Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier: ocZRJu1W5VFsQqT4MxIrPkLrZkZg0F+gxFQmkmZKnLs=
Subject key identifier: 36:5D:69:DC:C9:2A:66:BE:58:21:F1:3B:75:36:0B:20:DE:D0:F3:2C
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 01A0C70F28117F51B029E9E43161874FA453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number: 0A28
Signing time: Tue 22 Sep 2026 03:00:54 +0000
Manifest this update: Tue 22 Sep 2026 03:00:54 +0000
Manifest next update: Wed 23 Sep 2026 03:00:54 +0000
Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: gefTcqoavYbBE13667G2rj/QHslSIvxjhhNnbZSGles=)
2: KY98OK9jKpqbO2GmZe7Es_X3AuY.roa (hash: cBxNonBZQsdFtI0G+UJX4+MOa5fw7YrWs9H/ZAWUf1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0f:28:11:7f:51:b0:29:e9:e4:31:61:87:4f:a4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: Sep 22 03:00:54 2026 GMT
Not After : Sep 23 03:00:54 2026 GMT
Subject: CN=365d69dcc92a66be5821f13b75360b20ded0f32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:b0:da:71:cb:4e:30:32:c7:15:e4:f8:d3:
79:47:9a:69:d3:0a:84:6b:d9:3d:a7:5d:60:41:b1:
31:22:7f:e7:95:d9:ab:b7:2c:9a:71:be:8b:d5:c0:
c8:6f:f0:db:5d:97:b4:0c:9d:0e:75:5d:4f:c8:b4:
6d:be:0a:38:72:ea:52:fc:70:5d:95:21:f0:f0:23:
ff:bc:0b:8e:bd:d6:b4:9f:bd:f5:11:bd:93:24:bd:
58:62:fc:cd:58:1d:cb:ea:65:6a:da:86:f2:b6:5b:
d2:27:9e:db:30:3e:b6:59:57:96:5a:92:0e:2a:dc:
01:25:3c:82:f9:e1:8f:a6:2f:0a:0c:01:cb:af:e1:
d5:db:29:67:79:5f:87:bd:28:2a:b0:6a:97:d1:5d:
42:57:63:79:6d:a7:2c:f2:1a:b2:cb:a4:83:bb:89:
8a:99:dd:22:13:30:0c:0f:72:91:03:29:a6:53:78:
c6:15:ea:42:f6:0c:78:ed:49:98:be:c1:cb:fd:16:
9c:40:30:18:00:d8:93:49:36:2b:44:b6:a4:6e:02:
fd:a6:45:d3:3f:6e:07:e6:06:32:73:84:20:ee:80:
11:14:7a:ae:89:20:1f:38:1f:c1:c0:17:96:e0:64:
dd:ea:e6:2b:8f:39:38:91:2d:56:00:c3:13:0d:62:
98:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5D:69:DC:C9:2A:66:BE:58:21:F1:3B:75:36:0B:20:DE:D0:F3:2C
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:29:16:58:a5:36:e8:3f:40:74:4e:b6:68:0c:60:bd:be:71:
39:9b:31:e0:ad:a1:47:e1:c0:db:65:7a:53:74:ac:11:93:b0:
fe:87:10:93:98:8c:a7:d9:f6:44:0d:4b:75:b3:57:5d:23:c5:
33:f6:f1:d3:ee:3d:97:b1:ea:ce:ad:8f:fa:c2:ba:0c:03:4f:
99:77:49:83:49:cb:38:f0:09:ee:32:3a:dd:f8:ab:f1:c7:86:
d7:aa:ee:46:5a:0b:77:6f:b5:e8:7e:4d:af:1f:89:11:ee:ea:
65:8c:06:ff:c5:76:3d:1d:4f:9b:51:c2:04:92:5c:c2:77:5a:
d5:d6:35:10:db:5d:b8:e5:ea:49:35:6c:a6:e5:c2:f0:c9:5f:
a8:6e:3e:70:38:98:02:4a:21:6a:f8:9d:63:e0:1f:50:f3:18:
2f:91:02:5a:a1:c9:27:3d:1c:e0:c5:f3:61:eb:f6:f1:22:28:
6b:a9:cd:62:72:01:24:ff:24:ae:b3:fa:b8:db:0b:51:51:89:
a7:23:93:fc:21:5a:77:68:b8:86:32:b4:0a:b9:25:06:50:fe:
04:c4:ff:73:53:af:81:63:01:15:2d:7c:8e:6c:bf:f4:6c:6e:
03:12:59:9e:35:02:3a:9f:79:ee:20:93:b6:1a:24:8d:52:7a:
b2:83:25:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:46:14 2026 by rpki-client