Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
File: 1fPMerDTZIuMvnYlNTOnFLoAnAM.mft (raw, json)
Hash identifier: vNyI/n4kMJm5Gsk38co22t369uBW8qpVu/IZckTxGpo=
Subject key identifier: 24:A3:AB:D0:A8:E7:50:14:40:62:B1:E7:C4:9A:02:C7:D4:9E:0A:86
Authority key identifier: D5:F3:CC:7A:B0:D3:64:8B:8C:BE:76:25:35:33:A7:14:BA:00:9C:03
Certificate issuer: /CN=d5f3cc7ab0d3648b8cbe76253533a714ba009c03
Certificate serial: 01A0CE23BEDBAAAE481EA46496BD56BD892D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:00:44 +0000
Manifest this update: Wed 23 Sep 2026 12:00:44 +0000
Manifest next update: Thu 24 Sep 2026 12:00:44 +0000
Files and hashes: 1: 1fPMerDTZIuMvnYlNTOnFLoAnAM.crl (hash: WptLK5TZpUuYSazjkONtdE++fRurwGoIXxEZvOd8DIc=)
2: BVJvwz2lh6qW2nCUQKTYIFcAKjQ.roa (hash: kaLfha+ZH+y5bWDO7gX0LkZS212RgAQ6Anv4ur63M5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:be:db:aa:ae:48:1e:a4:64:96:bd:56:bd:89:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f3cc7ab0d3648b8cbe76253533a714ba009c03
Validity
Not Before: Sep 23 12:00:44 2026 GMT
Not After : Sep 24 12:00:44 2026 GMT
Subject: CN=24a3abd0a8e750144062b1e7c49a02c7d49e0a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:91:b4:98:c7:d4:63:7b:84:e0:a2:8e:0b:
bf:f1:10:76:98:f9:da:93:c2:66:f2:0b:7d:c7:bb:
83:c2:bf:4f:3e:f5:2e:6c:a3:6b:67:64:bf:50:9b:
ef:ac:3e:54:1c:46:e0:93:1a:d6:bf:ff:ea:d7:4c:
74:73:7f:1f:95:96:3b:c4:21:a8:c1:bd:66:06:29:
cf:d2:10:99:41:2a:3d:7c:94:96:d2:e8:0d:7e:a7:
05:aa:e5:0f:2b:dd:04:f5:c0:c6:99:c7:25:e9:2e:
9f:da:99:84:a1:11:66:e6:23:75:3f:50:90:70:a6:
ad:f1:18:26:ee:d9:1a:51:eb:0e:7b:d3:6b:15:ca:
33:f8:73:35:1d:d4:e7:a5:a7:59:66:1e:4b:dd:01:
80:31:6e:84:00:c6:26:28:56:07:6d:b3:a7:b5:63:
92:52:bb:52:93:12:a4:c5:4e:c7:3c:c4:d4:ba:3c:
91:2b:23:2e:8d:36:35:b4:ed:01:68:14:73:d6:36:
cc:97:e4:ed:f9:fb:3d:3a:46:14:54:ab:21:09:d5:
aa:d6:34:62:0a:29:5f:14:e7:29:59:1e:02:7c:cd:
6f:3c:79:9e:9d:fe:4a:0d:5c:8d:7a:29:57:4a:d5:
46:9c:89:5d:31:e1:dd:13:0a:5f:52:ba:3e:49:56:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A3:AB:D0:A8:E7:50:14:40:62:B1:E7:C4:9A:02:C7:D4:9E:0A:86
X509v3 Authority Key Identifier:
keyid:D5:F3:CC:7A:B0:D3:64:8B:8C:BE:76:25:35:33:A7:14:BA:00:9C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:54:33:58:eb:84:18:4c:39:40:51:69:93:c7:31:6e:c3:cd:
73:4d:98:0a:b4:af:93:9a:cc:ab:45:13:4b:20:01:2f:f1:5b:
dc:8a:9c:5b:d9:66:11:f1:c5:d3:a4:1d:c5:d8:ef:a5:f0:1d:
f9:ec:60:81:77:4f:95:f7:f7:3c:21:74:06:7a:a9:ca:3f:cf:
6e:95:dc:df:ff:06:f0:7c:fb:fb:81:2b:f2:d5:c1:25:a6:9f:
35:e5:79:ec:34:ec:7d:16:15:18:6f:10:d4:5c:21:2b:9e:f8:
cd:76:46:4e:04:1f:8f:3f:41:39:4a:96:b2:e8:f8:5a:bc:ef:
2f:ff:0b:73:df:86:70:55:c2:92:65:68:70:af:61:21:19:e6:
c3:01:ed:f1:0a:ed:d8:d7:d9:b6:51:eb:d4:1a:54:87:3a:b5:
24:cd:ee:61:a0:93:7e:11:c3:62:94:34:67:40:a4:f6:70:de:
45:f9:65:82:ef:56:5e:2c:6d:44:3e:c8:ab:24:c9:b7:29:4a:
75:1b:7b:74:31:cc:17:b4:8c:b1:84:9c:46:dc:53:3a:18:17:
b9:b0:34:15:b5:04:f6:fe:85:4e:37:25:f6:75:9b:7e:00:03:
c6:16:a9:eb:87:06:21:7b:f9:fb:9a:ae:3e:6a:29:56:d5:38:
78:3d:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:20:28 2026 by rpki-client