Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
File: 1tcoXpK3QC6V29onv773Go4ifNQ.mft (raw, json)
Hash identifier: QdAfJYUCL3ogfzWLDWAyv7h7J4ABVERjeO8NOI53XtI=
Subject key identifier: 1B:BE:DB:36:F1:CE:B9:DB:A6:62:C0:33:FA:B4:D6:BF:5E:3C:18:6C
Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Certificate serial: 01A0DBA9C4148C4E6A12814B6291974255B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
Manifest number: 0329
Signing time: Sat 26 Sep 2026 03:02:11 +0000
Manifest this update: Sat 26 Sep 2026 03:02:11 +0000
Manifest next update: Sun 27 Sep 2026 03:02:11 +0000
Files and hashes: 1: 1tcoXpK3QC6V29onv773Go4ifNQ.crl (hash: DTMrihIJpu//9eQq51oFtX8PHlqaV0IOgOR2Ww2inWs=)
2: cHkKo0DH80LlWl6mMB1Bk4ZyTuQ.asa (hash: nUOqpGWWngcltr0wRPhL84IrP/0KMpPD9+1PbqAf+iM=)
3: vWSFnkCnudPRUzfioP_sQ99MW24.roa (hash: fa/7H1d1MQOMBd0ZSP/HYbqe7w6JGnLpzf7w6NJUnOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:c4:14:8c:4e:6a:12:81:4b:62:91:97:42:55:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Validity
Not Before: Sep 26 03:02:11 2026 GMT
Not After : Sep 27 03:02:11 2026 GMT
Subject: CN=1bbedb36f1ceb9dba662c033fab4d6bf5e3c186c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:bd:00:8b:d1:35:5f:0a:c6:eb:6a:0f:6a:
7d:e8:c7:59:98:28:7f:c1:84:cc:b3:6f:d8:8a:0b:
a1:1b:5a:4d:4e:26:60:2a:1d:e5:a2:e7:17:05:35:
28:12:05:32:bd:ec:94:a8:fc:b0:0e:53:a4:0c:5d:
5a:8e:ca:92:5a:b3:6d:33:66:e3:9e:90:dc:ab:0e:
77:38:14:6d:ff:e5:49:3b:40:9f:da:13:ba:53:2f:
76:80:15:78:39:6a:40:84:a9:4c:9f:9d:8a:f5:54:
01:f6:13:09:32:82:28:06:19:ee:6c:22:2f:57:02:
5c:31:a4:33:27:b5:4c:49:62:f7:b2:9c:2f:18:ca:
48:c1:91:35:a8:d9:bd:34:f5:de:d8:66:d1:61:a4:
2c:fb:b3:12:7f:e9:62:24:69:97:b2:b0:47:37:13:
09:99:5c:75:93:f6:ea:33:f4:a3:01:c1:ab:14:df:
d7:ca:cd:4a:72:47:33:78:d1:58:90:bc:a6:68:31:
19:29:8d:73:21:ae:2c:f0:41:ea:f8:7a:56:09:89:
0c:99:51:dc:6f:1e:32:26:f0:20:62:23:f1:87:a5:
85:9c:7f:f4:f2:b7:e4:90:22:3c:ff:52:68:39:6f:
9e:22:bb:13:c7:57:85:3e:4f:90:52:16:6a:5d:ee:
da:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BE:DB:36:F1:CE:B9:DB:A6:62:C0:33:FA:B4:D6:BF:5E:3C:18:6C
X509v3 Authority Key Identifier:
keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b9:f8:89:7b:cd:0a:9a:a7:88:01:cf:cf:9a:94:c0:b4:57:
