Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: 2OnWuXvOObcc+6ge46XT09hKyXvTWg6V7Cb818wgZx0=
Subject key identifier: 9A:54:49:3F:56:90:49:3E:05:7C:81:24:2B:80:1A:3C:39:71:2C:71
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 01A0FD22A2CAFBCBD746DB878D454E9F3B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 1A88
Signing time: Fri 02 Oct 2026 15:01:40 +0000
Manifest this update: Fri 02 Oct 2026 15:01:40 +0000
Manifest next update: Sat 03 Oct 2026 15:01:40 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: KGZgMbSAoOxQ3vSnnlBjEXjZiHciCHYob/OyIBS/4ew=)
2: gMgy66IeqRUWzHc_Tz_B5xCML94.roa (hash: alaMur7cm6u5buHk6RtnuNKVEJYn50JpsYiMrntsAII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 15:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:22:a2:ca:fb:cb:d7:46:db:87:8d:45:4e:9f:3b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Oct 2 15:01:40 2026 GMT
Not After : Oct 3 15:01:40 2026 GMT
Subject: CN=9a54493f5690493e057c81242b801a3c39712c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:25:d0:07:6d:f7:8a:da:9a:6c:c8:d9:ca:
79:f4:58:8b:56:f7:89:1c:03:c6:4e:a3:58:ca:e8:
56:22:43:a8:e7:fe:c4:cc:8a:2d:1e:80:4c:2c:e1:
21:46:e5:f2:39:37:3a:a6:37:ee:37:d0:2b:f7:b8:
4c:71:1e:97:53:e0:0f:e9:17:5e:dc:46:0e:dc:27:
f1:0c:0b:75:1c:22:9d:6f:fa:91:01:cb:62:07:ab:
ff:eb:45:f6:da:d3:30:ab:dc:9e:dd:f3:f6:c5:67:
0e:8d:a5:0b:28:30:32:14:aa:30:14:73:81:b3:ea:
e7:01:60:eb:6a:a4:e5:e5:47:70:bb:87:da:39:f5:
dc:68:35:bb:6a:1c:3c:03:41:b0:7e:88:8d:f5:94:
47:e4:17:87:94:7e:f9:f5:f8:89:9b:88:84:46:bd:
6e:4f:d2:b8:b8:ee:fe:af:c7:16:08:76:a4:52:8e:
ee:8b:c1:2b:b0:0e:c3:57:e2:e6:ca:c0:70:59:21:
33:06:1f:92:09:07:7a:ac:d8:43:4a:73:2d:6b:92:
b6:44:69:e6:8d:be:f8:88:45:a6:5a:a4:a2:56:09:
87:a6:22:8e:ed:5f:e7:4c:4c:96:e2:0c:bf:7b:06:
76:33:c6:7e:15:25:4a:29:bf:f5:55:b3:25:5a:5b:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:54:49:3F:56:90:49:3E:05:7C:81:24:2B:80:1A:3C:39:71:2C:71
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:24:e7:79:69:7f:f4:16:35:9f:43:a8:ce:f4:06:32:79:95:
88:83:e2:20:08:82:49:37:b7:09:43:a7:5a:57:d9:82:04:5f:
1e:e3:43:65:28:da:93:e5:49:d8:7b:82:fe:fa:3f:5a:44:c4:
93:85:be:8f:e4:89:9c:42:97:a1:a3:b1:9e:d5:7f:13:fb:e7:
e4:e0:a2:05:28:17:cd:f6:2a:2c:b6:31:6f:35:6a:e4:2c:60:
0c:32:ee:6d:20:59:b5:50:a0:44:d7:96:24:85:48:4f:3b:8f:
b2:d3:0e:bf:75:58:be:45:34:06:51:90:c9:b6:36:be:c3:b7:
e4:0e:52:8d:05:3a:ec:f4:3a:4a:2d:56:02:c8:d2:ad:7a:07:
6e:45:f2:6e:d4:98:51:98:cc:ec:ee:73:6a:14:c7:b5:da:19:
c1:9b:57:c1:b1:4b:1f:11:7e:d8:3a:db:08:5d:c4:c6:89:ac:
21:20:14:1b:61:02:39:c9:24:db:ba:ec:a7:c0:d3:21:13:6b:
8e:a1:74:ff:1b:6b:07:03:73:18:0e:ba:e5:7d:55:b5:6b:a2:
b5:e0:58:30:fd:72:0e:9a:f2:8e:6e:96:ad:8c:7e:6e:88:00:
3e:c0:d4:8e:be:13:c2:06:2b:39:6b:54:ab:8d:0c:dd:30:8c:
d7:e5:fd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 21:12:02 2026 by rpki-client