Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
File: 1dzeISXwQFitT0eOF4iEFCzy2tA.mft (raw, json)
Hash identifier: G9+xe70uMZamnuAygMKYZ0t9AC3FWixP1+zeQ2rbIb8=
Subject key identifier: 02:08:0C:2F:D3:86:09:12:73:84:4D:DE:7F:7C:DA:62:1F:21:6E:B2
Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Certificate serial: 01A0CE5AF67291FEEB282DCEF14694845042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
Manifest number: 1433
Signing time: Wed 23 Sep 2026 13:01:02 +0000
Manifest this update: Wed 23 Sep 2026 13:01:02 +0000
Manifest next update: Thu 24 Sep 2026 13:01:02 +0000
Files and hashes: 1: 1dzeISXwQFitT0eOF4iEFCzy2tA.crl (hash: FInZMP3BWfRM1aDAs54yyKEIj3XhUJRrAsWKETeJ6zU=)
2: 8BYDJuaf2CuIte9znhQTMnQNfzY.roa (hash: /nJhQIQ9VVW/Qtz2O6f+WJOXBH0IlvQwIRyYeoC0B4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:f6:72:91:fe:eb:28:2d:ce:f1:46:94:84:50:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Validity
Not Before: Sep 23 13:01:02 2026 GMT
Not After : Sep 24 13:01:02 2026 GMT
Subject: CN=02080c2fd386091273844dde7f7cda621f216eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:54:99:67:78:6b:dd:46:2f:b5:0a:6e:2a:1c:
54:49:d2:7e:46:1e:a3:aa:96:41:0d:9d:f8:df:10:
0a:0f:47:12:df:d1:8b:d2:28:6f:42:90:97:af:35:
0e:62:e2:8a:9e:91:e5:40:1b:a3:e0:cb:ee:c3:24:
31:76:d9:3b:1f:9c:6b:99:6b:a0:42:54:be:16:23:
11:02:05:c7:f0:b0:56:90:76:6b:9b:4d:02:85:2e:
a1:49:35:bc:3a:f1:a0:d2:93:19:f9:4c:49:49:27:
e8:a3:75:5e:4d:56:61:6b:32:43:6a:22:a5:23:5a:
0d:76:8f:0c:bf:58:5d:69:07:8f:b1:a1:e5:4f:0c:
99:05:b7:92:90:7a:e0:05:c6:7e:b4:e5:87:76:f1:
a9:9a:a7:5b:c7:4e:9f:82:03:4d:24:f5:44:51:49:
37:3a:eb:c0:42:6b:5b:86:e8:0b:df:04:13:0d:5e:
ca:94:da:ab:cb:03:5c:1c:fe:b8:5a:27:45:4c:e9:
1b:3c:05:65:fd:de:75:85:dc:d1:ba:3c:e3:86:3c:
fc:1d:98:26:a6:b9:8b:0e:f4:e3:c9:44:5d:9a:c3:
5f:5a:b9:d2:d0:50:6d:83:e2:82:e9:43:3c:9b:2e:
41:c2:53:57:c7:60:f0:72:9a:d9:f8:00:84:c2:d3:
ab:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:08:0C:2F:D3:86:09:12:73:84:4D:DE:7F:7C:DA:62:1F:21:6E:B2
X509v3 Authority Key Identifier:
keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c6:60:26:07:47:0a:fd:5b:1e:75:52:52:36:2c:58:7c:bf:
1f:fa:de:a3:a2:cf:b6:9e:eb:49:be:70:91:92:0c:10:b5:1b:
bd:da:00:0c:16:e6:3d:94:5e:98:24:5a:d9:1c:35:16:72:26:
51:7c:48:68:e5:94:40:fc:c0:00:60:5e:c1:e7:3e:03:e9:52:
11:48:5c:96:ef:69:62:c1:bb:33:94:68:83:74:5f:7f:95:ad:
94:9b:6d:11:c4:c2:62:4c:e6:1b:44:37:90:cb:6c:9a:70:ef:
78:60:71:31:3c:4e:7f:5c:a7:0c:8d:2b:90:ba:d6:84:ea:92:
84:a2:c7:a7:af:4b:36:36:5e:43:42:e3:85:72:d1:a5:ff:37:
d3:11:91:e1:e0:7b:45:4b:81:d0:f9:7d:1e:fd:ca:04:5a:2e:
2f:f7:14:32:de:4e:bd:3b:65:f0:81:67:48:da:9f:f7:82:28:
85:23:6e:ad:94:06:13:23:f3:cf:e6:7b:34:75:66:4e:50:7b:
25:b4:9c:10:b6:6e:0d:f2:da:b8:f5:36:2a:52:64:f3:3d:73:
0b:af:f1:d6:a4:3d:19:3f:b8:61:e9:7e:33:7a:5f:cd:e6:f9:
4c:91:a6:d4:78:7f:2b:be:fb:c5:ee:a6:d6:5d:f4:2b:78:81:
94:f1:93:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:36:58 2026 by rpki-client