Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.mft
File: 1Tm4aC89XOqjlcvPet7a2RFPqfk.mft (raw, json)
Hash identifier: 7xaWOigkv6ZfMbbpxn/PWTkEWQavY5p+WzoeIreM9aw=
Subject key identifier: 62:10:9A:C4:36:DE:F2:0E:D0:34:22:0C:D4:9E:02:21:8D:37:90:79
Authority key identifier: D5:39:B8:68:2F:3D:5C:EA:A3:95:CB:CF:7A:DE:DA:D9:11:4F:A9:F9
Certificate issuer: /CN=d539b8682f3d5ceaa395cbcf7adedad9114fa9f9
Certificate serial: 01A0C7464728ADB88DEDD08CF71856A3E396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Tm4aC89XOqjlcvPet7a2RFPqfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.mft
Manifest number: F2
Signing time: Tue 22 Sep 2026 04:01:06 +0000
Manifest this update: Tue 22 Sep 2026 04:01:06 +0000
Manifest next update: Wed 23 Sep 2026 04:01:06 +0000
Files and hashes: 1: 1Tm4aC89XOqjlcvPet7a2RFPqfk.crl (hash: Qsc6GRVARgXJfxjEMQzAXVvRUvoxs72j61zmUUDd84Y=)
2: AWbOy_liNGdmx811xpn2huXogl0.roa (hash: s8PFr9TztoBDWe3VrYxnh1Hk1tgm8rWogms1QJku0RY=)
3: B8fqsC3aShkcz3xinfEaCL9lJJM.asa (hash: mIOkxfOZ146cNVL+oCd/IPz7NJOCWL+FQcV3YMtA4Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Tm4aC89XOqjlcvPet7a2RFPqfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:47:28:ad:b8:8d:ed:d0:8c:f7:18:56:a3:e3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d539b8682f3d5ceaa395cbcf7adedad9114fa9f9
Validity
Not Before: Sep 22 04:01:06 2026 GMT
Not After : Sep 23 04:01:06 2026 GMT
Subject: CN=62109ac436def20ed034220cd49e02218d379079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:0f:ff:cc:76:8b:09:ef:30:e4:aa:ce:a0:
ed:b4:b9:75:cb:c4:1b:cf:5d:eb:e2:86:d4:23:5b:
94:64:db:b4:7c:af:c0:f1:1b:56:d8:7b:03:0a:f7:
24:f0:86:42:ba:c5:36:dc:22:f6:8d:b3:bc:b1:b4:
2c:c1:a9:c9:15:0b:9c:fe:5f:78:53:29:7c:c6:41:
b2:2f:5d:9d:a4:3e:17:f7:2f:33:8c:09:ac:7d:da:
56:24:45:fd:73:6d:0d:bf:f9:78:2a:35:c2:03:2d:
9a:c7:08:db:0c:1f:5e:91:0f:c2:9c:be:4a:0d:5b:
cc:8e:0e:54:8e:50:1b:63:c9:36:d5:61:b1:2a:94:
cd:f9:a6:1e:42:45:c2:f6:ca:87:0c:95:5b:ad:b6:
dc:0b:d5:96:d0:71:c8:23:06:c0:86:e2:89:b0:8b:
97:2f:d2:99:8d:7d:a0:3f:4b:31:88:c3:45:67:b4:
d4:36:05:e0:4d:22:2c:e9:7c:64:91:f6:96:a8:2b:
9a:e6:f3:47:12:6c:bc:33:7e:cc:b2:03:86:81:0b:
5d:09:09:ba:d3:4f:a4:f3:b4:63:31:2e:e6:74:24:
57:3a:76:18:88:63:db:9e:68:26:c5:e8:64:33:01:
d6:57:75:97:2a:3a:70:bc:ba:3c:bd:96:19:27:da:
4b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:10:9A:C4:36:DE:F2:0E:D0:34:22:0C:D4:9E:02:21:8D:37:90:79
X509v3 Authority Key Identifier:
keyid:D5:39:B8:68:2F:3D:5C:EA:A3:95:CB:CF:7A:DE:DA:D9:11:4F:A9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Tm4aC89XOqjlcvPet7a2RFPqfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:96:31:43:c2:cd:20:4b:80:66:18:8b:8b:4e:c9:41:53:c5:
ae:7a:23:d8:ff:e9:b1:18:93:b8:90:79:d5:59:30:03:a5:6c:
53:82:0b:4d:7b:be:dd:4e:8a:41:ca:18:95:57:2a:75:e1:da:
69:2d:e3:d4:aa:46:5b:32:25:06:76:03:30:e8:47:0e:7e:67:
f9:7a:11:b4:36:2c:ad:ec:77:ae:fe:7d:f8:6e:46:36:69:65:
64:3d:db:8f:7e:d5:c6:48:26:c7:0a:03:e3:c6:4a:80:9e:46:
01:73:f0:dd:7d:d8:4f:12:85:09:a1:4d:ce:8f:47:67:3a:c2:
5c:62:19:5d:20:e2:47:3c:3d:43:85:ad:04:e8:7e:dc:a6:5b:
93:a6:c6:89:c1:ac:77:e1:1f:63:be:fd:2e:35:eb:03:b9:ff:
b2:a7:49:d5:be:b2:ee:42:b8:f5:80:f6:4e:4b:86:7e:8e:db:
6b:73:be:8b:e6:0c:86:b5:a1:82:5d:35:65:82:87:ca:98:26:
0d:34:32:5d:48:d8:74:0f:a4:8f:2b:8f:76:65:6e:86:9b:98:
94:fb:e2:e7:e6:b9:04:b1:8c:43:90:3f:bf:b4:03:32:5b:81:
2e:3a:44:d3:48:96:12:e9:12:ae:5f:8e:ba:01:42:72:2f:81:
2f:88:ac:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:03:08 2026 by rpki-client