Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
File: 1ITgzuV1xhkFP47isQBMxEL9LO0.mft (raw, json)
Hash identifier: CZ/vEHHFKPUlBlDqWdG1Tmn7+s4Fs0rGq5wzfMatJQ4=
Subject key identifier: F1:14:36:84:FA:58:FE:EA:67:98:FD:DA:D3:EA:DB:13:D7:4C:EC:FF
Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Certificate issuer: /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Certificate serial: 01A0FF47AA7D0AF66DAB3A3D66FB047CD891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
Manifest number: 18AD
Signing time: Sat 03 Oct 2026 01:01:21 +0000
Manifest this update: Sat 03 Oct 2026 01:01:21 +0000
Manifest next update: Sun 04 Oct 2026 01:01:21 +0000
Files and hashes: 1: 1ITgzuV1xhkFP47isQBMxEL9LO0.crl (hash: QewaQ1/QHEz8V6yZ4aZg2EfJ4ynXpLVDVCVxtUMGiGs=)
2: VGhk2cDF1jTB8yf6DPPbRT2NsSU.roa (hash: P3BuUVRGKsw3eiebCq9ip9oGlC6+nCgvMNwUPBdCFVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:47:aa:7d:0a:f6:6d:ab:3a:3d:66:fb:04:7c:d8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Validity
Not Before: Oct 3 01:01:21 2026 GMT
Not After : Oct 4 01:01:21 2026 GMT
Subject: CN=f1143684fa58feea6798fddad3eadb13d74cecff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:8c:16:a1:81:aa:e4:93:16:c6:56:81:1a:
36:db:02:72:b0:7c:3d:83:31:03:3d:2e:75:23:95:
fa:93:3c:b9:08:f1:2d:d7:17:4a:65:82:54:2c:5f:
d0:ea:79:e3:c7:c3:9e:03:f8:cd:b5:5b:1c:f3:45:
17:2c:1e:79:4c:41:b4:f6:c9:81:97:b6:e5:5f:a2:
75:1f:bf:b2:13:5f:a7:b7:19:45:07:e5:e1:c1:ea:
47:15:07:6f:2b:25:d1:80:15:0b:48:72:1f:84:a3:
fc:95:3c:aa:f8:cf:94:e8:e1:60:45:fa:73:22:c8:
33:5a:90:78:ec:5b:8d:4b:26:3a:37:e9:e7:5d:02:
28:e0:34:d1:01:7b:5e:e0:cd:77:88:be:66:82:81:
d0:a8:7e:05:ed:6a:5f:c5:ec:69:b2:01:d2:03:05:
3f:1e:69:5b:d9:71:0f:21:a7:cd:54:e1:16:08:59:
fc:3a:3a:74:53:87:f6:45:db:42:5e:78:76:22:c9:
07:4b:0c:b7:f5:f0:43:67:07:fa:a1:01:38:e8:04:
93:58:89:cb:f8:d3:d1:91:f7:f7:46:78:5f:80:cd:
7d:02:18:86:a7:b5:bc:0a:01:63:af:0c:21:23:0a:
26:10:12:68:bd:c5:ad:8b:f7:7e:89:4d:e4:d9:3c:
e7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:14:36:84:FA:58:FE:EA:67:98:FD:DA:D3:EA:DB:13:D7:4C:EC:FF
X509v3 Authority Key Identifier:
keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7b:9f:24:e3:34:23:31:bb:b7:2a:50:d2:a3:49:b8:a9:c9:
60:3e:a5:e5:25:cd:35:47:3d:c0:c9:91:c6:c9:e4:bc:72:4d:
77:4d:ce:1e:19:36:ba:3d:ec:1d:13:dc:0f:1d:02:e9:d5:5d:
c8:aa:1d:3d:10:1d:68:af:5e:fd:9b:ab:9a:be:f3:61:a6:89:
6a:50:3e:7f:41:00:3c:fb:29:dc:e0:46:b0:9c:61:7d:22:04:
d8:a2:aa:ff:ac:3f:97:4f:35:86:c4:1e:83:d3:7a:8d:0e:7b:
07:b3:6c:af:68:eb:d5:6f:ea:32:c1:e9:ff:3f:3a:1c:b1:0b:
0c:6f:c9:b0:76:26:d3:b6:74:7c:c9:b0:a1:98:53:6c:07:28:
2a:5d:fc:54:16:79:88:74:6c:40:14:6b:31:c3:d8:63:7b:0e:
b1:01:65:a5:0b:ec:80:df:54:28:bd:0a:f3:b7:57:fb:e2:e3:
41:cc:be:69:0f:ad:88:7c:e9:da:f5:6f:39:29:7d:11:d5:54:
a1:bb:0c:f1:74:59:7b:65:24:bd:75:5c:18:87:d2:c6:68:59:
88:90:46:7d:09:47:d3:a2:a4:87:f7:d6:b0:59:be:1a:d4:30:
12:dd:2e:0b:bb:60:ef:2d:5f:12:4a:54:84:7b:0c:d1:dc:33:
21:ea:66:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:30:59 2026 by rpki-client