Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: drUjJpTa37LFtdqoA9KGzdx55XlKnLBOijF07SqYTx8=
Subject key identifier: 53:C6:7E:13:8B:3A:57:CE:4E:CC:E7:45:C8:FA:06:B4:5A:27:18:E6
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 01A0C58E277EB4602A69783790D6484BB2E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 17A4
Signing time: Mon 21 Sep 2026 20:00:22 +0000
Manifest this update: Mon 21 Sep 2026 20:00:22 +0000
Manifest next update: Tue 22 Sep 2026 20:00:22 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: iFqwg7UKMyLhkEkIXQX3fmNU/2qmNzpo5s0py0Ape/Q=)
2: 2ztr66xhOcOr2Kq6L1D4fEoRjwo.roa (hash: amz+yTvX9x7rzj0FFfB2aTlKhOEfzIXqA7tCgNwl8L8=)
3: ypNsMEiA0eytbHpILkkUcrUHiuI.asa (hash: MB36B+UQExuZ+YHIlLlB3WxM9/xtf1qsLE+t7spjDH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:27:7e:b4:60:2a:69:78:37:90:d6:48:4b:b2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Sep 21 20:00:22 2026 GMT
Not After : Sep 22 20:00:22 2026 GMT
Subject: CN=53c67e138b3a57ce4ecce745c8fa06b45a2718e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:80:ec:a2:85:95:bd:51:43:6f:d6:85:3f:
ad:2c:81:fa:30:86:33:9a:1c:87:58:2d:d0:77:2f:
8a:f1:b9:5e:7a:ff:9b:56:85:28:1d:81:8d:57:35:
7d:cf:04:87:d9:ad:3e:78:8c:3e:80:70:6a:f3:b6:
61:5b:65:63:12:5f:a9:fd:35:96:e6:5c:bd:7d:eb:
f5:e4:6f:71:a2:9a:d1:ea:7b:12:f8:b5:6c:1f:a3:
d8:24:6c:5d:e0:ce:61:23:ee:d2:af:b2:fc:e6:52:
f2:a8:61:76:8c:0e:a9:61:a9:45:db:b7:f4:3c:8a:
8d:d5:4a:b2:2b:11:bd:ab:fb:1e:f2:87:8a:d5:d3:
f4:08:17:77:ec:4b:73:53:d3:cc:e2:4e:70:51:33:
d0:1f:9f:12:73:6d:eb:f7:3c:12:f9:82:fd:3c:bc:
c5:91:df:dc:ea:41:68:a2:f7:91:1a:01:43:00:f1:
d0:c3:1e:c9:5a:4d:8c:ce:7f:dc:87:9f:bb:17:38:
59:f2:99:92:eb:95:65:6a:23:d2:6e:e0:44:51:fa:
df:a9:81:22:c0:d9:29:15:7a:4e:af:05:42:a3:ba:
e0:77:95:b6:9e:ad:13:e9:eb:7f:29:c2:cc:83:ad:
3c:6d:55:0a:a8:ab:b8:0a:2c:f0:37:60:13:ee:0c:
b5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C6:7E:13:8B:3A:57:CE:4E:CC:E7:45:C8:FA:06:B4:5A:27:18:E6
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ea:cd:f2:4e:78:ab:80:41:52:83:d8:3b:bb:d5:b7:a6:37:
46:f1:61:90:85:b6:7b:6b:c5:72:ec:40:23:8b:57:7a:3b:b8:
58:57:d4:59:cf:2b:f0:d1:30:eb:73:2e:25:e8:9c:51:8e:64:
a3:d4:76:b2:1d:7b:59:e3:0e:f7:76:a2:a2:42:b3:d1:4c:0a:
6c:4c:de:ad:cf:8c:95:ed:fc:cd:48:ad:8b:09:a2:c0:72:ee:
af:a1:f2:0d:da:52:7c:b9:58:e6:50:56:b3:b8:71:e1:c9:a4:
54:30:1f:af:3a:9f:06:45:93:bf:c7:85:da:87:86:7c:2f:58:
88:6e:3c:cb:f9:69:bf:d5:1b:a1:e1:fe:82:8d:47:b7:d2:e1:
34:3e:4f:9f:a8:2b:0f:a9:fa:02:d6:d8:f9:a5:68:30:07:9b:
4b:42:bb:3a:4c:41:d3:e3:05:68:fe:ad:41:a9:13:da:cc:e3:
7f:de:0a:cd:0d:d3:1e:e1:91:d7:9f:53:d2:26:d7:17:4d:eb:
fc:52:ce:2b:5b:fc:1f:e1:79:99:ed:7d:ab:12:58:6c:cf:5a:
ef:9f:78:90:77:4b:cc:20:43:b3:ad:d8:d4:75:05:88:84:73:
04:d7:60:74:5c:31:24:56:53:bf:74:a8:3a:f2:a1:e4:ab:16:
28:b4:40:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:21:18 2026 by rpki-client