
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier: I3x6yc/8l2GDV44V4nGvNya/qI4o1gJfxT3nJ2SFtK4=
Subject key identifier: 74:55:BC:88:DF:34:6C:55:31:9F:5E:AA:98:3D:E1:5F:52:4C:F2:E0
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer: /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial: 01A13559B0FE96523AF1E6077F2B40A09874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number: 1A9E
Signing time: Tue 13 Oct 2026 13:00:32 +0000
Manifest this update: Tue 13 Oct 2026 13:00:32 +0000
Manifest next update: Wed 14 Oct 2026 13:00:32 +0000
Files and hashes: 1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: Qh30wwfVNqm4hWJtWREnPz0O1NJnUyfp0xcOddNb3PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:59:b0:fe:96:52:3a:f1:e6:07:7f:2b:40:a0:98:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Validity
Not Before: Oct 13 13:00:32 2026 GMT
Not After : Oct 14 13:00:32 2026 GMT
Subject: CN=7455bc88df346c55319f5eaa983de15f524cf2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:17:1b:88:d7:27:01:b5:23:59:e2:c0:31:
43:34:eb:da:54:1f:72:c2:67:3c:92:63:4b:c0:ec:
45:9c:b0:c0:71:4b:5b:09:4f:e9:48:ff:4d:43:7e:
aa:44:c5:47:8f:2c:a3:04:51:d0:8c:cb:cb:12:ce:
d1:f5:c3:60:6f:23:9f:03:6c:1e:f2:fc:5f:16:ea:
87:d8:03:55:83:fb:44:f6:e3:3d:79:96:cb:08:c8:
cb:6a:0e:e1:84:bf:90:6c:d0:3b:57:44:71:a2:c9:
99:ef:a8:56:b5:04:43:be:ca:b4:b3:0c:6f:c1:32:
54:6f:fe:e3:08:28:4f:75:d5:fc:d0:a6:c7:74:0d:
75:61:19:34:f6:7b:fa:27:a9:ad:f7:64:de:5d:d6:
73:35:22:12:b5:9b:ad:99:4a:c5:09:32:b6:c2:d3:
27:2b:6e:16:e5:21:40:2d:3e:06:5c:f0:a5:97:f9:
9b:88:ce:e3:04:72:16:e6:d0:cf:6f:60:c7:81:64:
4f:29:8b:53:ca:48:94:a5:31:2e:10:8b:71:ab:a1:
c5:d5:4f:0b:ef:ca:53:99:1d:5f:b8:59:1f:91:99:
4f:4c:f7:01:5a:f6:f8:51:76:79:c1:15:fb:f0:a6:
b9:4a:6e:3f:99:42:48:c7:f2:a3:71:c0:61:31:55:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:55:BC:88:DF:34:6C:55:31:9F:5E:AA:98:3D:E1:5F:52:4C:F2:E0
X509v3 Authority Key Identifier:
keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:02:5b:cc:f3:57:bb:5f:96:b6:b9:2f:9e:ea:60:6b:5d:89:
0c:90:82:17:8a:3e:a8:7d:a5:5a:a6:09:4b:8f:de:d8:8d:c6:
a5:55:47:98:6d:10:bb:7d:a3:19:4f:db:36:f7:0a:c5:a5:ce:
79:b0:df:90:3e:96:0a:ec:0d:06:b2:d8:7d:e0:c6:69:0d:90:
94:d4:3a:f3:46:a0:8b:ed:82:60:62:98:95:63:69:db:cc:3b:
fd:83:0e:b6:64:43:7a:5c:2f:8b:9b:ac:94:eb:77:42:57:e5:
a7:85:77:1a:3c:a2:b8:3f:81:94:ca:34:95:e4:02:1b:cf:cf:
45:53:0d:be:bd:36:3d:77:0e:90:7b:f5:a8:ef:99:29:ff:03:
ec:80:6e:1e:29:0c:c0:4a:0c:4f:e3:fa:5b:ac:f1:39:c5:36:
59:85:80:6c:e7:5a:bd:8d:88:57:49:f7:68:da:1c:ba:8a:37:
ff:6c:c3:7b:1c:7a:37:29:38:0b:61:a6:9e:75:9c:f9:03:25:
87:cf:c0:20:64:81:79:fc:91:dc:3c:ec:f8:e9:5d:56:c9:f9:
8c:3e:0c:36:96:8d:f3:71:62:fa:ea:c4:21:c2:2c:0b:2f:ab:
42:67:db:28:83:8b:43:3a:8e:c8:de:a4:b8:cc:a0:01:4a:87:
9f:1c:d6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:14:27 2026 by rpki-client