Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier: H1Sm4P05gBZxoVB2uclP55xLioFr/XNx9yUit44q+AA=
Subject key identifier: 8D:13:C8:D0:8C:CA:1B:A8:49:1F:07:B4:19:98:66:6E:9E:B5:5E:23
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer: /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial: 01A1D980EDCB7484236FB6E8713FA1D11302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number: 1AF4
Signing time: Sat 14 Nov 2026 10:01:07 +0000
Manifest this update: Sat 14 Nov 2026 10:01:07 +0000
Manifest next update: Sun 15 Nov 2026 10:01:07 +0000
Files and hashes: 1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: zZdfQ8eCRBvXESTPfB8QDlRdd1iIe8chMaTKVB9heVs=)
2: gR91LIxxnbU08v57AUEvFf010vs.roa (hash: SbAN6voQ5c1qkWMDRn5E0Sl0vR5PwgTVIGlVOQ/CsHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:80:ed:cb:74:84:23:6f:b6:e8:71:3f:a1:d1:13:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Validity
Not Before: Nov 14 10:01:07 2026 GMT
Not After : Nov 15 10:01:07 2026 GMT
Subject: CN=8d13c8d08cca1ba8491f07b41998666e9eb55e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:ff:e4:3b:8c:b8:5f:f7:aa:0b:2e:40:1d:
80:85:ee:a5:83:05:0f:e7:28:e8:16:c2:15:6a:d8:
3f:9e:49:7c:a4:61:38:62:81:88:b5:44:c3:2b:cb:
a3:09:9c:06:be:2f:87:b7:80:eb:c7:38:10:f3:ea:
93:ea:ec:69:64:63:e3:51:4f:66:b7:bc:ff:1f:a5:
ee:17:a5:18:ec:1b:59:02:14:1a:da:87:39:2e:f3:
e8:6b:c4:6d:8d:cd:71:83:63:91:e1:c4:c1:bf:1d:
c6:1a:97:0e:97:66:39:5f:2b:d8:15:84:f1:4b:79:
e5:ee:49:05:1c:cb:d6:66:63:24:06:19:41:89:9b:
01:14:c1:03:da:50:2a:80:5b:8b:21:39:26:75:8a:
1e:0c:0f:ae:35:93:a3:08:50:17:73:75:03:1b:b1:
b2:9f:75:05:90:58:a2:45:5f:10:97:09:06:d5:ac:
fa:20:5d:ea:a4:ec:14:00:60:71:9f:c3:e7:bd:57:
df:cd:1c:78:84:6b:33:9d:94:58:06:52:93:27:0b:
84:c3:ff:b9:6a:39:ab:55:d5:31:d9:05:06:26:63:
a8:58:6a:a2:74:49:28:bb:2d:57:80:ae:4d:9d:2d:
b2:e7:91:7e:ea:e3:72:df:e5:e7:6c:cf:92:40:25:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:13:C8:D0:8C:CA:1B:A8:49:1F:07:B4:19:98:66:6E:9E:B5:5E:23
X509v3 Authority Key Identifier:
keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:62:8b:98:56:35:42:9c:91:95:3a:04:c8:ce:f1:fe:1b:a8:
fa:28:ff:88:3e:29:d2:e3:30:f7:ca:ba:ac:a8:60:c5:1e:db:
ce:f2:c6:38:2f:17:85:c2:75:7d:cf:e5:f9:03:8d:d0:48:cb:
2b:ec:16:0f:6f:02:7a:6c:eb:cf:19:e2:73:5d:a8:01:19:94:
ca:d4:f2:c6:09:29:e0:3b:aa:cf:b0:86:e1:61:3e:ce:ee:37:
a6:e7:16:16:01:9a:cf:11:a8:59:89:94:a3:79:a4:2d:7e:e1:
fd:63:3f:be:89:a0:f8:cd:5a:fa:1f:5d:1b:f4:c4:e8:85:12:
34:a6:d4:e1:34:b2:47:ae:a6:69:90:16:ad:3e:a3:a9:e3:96:
d0:ba:38:46:69:e7:c9:de:ab:1e:ea:51:a3:df:80:ee:cb:d6:
84:79:f9:f6:25:6d:a8:30:4c:f2:0f:0a:97:63:41:6c:8c:fb:
fc:6d:dc:df:4d:15:8e:b5:9b:8f:ba:42:9f:51:cc:39:65:e5:
f4:b6:4b:2a:0c:83:cb:2c:37:55:09:1f:4e:6c:2d:b7:b8:0b:
a6:81:57:5b:ac:a7:c9:6b:70:c0:18:c3:6f:21:1f:98:dd:fe:
8d:62:94:ea:f5:28:8c:ca:9a:67:42:c9:e3:e1:f3:af:88:a5:
8e:15:05:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:45:53 2026 by rpki-client