Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
File: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json)
Hash identifier: x9x+11tdWM6mWuYFz3KOnYN4q05qw8yNeF59PO8VQf8=
Subject key identifier: DF:7F:35:A8:0C:DD:A1:A5:3B:46:98:FB:DA:88:C9:D9:57:B8:20:A5
Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Certificate serial: 01A0C6D79ACD41F83C74B5AD0060DE727160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 02:00:13 +0000
Manifest this update: Tue 22 Sep 2026 02:00:13 +0000
Manifest next update: Wed 23 Sep 2026 02:00:13 +0000
Files and hashes: 1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: /9qT02doLfDnpg3pYmUyiU2kPmz1gEehl1hlHYtxyCM=)
2: FxDYh-H5vzMGkKOjAtjIRk5b_E8.roa (hash: r/kaZb9DIyXkcq115EsvWd63BomYksvgYorP1CzK3Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:9a:cd:41:f8:3c:74:b5:ad:00:60:de:72:71:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Validity
Not Before: Sep 22 02:00:13 2026 GMT
Not After : Sep 23 02:00:13 2026 GMT
Subject: CN=df7f35a80cdda1a53b4698fbda88c9d957b820a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:db:fe:bb:5f:51:80:08:02:9a:89:a6:8a:8a:
f8:e3:c8:d5:d5:42:bb:18:7d:2f:40:0e:c4:ac:54:
24:13:88:f4:6f:cc:de:d1:62:fe:73:c3:5c:6e:f4:
6f:d5:f4:5c:8c:57:0a:11:2a:c8:84:6b:50:a1:e4:
d9:1b:39:b4:67:a5:39:a3:7f:b9:eb:9a:0d:83:11:
90:07:d1:60:24:56:5d:16:34:1e:e7:be:cc:0f:8f:
07:e7:0f:45:07:e0:fa:76:b2:ba:65:43:b4:f5:31:
15:c2:b3:e5:33:d3:78:57:c0:f8:c3:f4:bb:b2:cc:
f2:b6:f0:56:9c:2a:67:a9:4a:7f:d5:18:ae:ac:12:
34:50:77:30:ac:69:30:81:8f:ba:5d:48:43:7f:b3:
d5:5e:e1:bb:ce:31:74:b9:59:d6:dc:e8:3a:c3:cc:
d8:11:f4:d1:ce:6b:d3:cd:b8:03:ea:43:7b:90:7a:
8e:d0:eb:ee:0e:30:ce:ba:27:e4:42:8b:fd:26:07:
12:fc:4a:a6:97:ec:1c:60:86:98:9f:a3:ad:ec:ca:
7c:99:d1:c9:08:82:e1:11:3b:d5:64:48:ac:9f:a2:
fb:9f:e7:a7:9d:f9:1c:30:d7:09:81:08:a1:96:7d:
d9:94:62:2c:00:ba:50:60:39:ee:b0:96:67:cc:99:
84:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7F:35:A8:0C:DD:A1:A5:3B:46:98:FB:DA:88:C9:D9:57:B8:20:A5
X509v3 Authority Key Identifier:
keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:df:19:90:19:21:60:10:6d:b5:27:82:d4:18:39:aa:a6:ef:
3a:8f:c4:b8:39:dc:d5:fe:94:3f:80:66:31:3c:0e:ef:1d:0b:
dc:d3:18:4c:74:d3:68:82:dd:c5:78:37:f9:c9:af:0a:2a:24:
23:3b:48:39:b1:1a:9e:9a:7a:a6:d6:67:ce:ca:10:bb:37:81:
dc:8e:43:9a:7a:5e:02:43:6c:5e:48:37:d9:ab:81:c9:cb:dc:
08:15:7e:89:b1:7f:e0:32:15:4d:f8:1d:fc:8e:d1:8d:91:8f:
96:66:ac:bb:22:e1:6f:2c:d9:e6:55:8b:b8:c0:27:d6:f2:19:
78:47:c2:19:2d:20:b5:e2:fa:f7:e1:b8:70:dc:99:b3:39:cd:
c5:6b:c1:3a:d0:57:ed:a2:c2:98:69:e1:90:48:0d:e3:5f:2e:
43:fd:19:b4:18:56:9d:4f:5e:99:84:a4:0c:e8:db:01:2d:68:
76:9b:8d:fd:4e:0b:03:bf:c2:8b:25:a9:b9:9b:03:25:b3:7f:
a7:7c:1f:a0:2e:1f:08:39:d1:84:55:8a:0b:6d:67:48:84:bc:
31:36:f9:bc:87:f5:31:dc:46:72:7a:14:0d:54:8c:05:62:24:
d0:ce:cc:75:8d:b6:2e:01:68:ad:2a:80:d5:de:b1:87:18:f0:
5d:63:42:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:48:57 2026 by rpki-client