Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier: Sd1NhpLqU9PUqSX1TCKHbLX6oB+NoLv8TYM+3wO7IMo=
Subject key identifier: 07:02:5C:6B:1B:40:B9:66:91:D1:F4:7B:1C:0D:99:5E:0F:35:76:9C
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial: 01A0C2560F508CB304100F358D3CAEDD105C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 05:00:14 +0000
Manifest this update: Mon 21 Sep 2026 05:00:14 +0000
Manifest next update: Tue 22 Sep 2026 05:00:14 +0000
Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: bep4fW9B3btK45jc/Ly3X1Q4H9+xx8bhmLa0/DuAMp4=)
2: 7WrVoWRcLHU2Bsy4ilW5Cx0arVE.roa (hash: /TUreq9BRtjv30vH+llUuJBYCO9XE8y+WYf/yceedfM=)
3: GitVxaMY3Sl8aXlmBwl_1UkJSHk.asa (hash: gFvdXhsjUWkWQyOZfjUWvwTNTmEyIH2hO4nrhMiNZNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:0f:50:8c:b3:04:10:0f:35:8d:3c:ae:dd:10:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Validity
Not Before: Sep 21 05:00:14 2026 GMT
Not After : Sep 22 05:00:14 2026 GMT
Subject: CN=07025c6b1b40b96691d1f47b1c0d995e0f35769c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1f:6c:07:ff:89:13:9d:ef:06:90:e4:0e:32:
d4:c5:3e:c4:17:70:cf:27:55:eb:ba:1b:09:ec:0b:
72:a6:89:29:ba:a1:b1:a0:3e:48:f9:62:3c:f0:17:
3d:72:83:7c:07:f7:61:7a:cd:32:70:b6:3b:34:3b:
40:fc:cb:70:73:34:d2:ee:7a:b0:17:2b:6a:e3:3f:
a2:e9:f9:4f:3a:c6:87:24:0e:d1:a6:4d:e7:82:80:
bc:f9:13:14:00:3b:6a:b8:6f:f4:ec:c0:79:4d:76:
c2:2c:bd:14:e2:3d:50:67:32:d4:ca:18:6e:8d:51:
d3:f0:61:31:d8:ca:71:2c:b8:e7:4b:bf:bc:55:c7:
d4:18:62:d7:d1:65:8e:56:50:ec:16:d6:2b:06:0a:
73:79:0f:1e:63:05:e7:88:9f:2b:13:0f:f7:9c:e5:
19:c2:49:4d:8a:b7:92:44:6a:36:ba:2a:22:01:50:
c3:27:4e:b0:8e:60:4b:be:aa:b1:52:49:d6:76:8d:
d4:6a:24:74:3e:2b:af:c2:c3:f5:72:e0:02:54:49:
16:70:ba:df:d9:13:41:d7:1a:8c:66:10:38:d3:20:
9f:f5:7a:b4:b8:55:9c:2c:6b:0e:5b:e4:59:fe:3a:
81:93:68:57:5b:ca:18:ae:87:3d:09:e1:d3:67:e9:
83:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:02:5C:6B:1B:40:B9:66:91:D1:F4:7B:1C:0D:99:5E:0F:35:76:9C
X509v3 Authority Key Identifier:
keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f7:32:89:22:a1:84:ce:7c:66:e6:c9:01:38:a5:a7:0c:c8:
25:8b:a7:90:e8:f6:c7:a7:df:16:09:ad:4e:2b:ea:3a:32:54:
52:b2:33:af:86:5d:89:0b:b1:60:f8:aa:a1:b4:f1:ef:a1:9f:
96:d1:ec:fc:c5:0b:1e:b6:f6:20:93:12:45:d8:ea:fa:3e:3e:
e5:6a:d8:a2:90:c5:0f:90:96:43:c9:05:af:29:03:48:b6:84:
97:3a:56:38:e5:a0:f3:77:8f:18:6c:33:91:af:72:e5:52:b5:
a5:54:f3:42:05:ba:e0:1e:65:8b:46:91:80:39:b1:a0:35:4a:
34:5d:b8:25:9e:33:ce:4e:a9:5b:13:93:df:4c:a4:80:a2:97:
bb:3a:76:4e:fa:9a:09:eb:99:95:e8:fb:ba:2d:bb:ac:f5:2f:
c9:f1:da:ce:1d:a8:9f:15:f3:d5:0f:fe:af:76:12:1f:05:f5:
8e:37:5e:61:66:9a:b5:e5:a1:a4:d4:95:bc:c1:9f:90:2f:b6:
e9:df:13:db:2b:ad:63:1a:2c:dd:cc:0d:00:f4:d8:8e:95:ca:
b7:d4:78:a1:d0:dd:b0:ef:bf:d2:44:fc:93:20:c8:9a:32:06:
ae:ff:fa:e7:11:32:27:1c:45:a1:46:35:13:a1:8b:76:fe:4b:
a2:8e:bb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:46:40 2026 by rpki-client