:13:3f:89:f7:1f:22:71:8c:0b:ff:
38:1e:90:2d:fb:d7:d6:39:9a:06:74:8b:cb:ab:87:
91:47:bd:72:4f:47:82:ac:8b:1b:f6:99:a0:78:0c:
77:ef:29:d6:f7:9b:45:13:6c:2e:57:3e:74:6e:ae:
91:4a:ed:25:76:cf:56:49:16:4d:30:49:22:5f:a7:
05:8a:0f:3e:f5:8e:71:cc:4e:f7:68:fc:0b:fe:1b:
1a:31:7a:62:57:97:af:1b:2b:c2:21:14:e9:3b:c7:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2B:5C:45:6B:62:DA:44:F8:00:BD:27:A2:FA:FD:9F:0D:A1:20:47
X509v3 Authority Key Identifier:
keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:21:9d:73:08:12:63:38:62:c9:18:21:58:53:32:75:f7:ec:
3e:ad:2b:a1:3d:dd:37:3e:38:55:8f:8d:e9:bf:4e:b1:ed:8b:
ce:59:be:6a:d0:40:f2:4c:90:d5:7a:b9:6f:38:fb:76:70:97:
d5:65:ea:87:bd:0e:a9:7a:6e:72:03:d8:0e:ab:df:d5:92:a3:
28:6e:58:91:33:b0:58:bb:29:cc:b4:d6:8e:42:0f:d6:cc:b8:
1c:85:86:92:e4:10:27:8c:62:8f:91:c7:3f:4a:8b:62:5f:29:
49:e6:c1:3a:bd:ba:24:05:fc:4e:7a:33:a3:6a:d0:26:65:26:
77:ee:d8:29:2e:05:31:c8:d3:6c:37:de:54:64:3d:1b:cb:11:
f4:ac:96:49:85:3f:3a:50:5e:c9:3f:91:92:77:28:a5:d8:f2:
bc:38:32:0d:6f:5f:8e:33:75:bc:2e:54:92:42:b7:c0:75:2d:
c4:81:e8:4c:54:4b:90:40:ff:4a:9d:c2:f4:3d:84:c4:4a:65:
6c:fb:df:1b:e4:7a:dd:1e:f8:f3:af:58:12:0e:be:f3:83:02:
11:f5:eb:33:ab:c6:ee:c8:b5:2c:01:40:67:4a:bc:47:4a:dc:
54:a4:61:05:74:41:86:b9:5e:b2:7a:e3:ae:69:a1:6d:75:fc:
f9:67:52:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:43:05 2026 by rpki-client