Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
File: 1vrDln6phZIn2fe-dE4qbqSG4Rc.mft (raw, json)
Hash identifier: fSDXB1Zu5DRlcyoeP4LNmNWSwTdanHf9OBtWOgeh4cQ=
Subject key identifier: 48:E0:95:A9:37:55:43:EF:4B:51:B0:03:16:28:E7:F8:6F:39:43:42
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Certificate issuer: /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial: 01A0C2FB44DE86E0217A5E071BAD26B9D4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
Manifest number: 199D
Signing time: Mon 21 Sep 2026 08:00:42 +0000
Manifest this update: Mon 21 Sep 2026 08:00:42 +0000
Manifest next update: Tue 22 Sep 2026 08:00:42 +0000
Files and hashes: 1: 1vrDln6phZIn2fe-dE4qbqSG4Rc.crl (hash: YiAJZ7U5I9tVjC4v8Hxo6UUWVGv90Qc/AyOp/XgUkR4=)
2: 58jG5a4etI7HLIjlMWRu8EZHcBI.roa (hash: h6AjzB3AJvNdpXgK77pPU3V49NDZDTYGpMVhHidUW8I=)
3: 9rQtcYniJqaTmpf5xB6cfsXG52I.roa (hash: du7a+9+coel4o3rj5T2HDR19krlEKiSzpeQoq4pnzXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:44:de:86:e0:21:7a:5e:07:1b:ad:26:b9:d4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Validity
Not Before: Sep 21 08:00:42 2026 GMT
Not After : Sep 22 08:00:42 2026 GMT
Subject: CN=48e095a9375543ef4b51b0031628e7f86f394342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:04:80:db:f2:6d:8c:b9:e8:08:3a:42:72:
a6:74:c3:27:71:81:75:06:f4:87:9e:96:0a:82:43:
02:ca:69:20:c9:b0:d4:6c:fe:34:04:62:92:8d:41:
15:43:ed:a4:df:f2:52:2d:77:20:3d:2d:be:8f:02:
df:7c:37:bb:4e:b4:40:74:dc:28:fd:9e:07:78:97:
2c:5e:42:a9:59:14:7e:4a:8b:c5:5a:51:f0:e0:a6:
84:32:ef:10:31:0d:de:7c:76:cf:ed:a6:d4:fe:2a:
fa:2f:48:ec:63:98:ad:a7:b6:cb:dc:15:10:11:3c:
61:7d:e3:0d:fb:aa:fa:21:3a:0d:0a:58:55:0d:06:
a8:5f:31:58:fa:d9:94:d6:67:ec:18:de:cf:a8:ee:
54:2c:a8:d3:7b:98:41:2f:1a:fd:14:09:bb:9f:fc:
4f:2b:ec:de:ad:db:9b:3c:33:1b:44:4f:a6:db:84:
88:02:43:15:23:03:82:b2:a4:59:dc:db:cf:88:34:
91:14:ea:55:63:34:2a:b9:d1:fc:3c:f8:49:4e:ac:
80:a9:0f:5e:4e:7e:1c:0a:91:10:90:71:a7:98:93:
06:98:c2:e0:0e:d4:04:57:04:8d:b6:2b:fd:d9:c9:
4d:9b:a7:f6:02:a2:db:dd:df:02:21:f3:83:d6:ab:
09:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E0:95:A9:37:55:43:EF:4B:51:B0:03:16:28:E7:F8:6F:39:43:42
X509v3 Authority Key Identifier:
keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2d:4f:d6:b2:f4:7d:ca:7c:e9:fc:52:c3:4c:de:3f:45:e0:
11:8a:aa:11:e7:66:47:49:ca:d4:c5:be:a0:62:02:81:25:a6:
45:ae:60:22:69:06:20:9d:5c:80:9d:a0:ac:67:79:80:8a:15:
c7:5e:83:a1:1b:ef:b3:90:e4:76:9b:c3:63:73:7a:97:9e:ad:
63:a4:a1:47:f3:a6:6b:51:51:19:4a:0b:d3:9f:2a:9e:d6:f1:
bb:40:02:66:ba:a3:9b:62:b0:e2:ee:ca:85:ca:10:91:3e:38:
30:73:c0:6a:5e:68:b0:ad:b0:43:63:f9:0c:7f:f2:17:a0:72:
f0:de:1e:5a:30:55:15:d2:f4:7a:b7:be:57:0d:e0:4a:b6:18:
a1:57:77:1e:91:85:7a:74:f3:d3:63:c5:fa:a8:42:a5:00:ae:
4d:d1:b3:66:d1:bd:8b:db:01:30:bf:54:02:01:ae:ee:46:d7:
64:eb:a3:7b:9f:e6:10:90:17:b6:78:9f:24:7b:e6:0d:e8:21:
ef:a2:07:3e:a9:d5:37:ee:6b:1a:d7:4a:1e:60:e2:a7:db:b6:
39:83:85:3c:dd:44:1b:af:26:a9:41:80:b8:1a:57:3f:e5:f0:
ae:51:36:4e:94:df:4d:15:b3:e4:82:f3:80:a8:e3:a1:e5:52:
b2:48:92:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:52:50 2026 by rpki-client