Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
File: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json)
Hash identifier: rLF5Q5RZ0u2hjXrNk0IxGBPNtGWMJYp035GUOyHpvtQ=
Subject key identifier: 27:9B:80:AF:F9:0B:1C:E4:DA:B2:FD:CC:C7:6E:D4:EA:14:EB:BF:C1
Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471
Certificate serial: 01A0E777B3909D83B81C2A33B0DEF9557671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
Manifest number: 1A78
Signing time: Mon 28 Sep 2026 10:02:56 +0000
Manifest this update: Mon 28 Sep 2026 10:02:56 +0000
Manifest next update: Tue 29 Sep 2026 10:02:56 +0000
Files and hashes: 1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: DHj3XVeI/qHEoyZwlHvQi3qudq1zoB5RNClEJOZlbXs=)
2: Xt7SYxDoMD7f1JMsQqo2iBPwXMs.roa (hash: WGtYGe9kCICp8bvBpPPbaske1TWvTE4WqSyYb2snIwU=)
3: cAmf4fFwxBOF5X-O_EChDpWAvt8.roa (hash: S1GNYBesOR3SinnMOoqnXekNsmRmZx3vpxOqHl53nP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 10:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:77:b3:90:9d:83:b8:1c:2a:33:b0:de:f9:55:76:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471
Validity
Not Before: Sep 28 10:02:56 2026 GMT
Not After : Sep 29 10:02:56 2026 GMT
Subject: CN=279b80aff90b1ce4dab2fdccc76ed4ea14ebbfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:f2:27:e6:5a:d1:e7:3b:9b:a3:5a:bd:10:
45:cf:55:e9:1f:91:b6:17:71:9d:1a:95:8c:9e:d6:
8c:ce:38:a9:f7:1d:c2:a6:c0:0b:2c:fc:39:ba:e5:
eb:3e:b8:5b:c4:0d:4e:2d:7f:7b:bc:3d:dd:90:79:
e5:9e:fe:d2:73:43:15:e7:c4:c3:53:95:6a:65:f2:
6d:e2:10:a7:be:c3:c1:ba:cd:8a:b6:8b:ad:70:46:
ae:98:73:2a:a0:4b:09:50:a3:18:14:0d:47:73:32:
be:de:ab:33:fc:dc:60:c8:70:dd:2c:73:9f:71:88:
32:68:8e:a4:64:8a:76:13:a0:43:3e:97:7d:72:6d:
fe:51:c0:ab:6b:a5:c6:24:07:66:73:55:67:73:81:
78:a7:fd:a6:0e:f3:2c:8b:fd:d8:96:a2:8c:1c:cf:
f6:16:5d:e6:6b:38:59:df:51:cd:cc:c0:f7:cb:be:
de:5b:cd:d3:0e:f7:36:a7:97:86:25:80:48:ee:f7:
21:48:56:b8:d3:f5:1c:04:c2:0c:38:0d:6f:b1:f9:
86:fb:b7:dc:25:82:e6:b6:a7:91:72:53:7b:22:f8:
8e:46:a1:bf:e8:68:8b:e0:7e:ae:3b:fa:6d:4b:cd:
6b:5a:57:45:3f:c9:50:99:ef:08:86:6e:7a:81:d7:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9B:80:AF:F9:0B:1C:E4:DA:B2:FD:CC:C7:6E:D4:EA:14:EB:BF:C1
X509v3 Authority Key Identifier:
keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:0d:e5:50:89:bf:03:61:0d:30:3a:e2:51:ef:de:2c:70:60:
2a:eb:e5:85:aa:29:46:23:84:54:41:0e:fb:f2:f6:0c:09:a4:
2d:89:a4:6f:96:b0:c4:82:fd:71:e7:31:36:2e:e9:fc:50:b1:
16:f4:2a:6f:f8:9d:28:94:f7:df:99:4e:ec:bc:38:da:1b:02:
65:65:7f:a4:ed:8c:a5:07:3e:88:99:9f:6c:d3:b6:77:b6:1e:
88:a1:c3:9a:01:63:1b:ea:b5:74:2c:0d:46:4a:7f:05:9c:6e:
20:18:9c:2b:79:bf:81:7a:b3:41:5d:2b:00:55:c1:4f:33:4c:
3e:ef:02:f9:ce:6d:92:48:3d:34:fa:25:87:e1:4d:f3:cd:c3:
08:58:78:c3:83:94:ac:98:de:11:c0:5b:46:c4:7f:c5:b0:42:
94:00:bb:ae:ef:21:e3:f5:28:e4:4b:94:29:93:b1:d3:a1:55:
53:58:1f:8c:13:2b:cc:26:a0:87:d4:14:50:23:7d:e1:0f:d2:
f9:e4:86:4d:96:c3:23:34:57:6f:d0:3f:bc:4b:c5:e6:65:cd:
58:77:a2:1d:2f:46:21:7f:e1:6d:7a:68:20:09:7a:39:df:08:
82:b7:f0:ad:7f:c7:ff:ae:14:82:68:df:8d:f0:a0:78:c4:62:
81:36:6d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:57:11 2026 by rpki-client