Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: inTDcBbWvlQk98JqIx6gcNZ9N6s53gLvV2n6hVD5bqk=
Subject key identifier: F6:32:E0:8B:B7:90:DB:65:6C:25:0E:27:20:11:BE:91:5E:65:22:AD
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 01A0C88F3C058AD8B70B7E2A692C095B288D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 10F8
Signing time: Tue 22 Sep 2026 10:00:25 +0000
Manifest this update: Tue 22 Sep 2026 10:00:25 +0000
Manifest next update: Wed 23 Sep 2026 10:00:25 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: xZJxW2L8dq9yNbAerjcdyZcOmVdgtlHnHeqdnqP3asw=)
2: GAUiyTIFwXNYaLqpXS7shunphho.roa (hash: SFsb3Fni2JlQZLpt6X2EgEMJ9MLA34f5MeJx3huTFiM=)
3: GP7KWBDJ3szsdg470HEvQ_eBiTU.roa (hash: WISQGdJU8WS2sRXkUu1VfI+qv72otRs4wKcVECbAYnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:3c:05:8a:d8:b7:0b:7e:2a:69:2c:09:5b:28:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Sep 22 10:00:25 2026 GMT
Not After : Sep 23 10:00:25 2026 GMT
Subject: CN=f632e08bb790db656c250e272011be915e6522ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f3:33:8d:d2:46:c2:9f:e4:f2:4d:8b:eb:32:
79:b9:71:54:87:72:a9:76:84:94:97:9e:92:86:f8:
6b:bb:38:8b:f7:e8:29:5f:4d:99:7b:bb:89:3b:de:
cc:3a:25:da:c9:16:6a:9a:73:f5:3d:10:95:52:0b:
b9:c2:0d:bc:22:dc:8c:a6:12:e7:38:ad:2e:eb:f1:
52:0e:ca:72:81:99:b3:33:45:c5:ff:48:b4:af:00:
89:23:92:01:63:f9:cb:81:aa:fd:94:d9:01:ae:ed:
40:c3:a5:16:1f:0c:63:9e:29:bd:a7:a6:37:5a:a7:
a1:2b:d6:c5:9f:dd:6a:ed:fa:66:3e:eb:4c:ac:82:
a4:8a:2e:55:04:59:e3:c3:19:fe:65:07:f0:29:7b:
dd:f8:55:92:23:08:29:b6:ad:4d:55:0c:50:56:32:
4a:e7:22:8e:d0:82:36:18:81:15:c0:9e:00:ae:8b:
d7:92:71:f1:fe:30:72:f5:74:7b:ba:41:0b:e9:6c:
b9:1e:2b:e1:e6:db:3b:0a:ff:d5:67:3e:7b:82:e4:
12:97:e0:53:cc:b4:26:39:b3:05:9f:ad:3c:ba:72:
5d:e3:77:d2:77:38:23:51:93:a4:8f:cc:68:76:f0:
ea:60:7d:f3:88:6c:7a:ae:ed:a6:38:b8:99:94:18:
09:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:32:E0:8B:B7:90:DB:65:6C:25:0E:27:20:11:BE:91:5E:65:22:AD
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8e:ee:18:47:38:b9:0e:9e:7a:d0:51:b3:7e:81:87:c0:94:
d5:c3:6a:da:ef:17:e8:39:8d:13:68:10:31:85:96:fb:ca:98:
4a:a4:78:98:91:0e:e0:48:ed:a3:3d:34:71:8b:31:94:d6:d3:
9b:3e:0e:93:6a:c6:5e:cf:55:e5:f5:3e:65:8b:07:0c:4e:34:
82:9e:30:6a:f1:38:d4:3a:92:4d:3c:62:f8:89:a5:7d:4d:0a:
90:1d:fa:72:8e:4b:5c:59:d7:8b:33:f1:45:b1:e7:1f:69:0c:
24:4e:08:2a:dc:b5:5f:3f:d5:97:c2:d2:4e:bc:a4:a6:e9:57:
66:bf:e8:56:37:b3:c5:5a:b2:f5:dd:69:96:43:32:f8:4a:18:
6b:75:ca:ae:87:99:58:35:49:5a:8c:e7:31:27:5c:2c:a1:af:
08:9c:43:f1:23:b6:b3:36:bc:04:c3:90:69:b9:56:23:9d:1b:
3e:1d:ef:d2:08:a2:a4:a1:10:4f:88:14:52:d4:c1:3d:23:fc:
a7:f9:42:90:a6:f1:60:21:8e:76:b8:73:3f:4f:ec:fa:4d:e1:
74:db:a7:52:50:2d:af:c1:ab:ed:9d:87:82:03:31:d4:3e:8e:
af:c8:94:ca:32:0a:b9:69:e4:c1:5c:fd:50:f3:f6:4e:91:75:
e4:39:33:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:03:59 2026 by rpki-client