Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
File: 1BsIHA35lAorAgpOvoqXScv-rVU.mft (raw, json)
Hash identifier: tGiHg/SffP/NVF8w37xBltcm0W7Q97ISY6uCNCbVouc=
Subject key identifier: CE:00:23:52:55:9A:1C:00:89:9F:F5:65:78:18:29:C8:E4:35:29:D6
Authority key identifier: D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
Certificate issuer: /CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Certificate serial: 01A0DF4ED0FCE80AB6064A185D08D14CC222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
Manifest number: 070D
Signing time: Sat 26 Sep 2026 20:01:19 +0000
Manifest this update: Sat 26 Sep 2026 20:01:19 +0000
Manifest next update: Sun 27 Sep 2026 20:01:19 +0000
Files and hashes: 1: 1BsIHA35lAorAgpOvoqXScv-rVU.crl (hash: NvQ+nYUykOV3ewhbgOTSih7+LBEPa/lQKPLT+6z6nD0=)
2: V9UTYDPHijogtjvHdsrVvOTXN9I.roa (hash: nwNrU9JSn6Zt8gU88wPSRfyZfnAa1IxKUuy1vSNoP6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4e:d0:fc:e8:0a:b6:06:4a:18:5d:08:d1:4c:c2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Validity
Not Before: Sep 26 20:01:19 2026 GMT
Not After : Sep 27 20:01:19 2026 GMT
Subject: CN=ce002352559a1c00899ff565781829c8e43529d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:51:41:28:9a:99:e9:ec:af:02:5d:ba:2b:
e2:b3:1a:a2:13:8b:c5:2b:3d:f1:36:f8:f0:de:de:
1b:aa:29:71:d6:2a:b4:1a:b3:b2:4f:30:0f:63:47:
90:d0:b5:a6:e0:af:a8:d9:91:86:7a:be:8e:93:b4:
d7:4a:5b:67:ac:8d:88:0d:88:bc:12:43:62:38:54:
11:b7:6c:32:45:e1:73:c8:60:b0:e9:db:69:2f:66:
21:5f:97:33:a9:c2:1c:39:5c:1b:e7:f4:28:ad:63:
eb:ea:4c:6f:87:73:9a:27:95:d3:b5:b2:23:85:4e:
1b:d5:d5:02:3a:6e:29:aa:cf:57:61:f5:bb:8b:d1:
96:14:1a:d4:38:c1:e0:9c:02:67:0a:d2:0e:bc:55:
b1:af:13:3b:cc:0c:2e:8f:87:c5:c0:21:7d:45:11:
7e:98:fd:7d:65:14:6c:c7:86:06:2e:db:e2:65:2d:
5e:5a:3a:a9:f9:e6:03:af:a3:64:54:7d:53:8a:40:
b0:a7:08:1d:4c:ac:7e:7c:f4:cf:3c:7f:49:aa:f5:
5a:1a:37:98:3e:70:f2:68:b3:3e:f9:d8:a0:da:90:
6c:4e:8e:65:4b:d0:5e:fa:fa:00:28:da:f9:ac:b0:
5f:46:22:d7:31:6f:8e:3e:8b:94:3d:db:99:47:ae:
ec:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:00:23:52:55:9A:1C:00:89:9F:F5:65:78:18:29:C8:E4:35:29:D6
X509v3 Authority Key Identifier:
keyid:D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7d:95:40:44:ce:dd:1f:37:8d:1a:78:63:50:86:2d:28:55:
09:0b:22:cf:f5:f9:e2:67:a0:3f:7f:51:ee:73:02:81:c4:43:
93:c9:a2:48:9c:f2:c4:e2:67:4a:66:da:8a:d7:2d:a1:b4:28:
5b:86:00:8b:d7:6b:72:b1:fb:34:5d:33:14:e4:ef:80:98:a3:
fc:46:d1:f4:02:de:c1:8a:aa:2c:00:d1:f1:43:d0:9b:3b:9a:
c5:0f:18:80:a9:17:a9:70:63:d4:49:ca:aa:ff:0a:c9:29:63:
d3:d1:88:3e:fd:de:8c:de:74:15:df:2c:9e:44:d8:57:48:52:
ed:39:6e:78:2f:99:68:0d:55:5b:ff:7b:3b:8b:96:24:75:c5:
26:b6:93:4d:06:a9:cb:19:d2:f3:a8:95:0f:ea:d9:00:44:53:
e3:d4:15:1f:19:fa:b7:c1:c6:c2:da:a8:60:c5:8e:6f:41:a0:
7c:67:1b:53:c1:c4:94:cb:3f:24:c1:8b:9b:81:76:8c:b0:f8:
48:17:08:98:e6:b4:fc:1d:36:a3:9d:1d:48:d8:46:e5:ca:8c:
83:8e:4f:18:eb:c4:42:53:6a:0b:b0:6b:da:f5:20:8a:70:95:
89:42:f4:5a:cd:b1:33:f0:dd:79:bc:6b:9f:b4:fa:79:25:91:
87:c3:6b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:14:06 2026 by rpki-client