Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
File: 1P97rGRNWVZyLl4YOiL7FFXnVUY.mft (raw, json)
Hash identifier: WZ5tOVSVCfXXa+lRl++/fuFclneA7NXeO26eOKyCxTk=
Subject key identifier: 2C:75:5F:E3:52:36:96:4A:78:1C:79:90:9B:20:0A:49:E4:62:D2:0D
Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Certificate serial: 01A11229890A0BD73094301BB7B466D057DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
Manifest number: 071A
Signing time: Tue 06 Oct 2026 17:01:14 +0000
Manifest this update: Tue 06 Oct 2026 17:01:14 +0000
Manifest next update: Wed 07 Oct 2026 17:01:14 +0000
Files and hashes: 1: 1P97rGRNWVZyLl4YOiL7FFXnVUY.crl (hash: bJ3j5kXBWMpkt5tl1JpfxrAwQXkihB+E0yx37ghV+qw=)
2: nj_5MaQooSjXGiQr1BUruywSxrU.roa (hash: I6PmIQNv3jTKo04VZO+wfcI9Pmj3B2t3GE165A15SFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:29:89:0a:0b:d7:30:94:30:1b:b7:b4:66:d0:57:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Validity
Not Before: Oct 6 17:01:14 2026 GMT
Not After : Oct 7 17:01:14 2026 GMT
Subject: CN=2c755fe35236964a781c79909b200a49e462d20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:09:bd:a9:1b:9a:e0:27:00:54:3f:f3:6e:
c5:31:e5:8d:19:53:5e:6c:14:8d:3d:c7:39:ec:7a:
5b:65:43:87:36:7e:bd:68:ab:9e:29:e8:d7:fe:09:
e5:aa:ea:38:9d:9b:78:a2:2f:64:f8:e6:c9:f8:38:
a9:ee:69:c3:1d:89:0d:50:e6:8b:ab:94:6a:f9:c4:
1e:de:d9:55:ec:3f:cb:66:21:a0:76:93:99:8a:71:
12:c7:31:0b:85:de:b8:16:80:35:ec:ce:3d:39:b7:
d3:43:00:2a:6e:89:63:d3:4c:0b:b3:b3:5c:31:4d:
26:15:d6:5b:78:84:b9:f6:8a:64:6d:a9:04:19:0d:
fa:06:58:88:02:8d:b1:e4:fe:ce:0f:84:57:e4:e5:
0b:02:ef:84:02:35:32:b8:8f:75:bb:91:b0:24:79:
41:e0:d6:c2:2e:82:40:8e:43:a3:8a:c2:62:21:f6:
58:10:74:9c:0a:05:92:3d:b5:c1:3d:d6:28:aa:5b:
8b:4b:8a:a8:3e:1c:84:45:45:d1:34:e2:1e:26:c8:
31:9a:92:16:0c:cd:60:54:57:62:41:b3:96:76:29:
88:7c:13:93:38:94:36:b1:8b:09:8b:62:e2:46:59:
49:7e:5d:ee:cf:5b:48:ef:74:8d:9d:7d:8a:3c:fa:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:75:5F:E3:52:36:96:4A:78:1C:79:90:9B:20:0A:49:E4:62:D2:0D
X509v3 Authority Key Identifier:
keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c1:38:e3:0a:ec:11:97:bc:c5:f0:9c:a4:71:bc:7a:06:26:
a9:73:1c:fb:d3:39:bc:c0:e1:0c:0b:bf:8f:04:24:c8:8d:eb:
29:b9:88:06:30:4f:a1:55:31:f5:18:86:cd:82:bf:ba:a8:76:
f0:bd:6d:61:a9:a6:c4:27:fe:34:c7:0c:14:17:0b:0b:38:80:
7d:89:d9:77:0e:02:bb:88:44:b4:c1:bf:02:e3:70:80:f3:66:
81:4e:2b:e4:15:00:d3:fc:11:8b:65:b2:f0:30:db:77:b0:df:
97:9f:b4:21:b8:b5:b7:7a:31:3a:9c:fb:47:f1:96:68:3c:40:
5c:9b:39:11:ee:87:69:6d:99:d8:2f:a3:5d:ea:0c:59:37:70:
ce:a6:d5:92:1e:e9:56:89:f3:c3:e3:d4:07:93:b0:c6:89:f6:
c0:8a:46:f5:b0:77:a0:c6:7a:62:5a:6a:ff:fd:d8:20:fd:88:
f2:f6:23:cb:15:7c:eb:67:15:d6:e3:c8:f5:5c:9c:3a:2a:0a:
f1:d5:63:2e:4a:9b:8d:55:cc:d8:84:12:f9:44:94:ef:c7:4b:
1a:22:0f:14:ab:40:a1:57:37:e6:59:51:aa:b6:ca:9b:ff:84:
c6:5e:69:d7:04:ed:bf:4c:c3:c1:0a:a2:bb:53:51:d6:69:72:
89:b0:92:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:21:14 2026 by rpki-client