Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: iC9vS4Bz9ogoHxni1F3h/5FM8J5VwFezs8yj7ZvoGIY=
Subject key identifier: A4:7B:7E:10:EF:3C:61:9F:9D:21:A8:51:70:9A:5A:B5:5C:AD:54:1A
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 01A13CA5DF247D29D7E3ABE4BF3679FF1F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 144A
Signing time: Wed 14 Oct 2026 23:01:05 +0000
Manifest this update: Wed 14 Oct 2026 23:01:05 +0000
Manifest next update: Thu 15 Oct 2026 23:01:05 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: M39l6eTBgev4GG8LEKZ8PIjsCge/FpzFuwK5j+hnV4w=)
2: QbADnR-7JONR9psZmp25EkZo4_M.roa (hash: 8N891Zzq6DPXhsamgFNwmwRuiKpJQ8ss9kc+k3yiq9U=)
3: kneTFHssdpRkfp917HvR9pp0knM.roa (hash: Q0Z0lTZO2s3Ki+igcl/rjlfo3o507lYeXHkCl1jp7DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:df:24:7d:29:d7:e3:ab:e4:bf:36:79:ff:1f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Oct 14 23:01:05 2026 GMT
Not After : Oct 15 23:01:05 2026 GMT
Subject: CN=a47b7e10ef3c619f9d21a851709a5ab55cad541a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:90:ed:4e:de:0a:07:e7:41:3a:65:46:2c:fe:
bb:a3:06:cb:cf:86:b4:c8:53:27:27:1e:f5:8e:96:
0a:60:2f:32:8e:e5:f9:55:1d:06:a4:4a:06:0a:f6:
cf:89:e7:1d:5d:8c:a6:2b:78:49:ff:7b:02:26:37:
db:f8:f7:23:9a:bd:95:27:c8:13:c9:e4:48:77:57:
cb:90:f6:eb:98:33:ea:28:b4:8f:ae:31:7e:1f:da:
3d:59:1d:c0:41:68:74:aa:13:93:4a:38:90:a1:93:
22:37:12:a0:6e:da:f7:47:c3:96:ef:c2:62:66:54:
c7:32:81:00:b2:47:df:00:b0:1b:7a:ee:15:ee:6a:
35:4f:24:3b:be:a9:58:dc:c7:53:79:2c:0d:e9:2a:
da:b3:d4:e5:0c:a7:00:e2:63:17:78:09:d6:f3:dc:
3d:ae:55:bb:88:5d:2b:d1:1e:c1:b3:e6:f3:a3:4c:
b2:cb:ae:a2:a7:7f:a0:a9:a4:b5:c3:d0:de:14:cb:
d0:08:cd:48:b9:85:95:8f:ad:21:53:53:06:6f:f7:
48:0d:f4:0b:12:c9:5d:e9:99:9c:9a:d3:27:4a:1a:
95:a4:14:f6:68:c3:b8:42:92:18:3f:d8:cc:bd:6c:
ee:77:e0:94:8a:86:a3:c2:da:8d:e4:15:6e:40:31:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7B:7E:10:EF:3C:61:9F:9D:21:A8:51:70:9A:5A:B5:5C:AD:54:1A
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:30:68:34:47:e4:b1:7c:93:1a:be:e0:aa:d8:17:28:cb:07:
ef:c9:c1:97:38:94:cd:d7:58:dd:89:70:c4:00:1d:13:e6:3d:
27:12:e8:6b:ce:c5:12:ee:6b:9b:c9:bd:76:18:01:6a:37:5b:
e3:6b:1c:a1:3f:37:27:35:85:f5:c4:82:b9:b5:05:c7:90:5a:
83:a3:f3:91:52:5c:7c:e8:95:e5:33:f0:d0:8a:68:f7:5b:eb:
70:76:4b:a3:e4:76:cd:96:6b:6e:66:aa:36:4b:f0:f8:91:d5:
0c:a4:b5:fd:07:97:01:17:c9:fb:08:f2:52:5b:3c:34:77:1b:
ed:56:d2:88:09:18:06:15:c2:b9:0a:e8:06:7d:20:d0:e4:44:
7e:4d:ec:24:d6:52:87:40:5e:9f:1a:80:75:e1:6b:f4:89:13:
7f:58:e0:c6:27:09:98:89:8b:dc:cf:6f:85:ef:a4:f9:08:e6:
3f:53:f5:65:f3:93:15:2e:06:8e:46:f2:a2:3a:41:5e:45:d4:
c4:7d:09:a3:47:39:03:20:58:df:8c:07:36:c9:b3:72:03:c3:
d6:5d:76:46:0f:50:d1:d0:b0:a0:12:a3:1d:f8:61:8d:d2:87:
ca:2d:28:59:fd:e2:c0:79:74:18:a6:5b:e1:b6:8c:18:46:ed:
09:fd:90:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:25:58 2026 by rpki-client