Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
File: 1tcoXpK3QC6V29onv773Go4ifNQ.mft (raw, json)
Hash identifier: /PJl5y1WQg/WbtHzcVvjJx/Y66RLKqIBudolhSc+3S4=
Subject key identifier: DE:9C:CF:57:11:3A:D6:48:1B:D4:24:CC:D4:97:39:E2:63:84:90:E4
Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Certificate serial: 01A0D3F0C31BA49BC9BB962D5EC6D381E61C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
Manifest number: 0325
Signing time: Thu 24 Sep 2026 15:02:46 +0000
Manifest this update: Thu 24 Sep 2026 15:02:46 +0000
Manifest next update: Fri 25 Sep 2026 15:02:46 +0000
Files and hashes: 1: 1tcoXpK3QC6V29onv773Go4ifNQ.crl (hash: 5iPKep2ASMEefLfQo0IAroipKguOWGfYI9Vw4CKtwGE=)
2: cHkKo0DH80LlWl6mMB1Bk4ZyTuQ.asa (hash: nUOqpGWWngcltr0wRPhL84IrP/0KMpPD9+1PbqAf+iM=)
3: vWSFnkCnudPRUzfioP_sQ99MW24.roa (hash: fa/7H1d1MQOMBd0ZSP/HYbqe7w6JGnLpzf7w6NJUnOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:c3:1b:a4:9b:c9:bb:96:2d:5e:c6:d3:81:e6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Validity
Not Before: Sep 24 15:02:46 2026 GMT
Not After : Sep 25 15:02:46 2026 GMT
Subject: CN=de9ccf57113ad6481bd424ccd49739e2638490e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d7:53:7b:b2:7e:92:75:d1:35:65:bb:36:6d:
b9:16:d8:80:54:78:c4:15:b8:73:e6:f1:0b:55:63:
7f:de:d3:28:20:c3:66:34:73:c2:7d:b7:18:25:84:
07:ff:99:15:58:0c:ea:2f:50:c7:22:e1:a3:ea:17:
a4:99:4e:ba:25:c3:91:ff:5f:28:3b:3f:d3:d1:e8:
c4:7b:a2:b5:e6:59:62:ef:09:86:7b:34:ee:81:27:
6f:d4:39:be:13:c2:3f:91:e5:cd:56:74:69:59:3e:
46:f5:98:57:75:59:dc:90:f3:28:4d:10:74:25:ee:
38:1a:c6:92:9b:18:d4:cd:00:e2:60:d7:0f:f5:25:
b6:18:bc:0f:5c:61:17:a7:37:c1:01:52:93:e8:0e:
32:c8:c3:49:1d:31:a1:9b:40:fb:a4:e6:9f:5b:2d:
cf:3a:70:87:63:d6:d1:ea:85:0c:49:0d:1e:50:91:
c0:f8:b2:9e:10:28:2d:a5:16:4a:cc:83:cf:11:7c:
62:b8:3b:04:f0:79:17:3c:57:de:cb:66:24:07:d7:
a5:5d:28:22:8f:33:de:fe:42:49:c1:df:30:52:4f:
42:36:73:e6:5e:a0:2b:72:ed:3d:43:83:5e:47:de:
5f:d6:3a:3b:f4:48:60:ad:62:bc:4e:2e:ed:c0:4a:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9C:CF:57:11:3A:D6:48:1B:D4:24:CC:D4:97:39:E2:63:84:90:E4
X509v3 Authority Key Identifier:
keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5f:f0:35:5d:37:1f:f3:95:d7:e4:08:35:d4:de:0b:b8:07:
22:88:fb:4c:43:04:1f:d6:53:53:6f:cb:8e:e1:ad:cc:8b:76:
db:d9:e8:58:b4:72:38:71:89:b0:09:58:53:0f:85:9d:3c:12:
5c:41:76:da:2b:69:bd:a9:34:1b:52:78:c5:88:00:2e:35:6f:
85:b7:c1:3b:09:fd:22:ac:d7:d8:b2:fd:6d:15:89:63:8c:b8:
b9:e8:1c:ba:85:bf:43:50:47:f3:32:a8:8c:08:ce:fb:43:57:
96:ea:c7:f1:86:3f:3d:e5:a1:0f:48:1c:81:9e:00:42:4d:4b:
aa:fb:dd:76:18:fd:69:32:39:66:71:0a:d2:d3:cb:e6:d4:77:
65:b4:3d:19:27:a9:4f:db:ce:7e:40:74:6d:37:fb:84:b6:63:
4f:33:f1:ec:5d:10:c7:03:88:34:a1:6f:51:ad:e6:79:73:b3:
c7:0c:2c:53:57:7c:5f:56:a8:6a:f9:60:aa:b3:50:12:d8:89:
5d:e9:8f:e6:ce:b4:4f:2a:27:a3:44:ae:05:3e:0b:10:d0:21:
f5:43:9b:f6:b2:3c:b2:0a:f1:9f:31:76:0a:97:cc:00:0b:f8:
db:ba:5a:c1:c2:7d:b5:8a:43:f9:46:c8:b0:bf:29:ee:66:74:
7a:c3:b7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:41:05 2026 by rpki-client