Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: QOMm527mGIEgOIAMgWZDSaTvDhxzYmGIxAFdMKsCIrs=
Subject key identifier: 0D:91:AF:D3:EE:31:C2:5E:F2:D5:13:81:CC:E8:7D:61:C0:D1:D4:47
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 01A0C4B2FC22F6D271F99545FCDA8C174200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 09EC
Signing time: Mon 21 Sep 2026 16:00:58 +0000
Manifest this update: Mon 21 Sep 2026 16:00:58 +0000
Manifest next update: Tue 22 Sep 2026 16:00:58 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: x1of/AY1s/b0o2GBwmzdOeD5rkl0YEmq53q7KtxABUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:fc:22:f6:d2:71:f9:95:45:fc:da:8c:17:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: Sep 21 16:00:58 2026 GMT
Not After : Sep 22 16:00:58 2026 GMT
Subject: CN=0d91afd3ee31c25ef2d51381cce87d61c0d1d447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:81:19:95:dc:28:fa:58:74:54:ce:23:0d:
40:d0:ec:96:48:1a:f2:34:2f:64:58:da:3e:8e:55:
ff:e6:88:81:2e:a9:5f:c1:5e:e2:47:99:f6:0a:06:
65:a1:93:e2:4c:d7:b1:8d:c5:e8:4b:e6:8c:12:44:
a2:32:72:fa:10:9b:1b:10:1b:fc:e6:0b:06:ac:0c:
a7:d5:a1:ba:4f:89:ae:7d:32:4d:ab:17:e2:cc:30:
c3:dd:65:5d:04:d5:e4:e7:1c:3d:83:28:42:3f:6a:
f6:ef:e5:e0:c7:99:d7:a2:bb:01:ec:58:a9:67:26:
9c:61:e9:c4:5d:28:7a:fc:c1:9d:23:b5:73:87:e9:
93:50:8c:56:8f:68:3b:28:0a:d5:f0:ce:a3:72:29:
94:16:6d:99:d4:6d:42:a6:39:d9:34:e1:9e:16:20:
a3:95:aa:57:42:b2:43:28:93:b1:73:f7:52:9e:1e:
5c:5d:7b:9b:d7:ed:8f:27:a3:a7:5d:61:d4:d0:13:
27:14:d2:f8:d0:14:93:99:3e:70:05:91:98:6d:86:
6c:52:79:e1:73:d3:e5:74:2a:7a:db:53:5f:af:d4:
4b:3e:c0:ee:e3:ee:fd:9b:1c:6c:65:a7:68:1f:53:
db:6b:19:2e:ba:a9:a1:28:77:ae:7b:86:7f:d0:90:
27:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:91:AF:D3:EE:31:C2:5E:F2:D5:13:81:CC:E8:7D:61:C0:D1:D4:47
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d0:14:8d:b8:f7:83:a9:fa:c5:f6:c1:bb:a1:80:45:a1:6a:
f9:43:32:92:35:86:d9:50:8a:eb:6a:36:dc:21:eb:b6:f3:c5:
58:2b:4f:d3:ca:e7:ec:62:4e:36:79:02:7e:7f:2f:1f:48:61:
a9:d4:dd:4b:da:c0:d8:5a:50:5d:d2:ee:6e:33:6b:b7:be:5b:
f9:71:e6:07:20:81:bc:ed:ae:f4:88:b7:d8:8e:47:48:72:cb:
63:9b:aa:ae:11:a9:cf:4c:4f:5e:de:4b:b0:2e:37:87:56:8f:
d4:95:31:ba:0c:5a:64:68:a4:4d:1c:17:e3:57:0c:df:95:ce:
fe:21:a2:7e:b4:f6:25:06:b4:12:f0:8a:f6:47:3d:61:9c:bd:
b2:6f:6e:45:0a:00:0d:07:f7:10:46:e0:af:63:2a:84:84:35:
b7:c1:29:9b:56:2c:52:c8:2c:59:c7:0a:b7:bd:88:9a:fb:46:
1c:a9:4d:07:2a:1a:cc:42:d8:7b:99:6b:b0:8b:77:f4:92:f8:
60:08:5b:b7:cf:56:9c:40:87:89:f3:ee:45:a2:ee:e2:73:f4:
67:6a:74:77:a1:4d:c1:a3:79:2c:20:2f:23:67:bd:22:13:59:
f4:64:13:a7:04:f3:42:aa:ad:c3:3c:37:26:89:72:d6:1e:ad:
88:41:7d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:10:29 2026 by rpki-client