Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: 33nHw/++6YCNRjWac2gagaAMvoio0XvamemR9CgNRsk=
Subject key identifier: 32:B6:AF:C7:8D:5D:18:CF:C0:0F:5C:56:BB:2C:0C:B1:22:08:D7:8E
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 01A0BDD50F38913151477D3337C6C0FFA1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 0A43
Signing time: Sun 20 Sep 2026 08:00:51 +0000
Manifest this update: Sun 20 Sep 2026 08:00:51 +0000
Manifest next update: Mon 21 Sep 2026 08:00:51 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: GDDV4JeSbrEqT45/2SL2sZEHcqY9000hl6LKpOu0S7o=)
2: rMIMTjbHaNV7xR9gPtw0A_pkuLU.roa (hash: NFH0+DidyU00k9B3v8wVAxHBrFD7dy/UWv2YYeeqFAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d5:0f:38:91:31:51:47:7d:33:37:c6:c0:ff:a1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Sep 20 08:00:51 2026 GMT
Not After : Sep 21 08:00:51 2026 GMT
Subject: CN=32b6afc78d5d18cfc00f5c56bb2c0cb12208d78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:1b:06:80:40:57:c6:87:25:f0:0e:23:59:
a6:8b:60:35:8f:38:13:93:b6:4f:ff:36:e3:ea:d9:
f4:3e:ed:b9:ba:f2:c2:f3:8c:66:29:d7:40:82:7e:
ba:18:80:d2:db:ce:8c:8d:91:47:93:44:fb:b4:7b:
ad:d0:6e:93:98:22:9f:f1:06:31:a2:86:59:a8:f8:
14:6c:ea:47:d3:71:4e:44:46:6f:ad:2a:cb:f8:2f:
e1:02:46:6b:04:43:35:44:43:63:db:f2:3f:90:62:
6d:9b:21:c1:68:e1:bb:50:6a:e3:0f:66:86:e0:42:
3c:9b:2a:08:25:5d:89:0e:21:5d:0e:bc:4a:49:6d:
20:84:50:19:40:be:62:59:b1:c3:77:ae:4e:34:8d:
c6:04:40:57:99:77:b4:e6:01:6a:a9:3a:9f:14:9c:
00:19:19:2f:fa:51:44:53:36:67:65:0f:14:9f:78:
64:da:36:cf:48:73:ba:3c:67:84:83:e1:50:8d:1d:
8e:af:5a:08:c8:b6:e4:be:91:10:4f:2c:08:3c:ce:
fc:39:49:f6:cc:5b:5c:a3:76:b6:34:36:89:e6:2f:
f3:54:7a:f6:8f:ca:a0:b9:5c:06:2b:9f:35:c9:bf:
ca:3a:a9:30:ae:84:21:ca:56:00:c2:59:6f:34:bd:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B6:AF:C7:8D:5D:18:CF:C0:0F:5C:56:BB:2C:0C:B1:22:08:D7:8E
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:23:fe:51:a4:d4:d7:ae:9d:8a:77:56:ab:75:90:3b:63:6c:
67:55:92:9b:06:4e:df:52:7d:31:6e:97:1f:99:8b:52:04:e7:
11:ec:b7:51:6a:6d:49:ef:89:ff:d0:bd:0f:9c:d7:ff:df:58:
1c:7c:f2:1c:3f:57:33:bd:ec:5d:0a:57:f2:97:ac:da:e8:45:
2d:12:6a:c3:47:72:bb:91:ad:e2:e0:14:ca:a2:13:62:3f:34:
34:ba:3e:cd:63:29:af:d2:09:4c:64:f6:40:79:e4:79:33:96:
cf:94:9c:1a:69:2c:aa:8e:db:ee:64:4b:40:b7:2e:f8:32:66:
db:dd:c1:49:56:8c:73:99:5e:f4:37:5b:98:70:eb:04:be:b4:
1f:d1:90:e6:ee:15:1c:77:f4:dd:80:8b:a6:da:b6:df:4f:72:
68:83:6b:ed:b9:76:09:9e:2d:eb:5d:c1:01:b2:97:90:8d:67:
ea:5f:96:f7:7e:2f:c8:c1:bc:88:97:a1:d3:c6:3d:f3:72:75:
eb:ce:7c:d6:83:35:14:76:00:49:4b:90:85:28:5e:4e:61:97:
d5:cb:86:2c:3f:4c:dc:7e:39:f9:5a:5a:46:c7:f2:76:d9:a1:
dd:b3:0c:03:21:23:9f:cc:c5:5a:7e:8d:9c:ba:c7:f8:72:17:
5d:97:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:21:11 2026 by rpki-client