Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: ldQ+gqXLTzN8B+3lB0tZi22GdNq6mqf4WbCZQ7UnBI0=
Subject key identifier: 62:0D:A4:4C:4D:7A:2E:73:63:A6:87:DF:2A:59:3F:EF:D6:45:C5:C2
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 01A0BE425FB9A3E05B4D38B5A91BA0E51341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 0658
Signing time: Sun 20 Sep 2026 10:00:15 +0000
Manifest this update: Sun 20 Sep 2026 10:00:15 +0000
Manifest next update: Mon 21 Sep 2026 10:00:15 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: 23qQ7gpdeyF7t1Cq79gJI5wk4UYt/8cm0T1/V2C0aAw=)
2: 94RSIfdi4Wu_3u_5Fxt7y2P-IZg.roa (hash: KQBiX0qPyskq77ewW4ksZcWfJF9WrYtw2Dq9ll73ZI4=)
3: nKSVCDWOLc_L-u8R349_O7dpE-0.roa (hash: 3mbBV8zfrwDYTj5UVPeGBqMVBLvBI0mE8QTCzzuoTPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:42:5f:b9:a3:e0:5b:4d:38:b5:a9:1b:a0:e5:13:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Sep 20 10:00:15 2026 GMT
Not After : Sep 21 10:00:15 2026 GMT
Subject: CN=620da44c4d7a2e7363a687df2a593fefd645c5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:39:7a:7b:83:a7:08:fa:68:fb:d1:c3:79:d8:
54:79:8f:3d:1d:72:b5:d0:a1:b0:83:e5:0f:d6:c8:
72:49:73:7a:fc:63:60:52:6e:4a:a9:97:2d:5d:1e:
d6:a4:6e:9f:3c:e2:ad:95:ea:97:65:25:e4:95:ba:
be:5d:4d:e0:1a:3d:85:fc:76:15:5a:0d:e8:c2:d8:
61:a1:59:3f:bb:4f:44:20:9f:7e:48:38:76:80:a0:
1a:99:9a:6e:3c:09:87:17:fd:b6:e2:b9:c6:b1:d9:
a0:e2:14:d5:61:9a:50:39:72:93:c5:6a:79:3d:e7:
7b:bd:27:37:15:98:44:16:72:75:1e:75:bc:ce:57:
bd:18:bb:76:39:84:cf:86:f9:0f:c8:26:81:2e:56:
18:3b:95:b2:20:a6:15:bc:bf:98:23:d8:74:b1:c4:
eb:14:07:57:b9:ed:a3:86:fe:18:3a:f7:28:4e:84:
ab:58:1a:a9:09:d4:ac:57:27:20:40:ea:6d:54:41:
8a:85:24:99:0b:4e:3d:c9:b0:ba:82:3a:9c:9a:10:
97:0d:49:3a:96:1a:8e:52:b2:ee:85:f8:0b:9a:b0:
81:9c:c6:f0:3d:2a:fd:3e:f4:a7:fd:08:a3:27:44:
88:a0:0e:2c:ec:cb:3a:a1:52:52:56:31:ef:a2:17:
e5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0D:A4:4C:4D:7A:2E:73:63:A6:87:DF:2A:59:3F:EF:D6:45:C5:C2
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:bc:a7:fd:2c:13:5f:9b:41:01:81:ec:c4:ef:17:5b:06:d4:
c3:7b:40:c1:2b:87:19:99:de:c8:02:a6:03:29:6b:65:79:9f:
1d:d3:58:ee:ec:bd:31:94:f6:ef:99:3a:eb:26:39:1e:dd:32:
7d:d4:e3:d1:6e:5c:40:f3:24:20:0c:9f:73:4a:f3:33:5d:ab:
16:d0:b7:56:2d:f3:0f:af:27:5a:06:08:ea:73:43:04:da:47:
6d:9d:95:d4:f1:a0:20:5a:52:44:a0:aa:f3:95:61:8e:a2:b3:
30:c3:1e:0b:5c:b6:cf:b6:90:16:6e:82:5a:11:7f:f3:86:46:
ef:a0:55:2c:25:00:cf:ac:52:52:f3:24:ea:79:83:e1:41:8c:
81:c7:99:80:ca:05:e4:56:49:16:f5:19:a6:8d:1f:99:24:c3:
21:94:1f:6c:1c:f4:14:7f:f0:6a:09:a8:3f:51:37:a8:8a:30:
1a:51:64:72:20:fc:25:a2:c0:92:aa:49:1d:89:d3:8e:e3:60:
53:d5:ba:48:6c:9f:3c:27:41:9f:2a:a0:38:24:91:1c:be:cc:
a4:17:c1:1f:36:dd:a6:f8:c3:d8:11:60:ce:9c:6c:2b:59:0f:
a3:60:3b:47:23:e9:64:3b:26:15:10:8a:82:10:c9:a9:16:f5:
22:47:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:52:30 2026 by rpki-client