Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
File: 1aCF65WtVfs6ayR-lngRKhTYGSY.mft (raw, json)
Hash identifier: OD7Luy7l3kvtGIfpMNejys0JUBg9Mz8DdnNSNNQQ4kU=
Subject key identifier: C4:6E:C1:8A:02:FF:DF:3E:86:6D:81:DC:49:8F:A2:14:30:9C:48:BF
Authority key identifier: D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
Certificate issuer: /CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Certificate serial: 01A120C083C34D12E5C4F85A6EAD78E4BE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
Manifest number: 0C83
Signing time: Fri 09 Oct 2026 13:00:49 +0000
Manifest this update: Fri 09 Oct 2026 13:00:49 +0000
Manifest next update: Sat 10 Oct 2026 13:00:49 +0000
Files and hashes: 1: 1aCF65WtVfs6ayR-lngRKhTYGSY.crl (hash: 6+Yn1EpXYqu4U4e9Tbh5MgdM29zEFsp0lNrl/TaEqT8=)
2: TSGYTkuRtKWAPNYB5i9msrLqQvM.roa (hash: db3DeF8DAU9YgWeZA84z6SD+HkiS1G0KP7PA4MoGHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:c0:83:c3:4d:12:e5:c4:f8:5a:6e:ad:78:e4:be:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a085eb95ad55fb3a6b247e9678112a14d81926
Validity
Not Before: Oct 9 13:00:49 2026 GMT
Not After : Oct 10 13:00:49 2026 GMT
Subject: CN=c46ec18a02ffdf3e866d81dc498fa214309c48bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:f8:53:d2:21:16:c9:0e:78:d2:30:bc:0e:
fc:9a:78:57:06:1e:5e:8b:a8:b9:16:db:a7:7a:c3:
35:9d:a2:34:4d:ab:f8:52:ab:9e:3c:f5:0a:a9:49:
f3:a2:27:3e:cd:31:f4:1f:40:10:14:9f:8b:7a:84:
65:43:7b:b9:9b:36:ce:c2:10:dc:b5:00:cf:2b:b0:
ac:98:94:42:d9:ad:e1:e6:9f:be:a4:9a:b8:03:a7:
b4:77:19:8c:1f:08:39:e1:cf:1e:e6:13:3a:94:8b:
57:6a:97:4e:e8:a0:a6:6c:08:dd:41:9d:b4:74:d8:
07:73:49:91:59:4a:b3:d7:75:1d:98:15:e2:cf:6d:
c4:23:c3:9d:de:23:c4:ab:d6:05:fb:b0:af:15:f6:
6a:06:cd:99:4f:97:f9:76:fc:83:d0:80:2a:2b:ec:
95:21:2b:e8:ae:95:3a:a2:cc:9c:63:a6:63:86:fb:
8e:6e:cf:e5:7f:ba:cb:85:14:60:3d:a4:44:ce:0f:
2a:c5:95:f0:97:f3:57:a9:52:77:4e:9c:1c:e3:89:
94:72:b1:03:f1:6e:e4:07:8c:29:26:09:93:d3:de:
88:1e:74:77:d2:86:f8:19:f3:da:a0:1d:0d:b6:4d:
8e:35:55:38:73:29:d7:86:cc:de:36:30:56:46:5b:
84:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6E:C1:8A:02:FF:DF:3E:86:6D:81:DC:49:8F:A2:14:30:9C:48:BF
X509v3 Authority Key Identifier:
keyid:D5:A0:85:EB:95:AD:55:FB:3A:6B:24:7E:96:78:11:2A:14:D8:19:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aCF65WtVfs6ayR-lngRKhTYGSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/94558a-2803-44c2-a772-f94adc1bbd90/1/1aCF65WtVfs6ayR-lngRKhTYGSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:87:18:b4:ca:d9:af:fd:94:6c:e8:4f:5f:c5:ca:6c:9e:19:
c1:c7:d9:1c:5b:b4:f0:9c:b5:43:cb:93:c6:24:f7:4e:07:4a:
4c:2e:eb:12:7e:97:53:03:12:f9:4b:c9:00:0f:a2:a6:24:d6:
92:d0:b7:02:b7:41:99:4a:cb:66:61:6f:b8:c4:c0:59:39:52:
e0:92:48:6f:30:82:b5:07:bb:5f:3d:ea:a7:af:69:8d:0e:0a:
2b:ba:dd:53:5f:5f:6f:cd:07:05:28:af:c8:38:23:44:69:74:
f5:dc:2c:49:2d:35:27:19:14:d6:88:d2:dc:eb:4d:57:18:17:
32:78:b2:fb:3f:57:68:fe:1f:7c:af:31:33:d8:30:77:fe:d3:
05:1b:62:3a:a3:29:2d:20:ff:28:85:43:3f:6c:b4:39:c3:45:
e4:d1:95:de:b5:9e:80:b1:59:f7:29:d6:7a:7c:b9:2e:b8:70:
70:0f:4a:3b:8a:b2:04:3a:6b:86:22:01:60:5f:30:89:01:df:
9c:26:14:3b:97:66:c2:00:4d:3f:90:6d:12:1f:7b:ee:5d:66:
3e:91:14:12:31:aa:89:af:24:e5:34:e1:1b:70:4d:28:92:99:
de:f0:fc:5a:4b:56:75:54:72:60:ff:5d:fe:51:95:e1:66:7c:
ee:25:45:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:05:53 2026 by rpki-client