Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier: 5gVxd0pum6Sw8+2KSZkfhZz7KJn0XxVHGjuQ/MJyxMs=
Subject key identifier: 85:11:C3:C0:39:18:7E:65:F6:6C:47:37:41:35:07:9B:69:BB:A3:98
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer: /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial: 01A0C030E1FC10B219198D1BCB2D57E357A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number: 0FA9
Signing time: Sun 20 Sep 2026 19:00:24 +0000
Manifest this update: Sun 20 Sep 2026 19:00:24 +0000
Manifest next update: Mon 21 Sep 2026 19:00:24 +0000
Files and hashes: 1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: huIzZn44onSx7k4AdAmiMzKtAbGsPEmrSOBQ2w/Ozbo=)
2: QZaZGDE-cuakmV83Cz5Lef8Azck.roa (hash: 2PUB2C+ejT//n1dG/GiuAYrRsrfPippeNMItlWaifDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:30:e1:fc:10:b2:19:19:8d:1b:cb:2d:57:e3:57:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Validity
Not Before: Sep 20 19:00:24 2026 GMT
Not After : Sep 21 19:00:24 2026 GMT
Subject: CN=8511c3c039187e65f66c47374135079b69bba398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:e2:5b:29:a1:1a:49:3e:45:f2:c2:99:fe:
9c:28:75:08:77:72:63:9d:e8:d3:1b:4f:36:7a:a9:
39:cc:1d:4f:44:2b:64:bf:cf:1e:08:9b:2a:f2:ea:
f1:6e:95:1e:4d:96:de:33:7c:02:98:ff:2d:26:28:
6d:35:b3:b8:7b:dd:7a:00:37:17:13:8e:f2:1c:eb:
42:cc:28:66:3a:69:b2:ba:25:9c:9c:8f:bc:c4:d3:
43:b2:48:49:23:57:e6:77:c5:41:58:8b:13:89:ba:
83:15:5f:59:ad:65:10:26:6c:67:06:97:f0:d9:e8:
ed:59:99:8e:a6:5c:aa:32:b1:be:af:44:f0:56:fe:
36:50:b7:52:03:76:c2:07:e2:3f:8f:e7:91:8e:ff:
a8:28:02:36:8a:96:e7:ed:56:40:75:78:90:68:f7:
96:68:75:b6:92:04:29:d7:08:35:ac:86:ca:7a:1f:
9b:fc:69:71:c8:a9:0b:78:fd:64:11:46:40:93:40:
d7:53:1b:f6:27:c3:5c:71:45:73:39:ce:9e:44:55:
0b:b9:9c:c3:52:f4:74:44:ae:6a:32:f4:29:13:36:
56:db:e7:78:04:30:86:d5:70:13:b9:1c:4e:4b:82:
28:e1:12:82:47:4e:21:29:e3:51:10:b2:75:d8:09:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:11:C3:C0:39:18:7E:65:F6:6C:47:37:41:35:07:9B:69:BB:A3:98
X509v3 Authority Key Identifier:
keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:14:fe:cb:ef:48:0a:c0:e0:f2:84:4d:af:56:c0:70:28:18:
84:3f:c7:a8:55:1c:61:d7:99:df:e8:24:aa:a2:e5:86:87:2c:
65:5e:9a:bc:21:6f:14:31:ef:46:67:1c:12:b9:02:3b:d7:5d:
13:66:5d:89:1d:f7:81:bc:50:9c:c5:c0:bd:e5:54:3c:68:e1:
bf:34:af:1f:5a:74:5e:24:68:b7:be:f1:d6:bb:6d:a9:cc:5e:
bc:3a:cb:e7:a4:99:57:c5:cb:e7:71:88:61:50:fb:5a:0f:5a:
75:a4:d0:7b:fb:83:a1:11:53:e5:88:0b:80:91:71:b7:14:a3:
b8:b8:5d:ca:96:5d:d0:23:98:9a:24:5b:dc:2a:84:aa:b8:35:
9b:80:2e:31:1c:80:fb:8f:b5:e0:78:8a:ac:bf:46:5a:9a:47:
4b:2f:41:3e:82:e2:fa:4e:c6:97:97:fa:15:01:47:4b:9c:e4:
7c:18:83:d5:84:c2:64:b6:27:95:85:b1:5a:58:7b:48:3e:59:
c2:e8:55:12:02:0a:61:39:f9:2d:20:18:12:3d:2a:5f:25:a5:
b5:65:9a:76:75:20:94:8c:a4:96:37:00:4e:1c:c5:ce:03:82:
71:03:a6:0b:f7:96:0c:94:ad:af:ef:95:c8:b9:e7:1a:2e:d1:
bb:40:90:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:51:57 2026 by rpki-client