Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: NNx2wlHQgbNw3aInxHMzqFIpbWpbZNMQSFJ4hZk1kns=
Subject key identifier: 28:FE:DA:19:A8:5A:A0:05:FA:8C:49:5A:1F:98:31:39:34:65:87:AD
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 01A0CC35E86868A874699BA6CBF2E3BB0122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 124B
Signing time: Wed 23 Sep 2026 03:01:19 +0000
Manifest this update: Wed 23 Sep 2026 03:01:19 +0000
Manifest next update: Thu 24 Sep 2026 03:01:19 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: iSonz11XOX2yNzgWAxJolxfs2G6szJ0Av0puUcochOI=)
2: 6Pc_yuf6U7fifvpMORJRJWUOec0.roa (hash: YkCtWd8TqjpXFSR0IlaGJlvhxUpQhvA2ISYdw8xN7rc=)
3: SiiyX2N_VudkW_kgHjDWb96Midc.roa (hash: VBfDCyR0GjOaXAtcZCDfH6SSSVgHl3aLvPMUM1TIr7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:e8:68:68:a8:74:69:9b:a6:cb:f2:e3:bb:01:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Sep 23 03:01:19 2026 GMT
Not After : Sep 24 03:01:19 2026 GMT
Subject: CN=28feda19a85aa005fa8c495a1f983139346587ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:23:3b:46:48:0d:76:0d:c8:78:99:dc:87:
15:e9:4f:f5:b0:d8:53:32:69:7c:f4:48:e8:79:55:
d1:d2:d8:92:c4:fd:32:0d:93:e1:11:9b:63:8a:de:
dd:5f:c0:15:63:b5:c7:67:8f:60:08:79:a7:30:a7:
d5:70:e2:04:a8:e4:d9:ef:c8:b8:f5:dc:42:01:33:
ca:15:c0:5c:5b:0c:0e:d8:b9:24:96:62:34:56:3d:
4d:12:27:df:81:db:57:52:f0:4f:39:30:27:e9:1d:
cc:54:fa:ba:75:0c:64:78:42:1f:32:d7:85:a7:17:
81:3e:48:c4:20:5f:f3:4d:00:99:11:ff:6c:7e:d4:
7d:39:9b:42:f0:9c:f2:38:42:0b:96:41:c5:7b:10:
18:ae:82:99:bd:fb:22:29:c0:0e:a6:e3:a1:be:72:
f2:f3:5d:fe:6f:36:9e:44:e9:83:2d:b2:4f:b8:47:
ce:82:71:1a:03:29:ce:8d:e3:87:61:7f:9c:21:2a:
b9:83:fe:86:85:6b:24:07:b4:1d:69:e5:04:2d:be:
7c:ea:ba:d0:83:bd:56:b6:8f:ab:17:a0:1a:29:40:
83:15:e5:3e:d9:1e:c9:ec:e1:ea:c2:f8:06:45:76:
51:a3:51:32:37:54:e2:ad:c4:0e:c2:40:d1:3d:bb:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FE:DA:19:A8:5A:A0:05:FA:8C:49:5A:1F:98:31:39:34:65:87:AD
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5d:80:fd:8d:d7:bb:52:61:31:2b:75:03:49:a0:c6:0b:cc:
ca:6e:1c:23:86:5e:6c:c0:82:66:27:ec:12:21:6f:ae:c2:c2:
29:88:78:a9:e0:d6:ee:9e:01:36:cb:da:d0:30:a9:a9:29:e4:
ad:ba:00:cc:68:d0:9b:c0:36:07:d4:0e:6d:1f:72:0c:f4:cc:
f9:c4:9c:fa:5f:de:d8:40:e0:dd:f0:2b:8e:4c:92:15:ea:e1:
26:d0:61:10:da:5d:62:eb:5d:f8:09:b5:28:99:92:ef:2f:31:
57:06:e8:84:bb:46:c4:86:96:dd:f9:41:8b:50:67:3c:a5:cc:
22:f3:e6:17:0f:06:16:d0:f4:e3:1b:78:a6:bf:21:99:1a:eb:
fb:95:36:d2:c5:8f:84:5d:73:ca:56:7a:21:f3:e3:b0:f4:50:
7a:bb:cd:2e:b7:b0:52:45:12:7e:a8:1c:be:b9:1e:88:aa:79:
21:6b:9a:c6:50:64:7e:f3:a2:a4:ce:0e:7e:04:c9:80:96:1f:
a7:59:11:53:0a:47:8c:40:86:f0:ee:d3:55:45:d5:62:69:eb:
02:be:95:d6:c0:e7:e4:17:4a:93:3b:b1:8b:52:e3:0e:9a:b5:
aa:23:27:75:d9:45:b4:18:f8:48:74:b2:3f:76:30:43:7e:e0:
e4:ad:44:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:00:52 2026 by rpki-client