Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
File: 1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json)
Hash identifier: J/685nn8fc8IE02l5Cx/y+dsS+hQu/LVhcP+Jxn6mEo=
Subject key identifier: CD:53:3C:78:84:79:25:C0:D3:E5:30:47:21:83:71:2B:BD:0C:C8:13
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial: 01A0D012EB3B0029E7336ADA2E1B841C5BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 21:01:35 +0000
Manifest this update: Wed 23 Sep 2026 21:01:35 +0000
Manifest next update: Thu 24 Sep 2026 21:01:35 +0000
Files and hashes: 1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: wVmbKbFavL+Q2aIKxPijlAPrdb7v8qgRM9VLLIn+0fA=)
2: tcauu97gqx_3OsWJEyJLtylmmP8.roa (hash: g4WoFZgT3MzcoVX/LXrLBBnWdsRJpBrZA+GD6BcfKaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:eb:3b:00:29:e7:33:6a:da:2e:1b:84:1c:5b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
Validity
Not Before: Sep 23 21:01:35 2026 GMT
Not After : Sep 24 21:01:35 2026 GMT
Subject: CN=cd533c78847925c0d3e530472183712bbd0cc813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:1b:10:a4:86:81:5f:96:30:4a:95:b7:63:
1b:4a:ff:2b:d2:8d:0e:29:82:71:ab:ff:0d:ab:f5:
68:31:5d:ad:03:bb:31:5c:5f:cf:1c:c2:45:75:3b:
02:cc:22:99:9c:32:77:7d:5b:8f:cb:63:45:e4:0e:
a6:3a:24:68:00:7b:dd:93:53:88:c2:54:ed:04:5b:
c4:60:d6:b7:f9:02:5a:c0:8d:d7:25:bb:29:81:fd:
69:c6:7c:22:ed:33:c4:6c:f0:38:13:d9:59:ef:39:
6e:8f:ad:02:ad:70:d1:db:ae:b1:a4:08:52:ce:58:
ed:3c:be:b4:47:a0:2c:cd:c5:af:e7:65:1f:65:6e:
ed:8e:28:d3:ec:d2:b2:6d:a3:d6:25:d5:43:e1:3b:
a7:b2:0c:e8:09:89:22:d7:9b:93:21:f7:22:fe:c2:
50:aa:29:8e:6b:64:67:ca:6d:37:db:8a:ac:a0:fb:
6e:0f:0c:a4:a2:67:33:13:28:23:26:4a:ab:25:aa:
48:a3:cc:79:a9:49:97:21:63:ac:5c:5c:f0:33:bb:
b9:05:1d:57:65:1c:9f:0b:f7:e4:ce:ee:ea:99:13:
9b:58:71:c1:56:19:b8:54:dc:17:9a:ea:06:61:e1:
cc:1d:1f:d9:60:c3:86:3f:83:22:ad:e3:1d:58:c0:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:53:3C:78:84:79:25:C0:D3:E5:30:47:21:83:71:2B:BD:0C:C8:13
X509v3 Authority Key Identifier:
keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a0:12:05:95:cd:de:9d:c4:83:9c:ca:db:64:9e:39:8a:50:
0a:c4:22:9a:72:eb:05:c9:b6:fe:77:01:9e:6d:fb:46:fb:ba:
47:d3:6f:21:f5:23:bd:ef:78:1e:d7:e2:42:4f:67:5a:7a:07:
45:45:57:5b:84:f4:b5:fc:6f:d5:2b:01:8d:e0:9d:3d:6a:d4:
2b:9b:10:0e:3b:4d:93:cb:6d:36:28:08:c5:79:a1:27:15:27:
99:89:d7:4b:19:e6:2e:a2:9d:71:c1:12:1d:4c:5c:95:df:6e:
e3:88:9f:7e:96:d2:35:b5:d4:bd:0f:34:b2:91:22:5e:00:12:
16:df:c1:67:58:f1:f6:30:99:a9:c8:e8:ef:c8:98:3c:8e:de:
32:71:1f:77:54:34:14:0b:8c:8e:aa:f8:a7:56:3c:7e:f5:9a:
37:75:8b:81:52:98:cb:23:91:2e:6c:9a:62:8b:f3:bf:64:09:
a6:21:b3:32:b8:e9:f3:fa:e9:a0:ea:f7:c4:1e:85:cc:1f:a2:
97:87:fb:7f:89:b9:cd:48:cf:8e:e1:74:11:9f:49:4d:92:44:
ae:de:10:87:af:83:19:20:bc:60:02:66:06:50:61:cc:bf:db:
ae:b1:aa:e8:4d:30:b5:a5:e8:bc:87:7c:64:86:7f:a7:18:62:
44:a7:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:04:40 2026 by rpki-client