Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json)
Hash identifier: sq62vrR8B0PtMIPoP+vDdr3yHSi/MDF30IbHNva2nMw=
Subject key identifier: 11:92:30:2C:70:00:5F:44:22:FF:46:4F:6F:80:0F:66:89:18:5B:FD
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472
Certificate serial: 01A0DB3B9C850241575484CD8D909C72C572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
Manifest number: 1A04
Signing time: Sat 26 Sep 2026 01:01:52 +0000
Manifest this update: Sat 26 Sep 2026 01:01:52 +0000
Manifest next update: Sun 27 Sep 2026 01:01:52 +0000
Files and hashes: 1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: mzvUkCICGT8SAyDjXkUPVZUR2oaAmv/Uvf56e+zwxt4=)
2: nmpthTHAT4WUcq8Q3IMochngGiw.roa (hash: WMNeejxSLtwCCkkRDHZIffdNUGROwkauBCQwzToW+EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:9c:85:02:41:57:54:84:cd:8d:90:9c:72:c5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d422367433765b541a37390a998997b737c46472
Validity
Not Before: Sep 26 01:01:52 2026 GMT
Not After : Sep 27 01:01:52 2026 GMT
Subject: CN=1192302c70005f4422ff464f6f800f6689185bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:23:db:ab:0d:83:b3:e2:a1:a7:09:e7:35:
97:48:5e:79:cd:a1:5b:b0:a2:13:e9:05:dc:b2:d7:
10:0a:c3:85:c6:f9:f2:81:53:88:52:45:fa:94:7d:
d0:62:a5:6c:b3:9d:6f:f8:0a:05:e1:7c:fc:1f:2b:
44:54:3a:46:b5:00:ea:05:eb:98:51:d1:7f:66:7c:
30:fe:cb:05:07:60:23:b8:97:84:6e:b4:60:f1:2d:
80:53:66:62:9b:56:d3:ea:f6:90:37:ad:04:1e:ee:
cc:69:fd:5e:59:de:eb:8f:e6:a7:cb:15:df:54:98:
9c:6f:1d:36:15:db:5b:f2:2b:41:92:81:bd:64:88:
77:db:e2:ac:0f:ac:1d:d0:82:99:88:27:93:fa:36:
ab:ed:6e:b3:e9:cb:56:bf:ec:73:fb:e4:96:08:f2:
25:31:c6:f2:63:bd:e3:d2:8c:18:ab:c3:60:16:ac:
d6:8b:45:fd:ca:5e:94:1c:58:56:54:c0:cd:d2:4f:
f0:3d:6e:24:6b:9c:90:5d:cf:9c:e3:da:d3:36:d9:
e3:55:4f:b4:59:31:0e:08:e7:97:f5:a0:3b:52:d7:
ab:9a:79:fe:4c:e3:01:1b:45:94:2f:d9:6f:92:13:
f5:0f:2e:92:0f:5a:4c:47:83:9c:77:38:d8:c2:40:
5c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:92:30:2C:70:00:5F:44:22:FF:46:4F:6F:80:0F:66:89:18:5B:FD
X509v3 Authority Key Identifier:
keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c5:53:6f:3c:8e:78:67:14:6e:5c:d7:ad:76:b8:91:4d:18:
17:8c:37:7e:b0:93:d6:9c:8a:05:1a:8d:4b:40:79:be:1c:bc:
3c:d8:ba:92:8c:1a:0e:6a:a2:8c:2b:9a:7c:30:4b:d6:4a:60:
4c:2e:1a:44:34:5f:95:ae:11:6a:a0:48:7f:1f:cb:3e:8b:7a:
94:13:1f:04:6c:05:de:a1:6a:6e:42:ed:d0:02:9d:0d:f3:9f:
ee:03:ef:1e:fb:9d:2d:36:13:e3:c8:a2:ac:a5:51:9d:67:45:
ea:f7:f2:b8:58:86:0f:bc:53:39:d1:b7:85:71:5e:6c:ac:45:
93:92:f5:44:18:e2:de:4a:4e:b6:6f:6d:6b:65:d9:25:09:c1:
6b:f0:33:dd:dd:e9:60:6c:32:0d:ca:ca:70:f1:2d:4b:39:66:
a5:9a:ee:4c:ca:dc:a3:c2:f5:ff:76:d7:90:65:cb:28:58:4c:
d3:2e:5a:c8:3d:c3:46:74:00:2f:21:2b:4b:b2:79:58:b3:e8:
9e:fb:d1:59:fb:fb:80:d8:ad:4a:d1:8b:b3:ec:a0:33:9a:59:
41:ff:ba:ad:0a:2a:84:db:cd:e2:3e:bd:ac:fe:ab:6a:f5:86:
e1:82:bf:96:95:4c:cd:18:85:88:24:c4:8f:94:d8:1d:31:b3:
4d:c9:7a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:14:03 2026 by rpki-client