Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier: iWDXLElfHD2ZDTTcCwrDyAAZTq58HIcQ6OizvHTWqq8=
Subject key identifier: 52:56:23:93:34:6C:AC:0D:E4:71:2F:FD:8A:7B:01:92:67:FC:F4:64
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial: 01A0D34AD3658CE8984E81A3B3BEADC96151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number: 1794
Signing time: Thu 24 Sep 2026 12:01:31 +0000
Manifest this update: Thu 24 Sep 2026 12:01:31 +0000
Manifest next update: Fri 25 Sep 2026 12:01:31 +0000
Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: ynU5e6Ljk+D+hbNbGKqBdQGC7CGtDRpjOWAhm9xuN0s=)
2: jTE7aus6FHt_I5mpklvVVf-KpAw.roa (hash: jTSKuDkQyIFhQKFi7+s/96OtXGRbDcnGaxvdpome6eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:d3:65:8c:e8:98:4e:81:a3:b3:be:ad:c9:61:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
Validity
Not Before: Sep 24 12:01:31 2026 GMT
Not After : Sep 25 12:01:31 2026 GMT
Subject: CN=52562393346cac0de4712ffd8a7b019267fcf464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:9f:2e:81:1c:9f:6d:ad:3d:f9:c9:78:3c:
00:9e:ff:a8:08:ac:bd:1a:64:bf:46:f8:da:f1:0f:
48:93:a3:45:87:0d:86:f1:9f:36:84:38:96:5d:8a:
b2:27:c4:a6:88:a3:da:fc:f0:57:3b:23:05:59:16:
47:6e:4f:cb:c1:c5:e8:03:0c:5e:da:fc:e0:6f:ac:
bc:df:17:fa:82:b3:8d:bf:b9:47:6f:3a:0d:5d:93:
f2:d2:3d:4b:d4:57:e8:25:f8:de:8a:f8:c7:ee:c6:
42:ef:0c:49:2e:d0:29:76:b8:f9:2e:a3:55:10:0e:
a1:81:c1:f0:5f:b9:88:f9:e5:97:ff:d3:9d:6e:8a:
5d:a5:4f:ab:2a:c5:2d:2e:b5:f8:53:40:38:bb:f9:
a4:85:5b:d1:20:4e:86:df:4b:a0:d4:57:5d:46:02:
51:86:44:d6:58:50:42:8f:23:26:a5:7d:7f:52:cf:
aa:5d:c9:e8:d9:ea:e3:17:7f:5d:e1:b1:3f:08:8e:
3d:75:7b:3c:49:e9:0d:e4:d0:d7:25:a3:9f:bd:99:
fb:2e:b6:03:92:bd:ff:51:58:a2:9a:6c:b8:d9:44:
5f:0f:eb:02:41:09:72:1d:76:30:79:7e:50:22:4d:
a4:19:3b:3f:85:35:56:d0:98:29:69:12:45:e3:29:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:56:23:93:34:6C:AC:0D:E4:71:2F:FD:8A:7B:01:92:67:FC:F4:64
X509v3 Authority Key Identifier:
keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:35:30:75:35:58:1b:16:49:aa:42:c9:6a:c4:fe:8e:30:cd:
cd:18:8e:dd:40:77:d5:ab:eb:9d:d4:04:6f:86:91:94:ed:52:
17:28:82:4d:e4:f2:94:64:2a:af:36:b7:a6:73:89:86:09:b4:
b2:58:bf:43:db:ef:89:ad:20:77:28:da:9f:1a:13:8e:b6:6b:
33:b2:69:1c:ee:1c:62:48:49:3d:7e:f0:9c:2e:c9:ca:8a:ea:
48:e5:1c:1f:1c:cd:3f:37:13:ce:91:f9:a4:29:b6:5c:2c:65:
0f:82:a8:57:de:c9:cf:97:80:5b:86:2d:f5:69:eb:77:6b:17:
dc:63:dc:4f:b3:94:55:84:2e:41:a3:e3:d6:24:38:de:7a:98:
59:62:72:ae:a4:b9:51:ec:df:30:50:83:10:53:dc:4a:23:40:
b9:d3:44:68:4e:d6:93:7c:23:2f:59:8c:ce:9c:9c:29:60:5f:
80:4c:9c:4b:7e:6c:d5:54:b6:bb:5e:c6:1c:2a:4a:c6:ed:48:
37:e4:09:cc:39:a6:5f:7e:7c:0f:7f:bb:51:6d:9b:4b:2b:c9:
92:18:6f:74:af:eb:36:36:60:82:8f:aa:fa:b6:fe:54:3b:3a:
bd:18:ba:91:9a:11:46:ea:da:21:b4:30:ea:06:43:6a:9f:e6:
21:95:8f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:25:49 2026 by rpki-client