03:44:a2:06:e5:a8:d5:76:95:cf:6e:70:3f:78:23:af:86:8d:
d2:5e:a5:25:52:8b:c3:1b:9b:bd:95:8d:d3:29:c7:a1:9b:47:
13:22:1f:83:78:9d:b4:23:46:a3:57:94:9b:a3:24:84:48:b4:
b0:f8:bc:b9:a5:1e:70:46:af:43:5b:c9:94:f3:53:a9:0a:b8:
3c:70:88:04:06:0a:7b:f5:69:14:1c:02:34:a2:e2:8c:50:e2:
13:d7:83:9b:11:a9:76:b5:79:e4:e8:75:87:ee:41:41:42:d6:
d1:5f:31:29:1f:30:a6:3e:c0:7c:cc:d2:8b:de:ba:df:71:01:
4f:a6:08:69:5f:b2:77:bb:be:a5:29:36:96:de:af:b3:cf:53:
eb:58:d3:c7:c9:5c:82:dd:44:e0:7c:9e:8c:11:b4:ef:bc:5d:
be:71:41:62:ef:85:8c:b2:ee:88:a8:3b:9a:54:25:1e:3b:9f:
de:8a:8c:47:6c:15:19:e2:e5:03:d8:7e:24:a2:e1:a6:88:58:
b0:a9:d9:18:b9:ec:6a:d7:7c:6d:1a:96:f0:e8:a6:93:64:77:
d6:02:18:91:64:fd:3a:44:7e:51:f8:a7:4c:ff:4c:d6:2b:39:
41:2b:b1:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbqcQUjE5qEoFLYpGXQlW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZDcyODVlOTJiNzQwMmU5NWRiZGEyN2JmYmVmNzFhOGUy
MjdjZDQwHhcNMjYwOTI2MDMwMjExWhcNMjYwOTI3MDMwMjExWjAzMTEwLwYDVQQD
EygxYmJlZGIzNmYxY2ViOWRiYTY2MmMwMzNmYWI0ZDZiZjVlM2MxODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFS9AIvRNV8KxutqD2p96MdZmCh/
wYTMs2/YiguhG1pNTiZgKh3loucXBTUoEgUyveyUqPywDlOkDF1ajsqSWrNtM2bj
npDcqw53OBRt/+VJO0Cf2hO6Uy92gBV4OWpAhKlMn52K9VQB9hMJMoIoBhnubCIv
VwJcMaQzJ7VMSWL3spwvGMpIwZE1qNm9NPXe2GbRYaQs+7MSf+liJGmXsrBHNxMJ
mVx1k/bqM/SjAcGrFN/Xys1KckczeNFYkLymaDEZKY1zIa4s8EHq+HpWCYkMmVHc
bx4yJvAgYiPxh6WFnH/08rfkkCI8/1JoOW+eIrsTx1eFPk+QUhZqXe7aPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBu+2zbxzrnbpmLAM/q01r9ePBhsMB8GA1UdIwQY
MBaAFNbXKF6St0AuldvaJ7++9xqOInzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTk5M2QtYjkyZi00ZWMwLWIzMDAt
ZDU1ZjVlMGZmNDNmLzEvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTk5M2QtYjkyZi00ZWMwLWIzMDAtZDU1ZjVlMGZmNDNm
LzEvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7n4iXvN
CpqniAHPz5qUwLRXA0SiBuWo1XaVz25wP3gjr4aN0l6lJVKLwxubvZWN0ynHoZtH
EyIfg3idtCNGo1eUm6MkhEi0sPi8uaUecEavQ1vJlPNTqQq4PHCIBAYKe/VpFBwC
NKLijFDiE9eDmxGpdrV55Oh1h+5BQULW0V8xKR8wpj7AfMzSi96633EBT6YIaV+y
d7u+pSk2lt6vs89T61jTx8lcgt1E4HyejBG077xdvnFBYu+FjLLuiKg7mlQlHjuf
3oqMR2wVGeLlA9h+JKLhpohYsKnZGLnsatd8bRqW8Oimk2R31gIYkWT9OkR+Ufin
TP9M1is5QSuxtQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:05:11 2026 by rpki-client