Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: X/Yah5vJhuAkIYMvv4TKnZ5TGC/w3STE74zWPlHtrKU=
Subject key identifier: 99:51:52:00:EE:18:F0:1A:3F:55:BB:B8:46:B4:90:4C:FC:E3:95:2C
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 01A12A68D701498B82F83CAD7C69463782F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 10:01:16 +0000
Manifest this update: Sun 11 Oct 2026 10:01:16 +0000
Manifest next update: Mon 12 Oct 2026 10:01:16 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: CTzg0CWtlZx/zsSs35qUDYMuazaMJ9W67FgDTvpRn4g=)
2: 6tWtabdt5bSrtsaHQ9QBo4ICycQ.roa (hash: HsNpK7hPj6W6BnASMw5ZiyHooADbT1D1N/LoEYfC8k0=)
3: iQJQC_oWujo-15_GL75EM-stwEc.roa (hash: VM81RK3ZU1AzMrmtbRjQdCVVrAt7gS8cQsTq2NJoc+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:68:d7:01:49:8b:82:f8:3c:ad:7c:69:46:37:82:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Oct 11 10:01:16 2026 GMT
Not After : Oct 12 10:01:16 2026 GMT
Subject: CN=99515200ee18f01a3f55bbb846b4904cfce3952c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:5d:66:75:04:4c:e4:3c:01:da:83:9a:5f:
00:f5:42:c9:c9:df:ec:0e:c5:d1:53:c7:d2:be:d0:
a0:29:e2:cf:9a:eb:d9:ab:53:2a:be:1d:d3:8a:9b:
33:de:d0:45:23:73:8a:ec:41:7c:ec:11:e4:41:10:
f0:19:8c:90:b2:cb:7f:01:a9:ce:bd:1f:d9:9f:0e:
2e:6a:67:d1:8c:38:0e:07:50:f7:fa:a3:98:5b:4e:
2e:11:91:60:ca:86:1c:a7:1d:1f:1f:1a:88:77:88:
d3:27:09:bf:dc:a2:cc:fe:60:ae:21:3b:9e:c0:45:
08:a5:08:88:31:03:73:92:c1:c4:70:bc:9f:6c:14:
f9:73:64:45:4d:71:78:89:ce:e7:46:45:ae:d4:35:
88:ea:bb:0d:4e:aa:d6:4b:d9:03:b8:c0:0a:f9:a2:
98:a6:af:b9:50:e8:b9:6a:cb:2c:df:d6:cb:85:b3:
c0:38:2b:0c:82:51:50:71:03:25:63:42:4d:ef:54:
de:96:a0:7d:cc:80:9d:a7:db:0f:ec:84:15:33:ca:
fd:69:fd:7f:f0:89:c9:1c:c0:c7:51:7d:1e:c9:2f:
ad:b6:37:16:92:d6:55:95:87:53:5a:70:c9:f9:c4:
e7:22:a9:32:06:c2:e6:bd:e5:f5:08:d0:27:11:9d:
69:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:51:52:00:EE:18:F0:1A:3F:55:BB:B8:46:B4:90:4C:FC:E3:95:2C
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:20:b4:49:7e:e7:8d:b6:2d:15:fa:77:3a:41:ef:34:df:cc:
12:76:3a:59:e1:94:e5:5a:d1:28:1d:f3:37:f0:11:2c:a4:d9:
10:89:33:96:3d:1f:11:46:6b:72:07:16:57:4b:e8:71:ea:52:
f6:7a:5c:40:0c:8c:92:a8:b8:51:79:74:55:4c:56:6c:f2:cd:
61:7b:68:c3:dd:85:41:fd:7b:d2:ac:bf:5f:6d:d7:e3:19:46:
84:4e:f8:5e:98:63:55:aa:5c:01:69:99:ca:09:67:98:bb:af:
71:8a:bc:17:e6:4e:80:82:b3:ed:30:2f:d8:64:2e:74:1a:5e:
43:e1:8b:52:3f:2a:59:3c:62:11:ce:27:f3:ac:1f:a3:f7:2c:
07:3b:c9:c3:12:98:24:6b:39:56:93:25:62:9a:e0:4f:e8:14:
54:05:0a:0d:f9:7c:4f:81:3a:ca:e3:8f:00:35:79:ef:2a:23:
5d:3b:70:16:83:b9:72:0c:1b:1d:92:87:3d:4c:b6:e8:7b:53:
a8:31:00:53:f1:66:5e:d8:fc:01:81:2d:67:33:ff:6b:92:5a:
aa:1a:95:20:dc:3b:80:2a:56:3e:20:62:bd:00:35:2d:75:90:
08:9f:e9:a2:b1:d4:39:0e:ac:86:a9:2a:4f:bd:25:89:3e:0b:
71:7d:4e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:49:19 2026 by rpki-client