Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier: WRcZ+XaieY/Xr+nWxGpW5xZ7UR5Lknj1mMb8ldDpon8=
Subject key identifier: CD:E5:E4:F6:DC:C3:AE:D3:AD:6E:C7:03:7C:42:71:10:4C:1C:64:82
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer: /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial: 01A0C17B87A34BD68D646D53FCE115ED7EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 01:01:33 +0000
Manifest this update: Mon 21 Sep 2026 01:01:33 +0000
Manifest next update: Tue 22 Sep 2026 01:01:33 +0000
Files and hashes: 1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: LH3GFUTrL1DwXTblfOQbjV/cXcH2GDvUnCSwoFCdb4I=)
2: gR91LIxxnbU08v57AUEvFf010vs.roa (hash: SbAN6voQ5c1qkWMDRn5E0Sl0vR5PwgTVIGlVOQ/CsHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7b:87:a3:4b:d6:8d:64:6d:53:fc:e1:15:ed:7e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Validity
Not Before: Sep 21 01:01:33 2026 GMT
Not After : Sep 22 01:01:33 2026 GMT
Subject: CN=cde5e4f6dcc3aed3ad6ec7037c4271104c1c6482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:40:e4:f6:c3:4a:f0:90:b3:36:e9:a5:a5:30:
9b:6c:90:0a:e1:f9:ae:82:f4:77:0f:98:b6:df:b7:
41:5d:64:1a:b7:d4:05:71:20:35:d4:47:5a:69:1e:
5e:1f:8f:40:2f:b6:8a:f3:76:64:76:b8:b8:d0:7b:
00:8e:0e:03:08:6a:ce:f6:df:c1:05:5d:eb:66:66:
85:21:41:4b:5e:0a:c4:a4:c6:27:5a:5b:ca:47:fd:
a0:f7:39:37:6a:61:3b:ef:e2:aa:56:2f:cc:3f:7f:
22:7e:54:d4:08:64:0a:68:a0:ee:64:fd:9d:79:3f:
1b:eb:c9:d5:02:56:ec:49:91:3b:bc:2a:b8:44:d6:
3e:80:7f:b3:0a:e8:3a:10:19:84:be:d8:03:92:eb:
dc:63:81:2d:24:c5:44:00:b4:aa:91:4f:21:f1:53:
39:4d:54:fa:cf:6e:a0:85:8a:75:63:54:75:7b:6c:
b5:99:4e:c5:ee:a1:02:ad:16:1f:ff:e2:ab:45:7b:
95:61:cd:68:e7:61:30:a0:4d:aa:05:88:34:37:16:
83:bd:25:8a:32:5e:4a:ad:54:c0:64:3a:80:88:57:
00:00:04:df:99:13:26:66:93:f6:2a:e0:ee:0a:49:
d9:a1:74:82:bb:01:4c:d5:f5:6f:2c:28:86:8f:d6:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E5:E4:F6:DC:C3:AE:D3:AD:6E:C7:03:7C:42:71:10:4C:1C:64:82
X509v3 Authority Key Identifier:
keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3b:ad:1f:6e:4e:fb:0e:90:52:f3:48:93:90:99:51:e7:04:
f5:37:f2:a2:a3:a4:d1:d3:26:6a:46:ae:7c:81:cf:ca:99:e1:
42:9b:28:76:64:01:1c:b8:2e:3c:d5:a4:be:c5:29:4d:13:62:
c8:e6:e3:5c:84:20:be:ca:07:51:4a:05:6d:cf:9b:a3:03:33:
0c:87:b4:1a:ed:76:e6:bb:8b:94:d2:47:d8:86:67:2c:cf:88:
bf:74:78:be:bf:cb:e7:e6:e6:f1:b8:46:e1:e6:06:95:9c:df:
99:20:8b:54:8d:33:bb:5d:76:99:bd:e4:1e:57:c2:8b:be:ff:
0d:9b:6a:f3:de:f9:da:96:8e:a5:b0:35:80:52:82:8e:c7:db:
44:06:86:35:e0:9f:3f:a8:aa:c9:24:7a:17:98:b7:0d:72:21:
f9:30:ea:9d:8e:2e:f5:49:ca:f4:cf:95:80:e0:f5:c2:45:19:
a7:1b:4c:23:4c:95:2d:68:69:e5:ad:c3:87:8f:16:c6:25:f5:
50:50:cd:8f:6f:85:12:d7:11:4b:46:a4:82:66:c3:d4:9f:60:
6f:a9:47:dd:ee:cc:ea:7e:54:cd:c7:37:c8:db:ab:c6:ac:86:
fb:cf:b8:68:47:51:87:9f:0e:58:18:ef:3f:7b:0a:7f:29:90:
54:e0:9f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:21:41 2026 by rpki-client