Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
File: 1TVDIcElQ2AUXq8l9pk4uN80ezE.mft (raw, json)
Hash identifier: UOp0gwL+lEL+bRE4tW3Ul8hUmFvDCBE+GOtVewTfyio=
Subject key identifier: C0:8F:5E:13:69:74:9F:C5:EF:2E:AD:51:C3:3B:90:56:68:D2:B0:5E
Authority key identifier: D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
Certificate issuer: /CN=d5354321c1254360145eaf25f69938b8df347b31
Certificate serial: 01A0CB59F675C2C87A8F28F57EDCB5B8546F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
Manifest number: 0F6E
Signing time: Tue 22 Sep 2026 23:01:05 +0000
Manifest this update: Tue 22 Sep 2026 23:01:05 +0000
Manifest next update: Wed 23 Sep 2026 23:01:05 +0000
Files and hashes: 1: 1TVDIcElQ2AUXq8l9pk4uN80ezE.crl (hash: kzmkpi5K71fJe9zHm5hb6+h8r0EJrA1RHQ0h9ZQfzT8=)
2: Q2cFoF4Oc7BqkByc0qROYAXLL2U.asa (hash: v+gv2QvEhRG4gH6dJk30Nzx5DNkU0J8LVXCFMAFwYNg=)
3: r3HWDDRgTxZjt0f8A4zqbjMarks.roa (hash: +uYv6GLbwnY+R5JBDKQIFIfeDHhF4FB60kCchPztyPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:f6:75:c2:c8:7a:8f:28:f5:7e:dc:b5:b8:54:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5354321c1254360145eaf25f69938b8df347b31
Validity
Not Before: Sep 22 23:01:05 2026 GMT
Not After : Sep 23 23:01:05 2026 GMT
Subject: CN=c08f5e1369749fc5ef2ead51c33b905668d2b05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:21:65:ee:bb:03:f1:07:25:20:73:0c:e1:
af:17:e9:78:cd:02:83:51:d5:19:c0:cf:94:d6:57:
c9:7c:f3:98:7c:f5:29:1f:45:e5:c9:4a:5f:9f:fc:
ed:b9:c6:cf:59:7d:6b:c0:20:6e:50:65:3a:02:1c:
99:ad:0e:d8:1f:c7:40:c7:80:ea:b8:d9:27:11:3b:
0d:ae:76:54:70:07:a1:ed:45:5c:c2:fc:75:13:92:
cc:6b:14:0d:fb:3e:d6:06:9f:9f:7d:7b:7e:10:60:
24:bd:c8:2c:99:66:01:9d:8d:ed:e6:b7:ed:47:98:
79:e4:4d:ae:b1:fc:a1:f3:9d:a0:52:37:d9:55:3f:
6e:b0:59:e8:b6:e1:48:23:d1:8d:4e:dd:00:d0:da:
d6:73:4e:83:e9:b2:5f:4e:5b:89:59:15:1a:a7:02:
b3:25:f1:0b:4a:9c:df:d0:a7:5a:ff:1d:b4:6b:72:
57:75:76:36:e2:95:47:7b:c4:e5:f3:6b:f2:fd:9d:
9c:97:a6:0f:2e:8a:c6:48:7d:e2:87:b2:07:1b:b5:
87:7a:ce:eb:79:0f:e1:cd:8a:40:c2:99:24:23:92:
d0:36:16:8a:ce:1a:0f:de:45:4a:b1:ad:50:a6:ca:
38:be:42:0c:9b:0f:6d:ed:5c:7d:f0:95:aa:f6:4d:
fd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8F:5E:13:69:74:9F:C5:EF:2E:AD:51:C3:3B:90:56:68:D2:B0:5E
X509v3 Authority Key Identifier:
keyid:D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:57:c0:b0:29:5b:9a:6d:bb:7c:b2:cb:af:2f:9d:f7:19:0d:
8a:1b:67:4c:cc:fb:aa:f0:22:96:73:d2:30:7c:ef:89:34:4a:
47:e4:53:a3:d7:71:28:0b:e0:d6:d7:a9:5f:20:9b:6d:77:f0:
74:e8:d6:aa:6a:22:7d:5b:2b:a1:d6:5c:37:e2:99:5e:91:dd:
43:97:42:85:8f:3c:83:1b:e1:f4:3b:ae:5c:f7:13:3d:6d:82:
72:fd:81:de:5f:41:0c:62:2e:59:9b:f3:e4:a0:e8:fc:15:b8:
a2:bf:2c:e2:a9:5c:cb:ad:7e:27:d3:57:6b:d2:34:2a:d7:d2:
3b:6b:35:20:e6:be:8c:21:6f:28:51:52:34:48:81:72:e3:50:
99:ec:41:4a:60:cd:99:7d:b7:c3:f1:d3:df:36:85:a4:52:aa:
b7:59:37:42:d4:40:3d:07:0d:16:38:95:cf:6d:ca:f7:30:cb:
b4:a8:07:ab:c7:20:9c:f7:0b:a2:bc:58:93:3e:e7:5d:9f:1a:
56:ac:81:eb:d1:00:ba:87:a1:42:3d:f6:28:24:e0:35:64:28:
73:58:4f:69:07:2e:72:f1:a6:bf:d4:f6:27:33:de:44:8a:df:
74:99:48:7b:8f:61:d0:86:48:b1:0a:10:b6:54:73:06:16:69:
77:c4:9b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:55:53 2026 by rpki-client