
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
File: B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft (raw, json)
Hash identifier: tky/czaxJmnI+J8T7vgGtR9vIDz6E83Z05vB+CLpBu4=
Subject key identifier: D1:C8:95:DB:3D:80:91:88:F0:8E:C1:76:64:C6:94:D0:4C:53:3D:74
Authority key identifier: 07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
Certificate issuer: /CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Certificate serial: 01A0C7B3C08A4A3DF1BE2EFB3A1327EF3311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
Manifest number: 09B0
Signing time: Tue 22 Sep 2026 06:00:41 +0000
Manifest this update: Tue 22 Sep 2026 06:00:41 +0000
Manifest next update: Wed 23 Sep 2026 06:00:41 +0000
Files and hashes: 1: 1-OzicR5kzd1Ow7p9pVk0SBB2HZs.roa (hash: WyH53JIWlzDtSzteiBRYQxZUpstzNJjn2NRysD5+PVY=)
2: B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl (hash: L8pfvylvIy9IiI3RbCHXmNTkNBnuoT4d9a7WVKy4gT4=)
3: zL1avC0lj7yCwQAa8kdB-j9BOqc.roa (hash: dt/cheCBQnjNlx2owBRsbLzi25MiYf0n9VeZMVmnugI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:c0:8a:4a:3d:f1:be:2e:fb:3a:13:27:ef:33:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Validity
Not Before: Sep 22 06:00:41 2026 GMT
Not After : Sep 23 06:00:41 2026 GMT
Subject: CN=d1c895db3d809188f08ec17664c694d04c533d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:48:45:5a:b0:2f:d7:69:44:3a:6c:bd:0b:
aa:0b:d2:e0:ef:07:83:ec:bf:1e:6f:6e:16:b7:34:
9a:43:29:9d:e3:98:5f:e6:8e:9d:c0:44:95:e2:eb:
f7:78:5b:94:59:ee:1a:9d:8a:da:29:b0:1b:3f:02:
41:a8:b5:1c:43:14:f2:2f:9c:b3:f6:75:9d:23:63:
0f:cf:96:46:1b:2b:ed:3e:a5:81:9a:c6:02:bd:52:
17:60:e0:93:2b:ee:77:20:bc:d1:02:e9:f2:8b:1b:
91:da:23:43:6a:c5:44:53:3c:0a:97:00:c7:1f:d6:
af:08:34:3b:ac:3d:65:45:a5:a7:4d:94:17:06:d1:
ac:0c:ee:8d:3c:65:50:6e:9c:46:fb:64:09:26:95:
d3:01:68:d0:58:4b:fc:47:a1:50:d7:48:09:4a:5f:
4d:73:40:2a:5e:2e:e5:69:0d:76:76:49:20:0a:39:
21:11:39:0d:b8:f5:d0:ad:7d:a7:66:ec:e6:5d:82:
3e:6e:66:9d:4e:99:cc:d5:97:ff:35:de:1c:ac:90:
8e:b3:17:30:80:2a:8e:75:15:42:19:7f:c6:c0:e8:
fe:ec:86:1d:cb:59:52:da:c1:01:ab:68:7e:16:49:
8e:ec:2e:b5:02:74:be:60:3d:84:1f:69:1c:54:04:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C8:95:DB:3D:80:91:88:F0:8E:C1:76:64:C6:94:D0:4C:53:3D:74
X509v3 Authority Key Identifier:
keyid:07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:26:b2:90:51:2e:11:e9:85:76:b2:c9:70:77:b5:04:e0:9a:
94:15:f0:cb:a7:7d:84:45:02:0e:6b:e9:8d:f4:c7:37:6c:83:
63:be:a8:cb:79:d9:8f:99:f4:fb:b2:c7:4e:89:44:91:c7:9e:
0b:fa:3d:07:48:5d:05:69:5b:74:4c:cf:e2:7f:24:21:d4:1d:
f9:31:18:30:67:13:3c:00:2e:f2:f5:f8:9c:01:37:81:2e:ef:
c0:5d:b2:74:b4:28:51:40:ab:2c:84:41:f4:f7:cb:79:6b:72:
09:ab:f2:43:10:cd:2c:c1:41:9c:20:86:a4:ea:e8:87:e6:a8:
d6:d5:87:e9:c1:ca:7a:c1:1b:71:26:48:ac:b2:75:0f:74:19:
fb:01:00:bb:0a:37:dc:b4:fd:f9:ab:6c:82:1b:8f:b1:1a:fc:
01:e0:08:6f:c6:0c:58:02:3c:5a:25:d6:e7:36:78:54:c6:93:
6e:e3:29:84:c6:28:01:e7:26:ef:d6:57:81:5d:cd:88:d0:e6:
a8:70:c1:f7:53:93:4f:80:4f:84:d7:9b:b5:dc:b3:d2:49:ea:
3e:29:bb:d6:09:7c:3f:b5:be:89:45:13:fc:99:db:3f:80:ef:
36:b8:ca:d2:3b:b0:d4:1d:fd:76:f6:55:77:de:3a:fd:ea:3a:
d1:99:2d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:26:25 2026 by rpki-client