Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
File: 1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json)
Hash identifier: zYAMBICMyDhFSu3HV14p1WjGhP4cxymOBjp+azaoF44=
Subject key identifier: C3:CE:CC:80:7C:63:DF:AA:2E:29:04:4D:7A:D4:7D:16:71:56:99:4F
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 01A0DF17ABA5E0AD7C6452AD150920FE6488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
Manifest number: 0A0A
Signing time: Sat 26 Sep 2026 19:01:05 +0000
Manifest this update: Sat 26 Sep 2026 19:01:05 +0000
Manifest next update: Sun 27 Sep 2026 19:01:05 +0000
Files and hashes: 1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: qasn3DVwwNa24HhL7MxAPm2Y0RgXptlGrPdSCFDDHtY=)
2: GpK1qyRmRdQTMv9rJuBvrLPAPCA.roa (hash: 6pjGKy0zNDxK6EGW3iKdJRBjUTjPWde8CyQwLbHqWIc=)
3: iTaV7elHXW3QykhmVM8s9S75IWo.roa (hash: I33OFLbbVy5ULnfJGK6BAuTPAY6ngasZNHORp7xBvjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:17:ab:a5:e0:ad:7c:64:52:ad:15:09:20:fe:64:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Sep 26 19:01:05 2026 GMT
Not After : Sep 27 19:01:05 2026 GMT
Subject: CN=c3cecc807c63dfaa2e29044d7ad47d167156994f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:c5:24:99:e7:18:c6:cc:89:36:6c:53:73:
eb:8a:c0:8b:89:d8:8f:56:b2:87:2f:ab:24:3e:37:
fb:57:99:78:7e:9f:f9:5a:70:4e:f1:03:44:2c:f4:
15:05:4b:b0:83:9d:8c:3b:21:52:23:e3:96:8b:04:
6f:59:7f:8f:f8:ec:ce:78:27:1d:c9:2e:c5:5a:06:
33:09:06:8f:a5:61:d4:00:70:06:61:3e:b1:78:a1:
c8:cb:e9:f0:bd:9f:ec:50:ca:5f:e3:b7:bc:b7:80:
f6:2c:8a:de:9f:0a:80:66:d0:7f:de:bb:6f:4c:42:
d7:93:f6:f0:33:31:d0:6a:76:ac:a2:96:74:a5:0a:
39:85:44:95:de:f5:00:ed:21:18:f3:48:e9:ad:2b:
6f:a2:40:bf:c8:65:58:91:84:9c:ae:64:6c:83:8d:
56:92:ff:36:78:ac:37:9d:c3:d4:42:5c:0a:09:6a:
d6:2c:69:b4:be:27:76:82:a0:df:d2:e2:29:67:44:
1d:56:2c:d8:fd:b7:d7:08:80:35:25:8a:5e:c5:c3:
ef:64:e4:b4:7b:75:7d:b9:a7:b1:8a:6d:db:30:cd:
42:84:a9:4d:e4:6d:fc:23:fe:92:66:34:30:9e:4d:
e7:67:46:aa:99:95:3d:62:57:12:96:3a:d6:d3:62:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CE:CC:80:7C:63:DF:AA:2E:29:04:4D:7A:D4:7D:16:71:56:99:4F
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5c:8f:0a:08:03:70:cb:0a:34:ef:da:c0:d2:11:b7:9d:8b:
2a:94:b9:9b:ca:38:06:b5:25:8a:68:c1:a9:19:76:19:14:aa:
46:ff:17:63:5a:ea:e8:26:32:67:a0:81:6a:4f:0b:5f:51:ef:
af:65:11:ee:9f:29:16:00:c7:f4:8d:59:41:9f:55:42:63:28:
88:f7:27:2a:72:bb:8a:5c:bb:78:e2:ce:95:a6:a0:26:6b:0a:
00:4b:18:28:92:03:98:e7:89:1d:85:a3:2b:7b:af:5c:a4:73:
22:db:e9:d6:3f:6d:f9:05:bb:c4:a9:77:ce:dd:e3:82:c5:43:
e4:53:85:9a:2b:58:6e:d2:8a:01:d4:91:80:e0:2b:28:63:4f:
f9:ad:ac:e0:d4:d2:1e:ce:fa:96:f5:af:d2:18:23:ee:a7:1a:
ba:8b:ea:30:4e:b0:34:3b:9d:5f:0a:3d:aa:16:cf:73:db:2d:
80:9d:8a:28:fa:34:d6:94:3f:eb:a9:8a:57:de:56:02:2c:ac:
e0:87:dd:ea:7e:3d:b9:75:2d:13:3c:a0:41:22:0c:1e:f7:f3:
bb:ab:1a:51:cf:7b:59:6c:e6:d3:a9:44:ff:34:c4:85:e7:55:
5f:a7:2f:53:bc:fd:37:cf:b0:e8:d3:02:de:65:6e:22:27:5c:
02:3c:f5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:19:05 2026 by rpki-client