Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier: 099G9UKg022l336Dh/bB+yj61VMctDbAae9Yaih+LQY=
Subject key identifier: 0F:0B:01:FA:4F:CD:7A:EA:8B:FE:98:84:8F:FB:20:1C:21:B7:BA:66
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial: 01A0DA29175571C842D4DF61A1E2C2AE0B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 20:02:01 +0000
Manifest this update: Fri 25 Sep 2026 20:02:01 +0000
Manifest next update: Sat 26 Sep 2026 20:02:01 +0000
Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: 0FPzTvIbq8t5SrYmBBD1Ij44sSO7mRlSzWTxfoAnlow=)
2: A0zEfLP6aje6siYVgtOIFTUv-gA.roa (hash: U3yH+f7j1agPNZjyy4FkXU1kfVyaRAeAIT0ypJqPwSA=)
3: C96r7R6Mb5GqlprR3I_no-ERD4g.roa (hash: NLf7EUxe3BSu+odq1YzXIDULHf2Z5URrNMh4SALrwlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:29:17:55:71:c8:42:d4:df:61:a1:e2:c2:ae:0b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Validity
Not Before: Sep 25 20:02:01 2026 GMT
Not After : Sep 26 20:02:01 2026 GMT
Subject: CN=0f0b01fa4fcd7aea8bfe98848ffb201c21b7ba66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:4b:a5:29:c4:90:19:60:c9:78:1e:20:5d:
42:d8:0a:bb:49:2e:74:52:f2:35:d1:e4:e1:ed:6e:
38:ae:32:13:da:91:79:a6:06:08:03:dd:09:e0:d6:
5f:85:b4:00:8c:a8:b8:f0:99:e1:9e:f9:93:aa:f4:
f6:de:16:77:82:6a:42:5d:c8:e2:d9:79:73:27:53:
ac:7c:08:82:13:18:d4:c9:0e:3b:27:a7:85:c6:2c:
a0:8f:0a:2d:ad:0b:55:d9:99:5c:78:a2:ff:27:c7:
f7:c1:da:83:0a:3e:cf:6c:68:bf:01:33:b8:bf:f1:
4b:c4:5a:60:71:b7:21:20:b4:89:5a:93:3a:5b:b6:
2a:94:c2:64:ef:9d:c4:a5:91:c2:05:47:5e:84:7a:
90:b2:fb:0f:90:ad:df:48:1c:86:ef:ce:7b:2e:66:
03:86:0c:d6:d1:62:76:39:b1:71:1a:db:53:a4:14:
cb:f9:79:33:6b:6b:c1:1d:bd:a9:bb:53:20:f5:63:
3c:80:ab:7c:9c:72:77:54:1b:98:0b:be:92:80:9d:
f4:8d:22:fb:2c:e6:90:4b:84:8c:4b:71:93:ff:fd:
db:92:27:11:0e:1b:e9:1d:17:c0:8f:f2:f7:ff:aa:
e9:f6:9d:49:75:5a:eb:59:a1:be:7e:14:b7:59:15:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0B:01:FA:4F:CD:7A:EA:8B:FE:98:84:8F:FB:20:1C:21:B7:BA:66
X509v3 Authority Key Identifier:
keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:69:b0:5b:85:12:46:33:3f:29:f7:d2:84:f0:14:e0:c8:0e:
db:9d:26:5a:1b:7b:15:40:e5:65:1d:9e:7c:11:b3:01:6e:ac:
b4:80:6a:3d:e8:14:0c:b1:06:4d:20:1f:7d:9c:60:e3:e2:08:
5b:47:68:60:7c:50:7c:01:28:35:38:60:7e:be:86:b1:34:a5:
20:25:02:01:69:d1:f1:0f:70:31:e7:5c:bd:1d:c5:b2:b9:2b:
b1:8e:03:91:f0:51:d8:7f:e8:4c:36:e7:77:70:92:01:d2:9f:
eb:bd:80:52:dc:a8:43:29:99:01:2f:42:b4:90:3b:90:d6:ef:
35:6a:b2:30:37:47:a0:fa:c4:f3:10:c6:bf:f0:ef:ce:66:44:
62:e6:88:6e:f3:46:4e:b5:3f:c0:d8:e8:c2:bf:7b:e1:79:df:
6d:e3:c6:9c:3d:39:75:fa:a4:cf:ab:1b:73:85:04:29:eb:9d:
bc:12:bc:ba:ae:03:04:3c:e0:8c:f1:51:ec:d7:b5:c0:9b:1c:
e8:91:20:45:46:73:f2:06:2a:71:e4:f4:6e:d8:1d:2b:bc:0f:
7d:a7:43:e8:e6:04:88:2e:e4:01:b3:92:bc:0e:99:ce:56:fb:
55:4a:ed:d5:96:55:41:07:56:37:65:c0:ef:6c:9b:1e:c5:4f:
90:33:8c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:17:01 2026 by rpki-client