Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier: H94OPw1dpbn0hKqLgKcHxazWcomdzQ9PgYT+xBsKyQg=
Subject key identifier: 0A:B4:3A:72:95:E5:11:11:73:95:5E:58:51:38:74:81:2A:A3:BA:C7
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 01A0E061916400199EE7FA10BE4A6B6B53D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number: 1707
Signing time: Sun 27 Sep 2026 01:01:25 +0000
Manifest this update: Sun 27 Sep 2026 01:01:25 +0000
Manifest next update: Mon 28 Sep 2026 01:01:25 +0000
Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: 6npQxokQBVvyyojGGOBl5jCzWQahrjyV9jg0eeeAOkU=)
2: 4ZvAi-gn1pF-qrIQmhpNRfK8kj0.roa (hash: fHKVM+9R/f9S25YhWf0k6ch7xqovB3duuxyKCTErDx0=)
3: IWwnPa171sfGXqpY2mWfswCRM5U.roa (hash: 6A+J6jDcFtUHVF1QTU8jgrZFLP13CFzG45TXvJZuPBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:91:64:00:19:9e:e7:fa:10:be:4a:6b:6b:53:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Sep 27 01:01:25 2026 GMT
Not After : Sep 28 01:01:25 2026 GMT
Subject: CN=0ab43a7295e5111173955e58513874812aa3bac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:d1:8e:47:90:f1:01:5e:5c:1a:3e:f9:85:
d5:9b:68:b2:1e:67:93:3e:a4:c1:aa:80:17:fc:80:
c2:b2:74:bf:1b:71:6e:79:25:bb:10:e3:4b:d6:8f:
24:6f:bb:27:d2:16:d9:43:46:4c:fc:e7:15:ee:1c:
d1:e8:d4:96:24:d4:87:79:97:5f:35:d7:51:2d:5f:
60:da:b4:f7:5d:85:65:d3:6c:28:60:80:b2:1e:27:
92:33:33:36:b7:64:98:53:34:a5:4a:c0:15:45:92:
e6:72:46:d1:bb:5b:03:28:78:ef:e0:95:5a:9c:ce:
95:18:64:fd:be:61:be:4a:27:2c:35:45:0a:f8:ad:
04:fe:5d:46:1e:a6:bd:74:0b:f4:bc:16:03:3c:5c:
71:e8:cf:64:16:32:fe:7a:99:4d:dc:68:16:85:24:
85:40:f9:aa:12:14:22:70:88:75:54:b7:c7:34:d0:
66:b0:37:44:d0:e2:20:62:41:6f:8f:50:75:73:15:
5d:2b:e3:3e:6a:45:b6:21:ed:84:6c:2f:20:95:4e:
f1:d6:e6:3e:e1:e9:b3:0b:01:fe:d9:68:2a:30:0b:
d0:b2:d4:51:e5:04:64:08:ba:a9:1f:b3:42:fe:4d:
f1:7b:60:4b:e6:2b:3e:49:e3:95:de:a2:78:a8:49:
8d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B4:3A:72:95:E5:11:11:73:95:5E:58:51:38:74:81:2A:A3:BA:C7
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2f:0b:52:65:0b:42:b5:ed:eb:2e:01:b5:34:04:94:a0:de:
37:aa:ed:8f:b0:e5:da:36:5d:6e:99:25:c6:bd:30:5e:bb:ce:
7d:7f:5c:e5:e9:b6:3a:19:7d:ac:8e:2d:f5:f4:12:5b:45:48:
c9:98:d2:c3:39:f5:14:5a:25:99:25:43:38:4d:e9:48:0e:43:
aa:de:a2:bd:25:8c:51:47:87:ce:cf:e5:8d:ca:7c:11:db:fb:
d5:5d:8f:27:20:f3:2e:d5:7b:f7:2b:96:9f:69:bd:f6:fe:5d:
dc:72:03:ef:ce:18:56:dd:e2:01:e0:07:bd:46:a9:2d:c9:95:
12:83:6a:21:06:a0:ef:82:2e:5c:56:13:2c:d1:38:9a:34:68:
85:77:2e:7b:89:be:11:97:ed:b4:5a:50:b6:56:51:e0:ea:00:
78:95:2c:e6:51:90:d5:15:59:61:33:a2:b3:9f:f8:07:48:01:
aa:61:16:62:29:4e:f6:21:61:f9:ec:73:3a:8b:e0:da:13:6d:
04:33:c1:13:68:c4:f6:f4:ae:3b:52:24:50:31:67:e5:9d:73:
73:29:19:12:10:cc:c3:89:1e:34:f3:d1:92:fb:8b:a7:44:df:
73:53:f7:f6:f0:ee:14:65:eb:26:57:ef:91:af:2f:13:21:53:
a0:22:90:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:38:25 2026 by rpki-client