Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: OsUqdtGHn3YzoTwDkVWmLWenB9eKDleNzqgd4XO/y8s=
Subject key identifier: 02:D4:C4:0F:6F:58:F0:38:2D:69:92:49:FD:9F:83:C1:45:D5:E9:BC
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 01A0C7B351B6F9CEC99E98601224A4C08EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 1A72
Signing time: Tue 22 Sep 2026 06:00:12 +0000
Manifest this update: Tue 22 Sep 2026 06:00:12 +0000
Manifest next update: Wed 23 Sep 2026 06:00:12 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: 39Heg5Syy7HU3Tz6l3PiUY1MhtEQdR+Vxy1zBXpiLvI=)
2: 6sTBdAYOdsPVCJ7oIkKrll3rRVI.roa (hash: yTR0IA9nFjjo1Ldxk+L5OOie2llv02FCoCgvYWgevjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:51:b6:f9:ce:c9:9e:98:60:12:24:a4:c0:8e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Sep 22 06:00:12 2026 GMT
Not After : Sep 23 06:00:12 2026 GMT
Subject: CN=02d4c40f6f58f0382d699249fd9f83c145d5e9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:a6:1b:ab:f3:d0:15:25:2d:a9:c5:19:4e:
dd:fa:8d:64:d1:8f:d6:ec:03:6e:59:34:db:27:e2:
31:a9:f0:ba:b0:cd:4f:1d:53:c5:b8:4c:c4:86:2a:
6d:fe:0e:c1:55:e0:87:dc:14:28:9f:da:38:21:b3:
b0:40:42:9e:ee:27:af:66:eb:32:89:7e:07:18:2f:
d7:da:68:73:75:53:b4:4a:7d:ea:e4:ea:9c:61:4e:
54:0e:3c:ef:22:dc:65:8d:94:1d:e5:3e:a6:90:cf:
ea:91:4a:9e:0c:c2:9c:c9:a7:36:c3:6d:1c:29:b6:
fc:5e:3e:46:30:2e:f0:d7:5d:a6:d3:79:d8:ba:2e:
15:2b:51:98:1e:f8:15:9e:8e:a5:81:01:ef:86:0b:
91:c5:5b:7e:be:13:02:64:5a:3f:f0:58:cc:f2:99:
d9:a0:45:c3:f2:e0:43:de:66:d1:c8:01:76:fd:c9:
6e:42:2d:80:09:30:ab:ab:3d:98:22:5a:72:14:1a:
92:7e:7b:d5:f4:ff:88:c8:90:0c:ab:87:a7:9f:15:
ed:02:7b:e1:e8:0d:55:fb:d7:a9:48:b1:e6:54:b2:
ee:78:37:0b:a5:98:a4:62:98:0e:d1:ca:b8:9e:c4:
ee:63:e7:f5:1f:9e:68:a1:b9:80:ad:72:bd:d7:50:
62:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D4:C4:0F:6F:58:F0:38:2D:69:92:49:FD:9F:83:C1:45:D5:E9:BC
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1e:7d:94:fb:f4:13:be:94:74:11:5d:3c:e6:d9:73:a1:01:
7d:3e:01:86:14:1e:cf:9e:e8:b0:ff:65:cd:a5:95:27:5a:08:
10:f3:25:e2:f6:4d:92:4c:a6:82:4c:a8:2b:a6:4d:fe:6e:53:
ac:2f:6c:2a:51:82:c8:e9:16:81:a1:f3:46:60:c8:23:f5:27:
7c:7d:96:48:b4:6d:2e:75:8b:ff:6a:68:93:7b:57:e2:85:0b:
0b:f9:b6:bb:81:94:ae:e1:25:d2:25:3d:c4:41:27:7e:59:ab:
0b:a6:09:51:9b:48:16:3f:ad:ef:c4:da:cc:59:e8:83:c9:09:
d6:9f:4a:81:75:10:e7:7a:48:8b:68:67:e4:2c:03:a6:27:33:
69:8d:b7:21:26:a5:25:a4:73:02:bb:85:30:3b:f5:8f:ca:f3:
13:18:fc:46:26:23:b3:90:ee:ba:0e:c9:62:13:93:72:d6:6a:
65:10:01:de:8b:c7:87:cc:50:c0:5d:9d:d0:e6:0a:af:bb:bc:
d3:95:50:cf:08:4f:91:88:7e:d7:f6:59:b9:c8:59:3b:88:fa:
20:c2:b4:60:fc:8c:f7:2c:a6:76:f0:3f:b4:12:ed:d4:ec:9e:
ba:60:da:4d:f2:d5:19:1c:93:72:b1:01:88:48:51:07:60:73:
86:f7:a4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:49:54 2026 by rpki-client