Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
File: 1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json)
Hash identifier: mR9rVYFjThiNgGWNFqu3TUVt9/oOR1QpV7NHnXUhd4s=
Subject key identifier: BB:68:66:69:39:22:4C:22:D6:BD:C5:01:79:35:3B:F3:FB:47:64:0B
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial: 01A0C21FE011A015A0EE3D18DF2F6A78A7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
Manifest number: 1938
Signing time: Mon 21 Sep 2026 04:01:03 +0000
Manifest this update: Mon 21 Sep 2026 04:01:03 +0000
Manifest next update: Tue 22 Sep 2026 04:01:03 +0000
Files and hashes: 1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: UTojlDz9joJ8SqOinHaZjjrBmRTJl3wMsa+WZKrlY1s=)
2: sDWM_DhpRyRWUD2ROyiBU9tXXyU.roa (hash: Jens7OiCrejocf06H1XaSPttnLpxxGplzlx3u03vPxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:e0:11:a0:15:a0:ee:3d:18:df:2f:6a:78:a7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Validity
Not Before: Sep 21 04:01:03 2026 GMT
Not After : Sep 22 04:01:03 2026 GMT
Subject: CN=bb68666939224c22d6bdc50179353bf3fb47640b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c0:b7:2b:16:31:98:01:1a:c5:e1:9f:b4:3d:
0d:93:97:02:f1:e9:00:6f:e8:ba:24:06:9c:ad:97:
e9:29:82:5e:36:57:33:27:56:c4:c9:54:40:22:3d:
f5:96:7b:85:e7:1b:6c:d0:f6:51:d7:8b:85:e1:b1:
9a:d0:22:e2:89:c4:72:f9:36:86:68:94:89:6d:cc:
33:fa:f5:42:de:b1:5b:bf:ec:89:be:9b:66:95:c8:
31:de:ab:de:ad:42:c5:0d:36:47:48:65:86:db:b9:
10:3d:90:2f:b9:c1:1d:95:38:45:96:e9:26:31:e4:
67:35:9d:c7:50:16:7d:18:7a:b6:95:11:bc:90:31:
5d:fb:e4:5a:4c:78:16:73:19:d4:5b:a2:b3:4a:53:
6d:e9:c3:9a:79:1e:dd:e0:9f:20:93:62:6b:50:66:
d3:ee:9a:e2:3d:64:bf:16:dd:ab:a9:fa:31:7e:57:
6f:0d:30:fb:98:2d:b4:8d:f9:a0:4f:77:18:e6:b9:
26:9b:5e:a8:3d:0e:41:7d:bb:c8:eb:6e:f8:5f:a0:
86:8b:b8:5d:23:b7:cc:7b:40:e2:7d:9d:3f:49:27:
76:23:e2:3b:95:b2:30:84:b2:29:14:7d:9a:71:cb:
fc:aa:d1:d0:11:a9:51:86:8c:d5:76:20:b9:a6:5f:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:68:66:69:39:22:4C:22:D6:BD:C5:01:79:35:3B:F3:FB:47:64:0B
X509v3 Authority Key Identifier:
keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:86:7a:93:10:21:04:c8:dd:73:d5:fc:ad:d3:20:27:bc:d8:
d2:3d:a1:e7:2a:52:ce:e3:37:5c:84:20:69:ca:6d:31:8a:e7:
e3:19:df:83:f2:0f:bd:ba:c7:3d:1a:5d:74:e2:2d:0d:52:95:
c5:7e:26:26:2b:e5:93:62:81:8f:cc:48:85:ea:84:cf:86:2c:
0f:a3:d6:dc:af:11:59:a4:0c:a2:b3:b8:54:4b:94:b3:ec:c5:
14:30:4a:e4:1d:0a:5a:c4:f3:c0:83:6d:5d:d0:db:23:be:9b:
9a:a6:b7:15:fd:aa:64:49:42:3c:21:97:06:d5:9c:c3:58:46:
fd:ae:36:cf:2c:79:8c:a7:ea:3d:8f:3b:5c:d3:89:c7:48:26:
c5:9c:0a:59:e3:01:8d:1f:e7:dc:14:8e:a8:25:09:ff:d5:8e:
de:b0:80:d7:ba:31:ba:3d:04:ab:7e:61:b8:18:3a:82:ce:c6:
29:8a:1b:9c:38:38:b6:3f:0e:34:28:99:6e:48:13:f8:3e:c7:
1a:a1:5c:cb:67:bd:95:b0:c8:5f:ff:5f:99:56:fa:25:7f:e1:
7f:81:3f:85:72:ca:ab:8e:fc:ea:01:da:09:c0:2a:f1:90:1b:
c7:33:f3:c3:bb:1e:59:a0:82:59:08:7a:20:32:69:cd:fc:1e:
3e:4b:bd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:29:05 2026 by rpki-client