Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: S6R1HISWKhGSWLemGUJtwkik0+GsC1GOnlXmqfEhSxE=
Subject key identifier: DA:F0:01:B8:2D:BE:77:2E:BF:B9:44:77:30:CA:AB:E3:54:13:A5:FB
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 01A0C746AA1E189AB86E758542D0BD99F056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 04:01:32 +0000
Manifest this update: Tue 22 Sep 2026 04:01:32 +0000
Manifest next update: Wed 23 Sep 2026 04:01:32 +0000
Files and hashes: 1: 4cocr0q1XWVnObqRRasdUZTa22c.roa (hash: 86THFSFQTNeIPxjfawMpIZH9JHPT6I8T1KqMTV+dRZo=)
2: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: E6huI772dP5xVjBLbx5qwqxRaZQBHxcK7gmG7ujd7w4=)
3: iwkzEw-xYne2_moODPhsHHvfJEE.roa (hash: e85JS9mOgxQCslqs7Lpvehm/GeHrCKP2QV8UeWsf++I=)
4: lPb2QmWiKPxzYTHlUwItF0AKSL0.roa (hash: t0HsgpiNiYSsplZbvt5snbpm+tzmqAxHOzqpSQ+fk5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:aa:1e:18:9a:b8:6e:75:85:42:d0:bd:99:f0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Sep 22 04:01:32 2026 GMT
Not After : Sep 23 04:01:32 2026 GMT
Subject: CN=daf001b82dbe772ebfb9447730caabe35413a5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:9d:a7:72:32:37:ae:7a:16:f7:23:79:94:
0e:37:61:05:9d:49:15:8c:0e:4f:a6:6e:d2:52:b0:
ae:38:24:25:9f:6d:c8:62:36:15:23:dd:3a:84:17:
b6:3f:ba:3d:3d:57:97:28:b2:9a:0d:ec:63:ee:a9:
e6:74:28:0c:30:99:e3:f7:1f:c0:08:26:81:ab:91:
2c:d4:28:1b:32:62:b3:91:e6:be:f8:bc:38:bd:6f:
62:a7:56:d5:4b:ce:71:cb:e1:be:d6:b1:25:1b:12:
bf:f7:82:bb:5d:e2:8b:ec:31:f2:c8:e9:57:fd:cf:
8f:c3:36:be:30:24:bb:00:dc:a7:6e:3c:f3:11:b4:
b3:60:c2:ab:69:5c:ef:d0:54:35:77:33:43:04:31:
92:3b:49:de:77:73:3e:dc:36:6a:31:dc:33:b6:81:
1f:99:9c:10:b7:e0:ee:71:8a:55:20:a4:4d:b1:d0:
79:e7:5d:57:0e:0c:8d:9e:25:5d:5d:25:79:45:07:
f5:31:42:95:df:dd:d7:d2:fd:ed:88:ba:3f:e5:e8:
12:64:47:6f:f8:3e:56:a8:2f:ef:b4:64:72:00:fb:
21:fb:37:33:29:3d:96:24:3f:e2:7f:29:7b:ec:0b:
4c:a5:c0:fe:76:8a:5a:b3:6a:6b:44:72:cc:a6:7a:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F0:01:B8:2D:BE:77:2E:BF:B9:44:77:30:CA:AB:E3:54:13:A5:FB
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:03:81:f3:87:aa:07:26:e3:5c:69:62:33:0b:b5:81:fa:31:
68:7b:04:d1:4b:f7:2e:2d:f9:6a:6a:32:17:8e:3a:87:0f:bb:
12:a9:20:d6:93:be:1e:6b:92:c4:8d:7f:55:70:36:af:11:02:
1e:e4:f6:c6:04:c8:e9:e9:c7:86:d7:47:26:a1:36:51:3b:72:
53:b0:a9:66:53:eb:fd:4e:6b:7f:31:19:ac:ef:5a:ba:a3:1d:
7c:68:c7:45:0d:35:ec:6e:51:f9:d4:2b:21:ee:d1:87:ac:37:
35:33:f9:c8:ef:4b:ba:b1:ca:47:9d:64:7b:f0:e5:16:3f:71:
3c:5b:b6:2b:64:d5:a4:3f:d7:be:b7:be:1f:dc:d1:c1:7a:6a:
6e:e2:5c:fa:12:26:a9:05:89:38:5d:b3:37:1f:6e:e9:23:3f:
b7:6f:c1:b1:c7:05:17:c3:c6:9f:8c:7e:de:8c:24:84:e8:e2:
6f:59:1b:1d:02:44:a2:a1:b5:d4:8b:b7:44:87:ac:4c:eb:3d:
38:43:78:41:87:17:f6:de:2e:10:a8:28:de:ac:66:84:de:fd:
e8:f0:98:b5:97:34:bd:8c:f4:bb:5c:ca:b1:b8:8d:7b:e2:65:
28:c8:09:d8:f8:b0:23:f8:da:9b:7c:55:6f:7d:00:d4:04:9a:
38:a5:8f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:55:32 2026 by rpki-client