Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier: 3cDvCLdSk8xtJb1VQsiDgL5VRuxll/gZBjRc1sIRXAM=
Subject key identifier: 1E:C4:CC:B3:2D:B1:73:01:26:9C:0E:E8:73:9E:A1:04:B3:DE:A9:58
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial: 01A0C55730C94B8D6814AFEFE78908F39C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number: 174A
Signing time: Mon 21 Sep 2026 19:00:20 +0000
Manifest this update: Mon 21 Sep 2026 19:00:20 +0000
Manifest next update: Tue 22 Sep 2026 19:00:20 +0000
Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: 9HNCJN2Y4JpaWXHpj4RAR34K+P4IzWvgQyuK7kbRTZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:30:c9:4b:8d:68:14:af:ef:e7:89:08:f3:9c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Validity
Not Before: Sep 21 19:00:20 2026 GMT
Not After : Sep 22 19:00:20 2026 GMT
Subject: CN=1ec4ccb32db17301269c0ee8739ea104b3dea958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:dd:6f:f5:25:98:0a:fa:2b:5f:dd:8d:a3:39:
02:f7:fd:d9:39:93:67:c4:14:f8:e7:f7:08:04:be:
b3:27:56:1b:df:a7:a5:0a:7f:dc:c1:d8:32:fc:4c:
c8:35:08:30:9d:db:1c:5c:28:91:80:d3:4c:9f:d9:
39:d2:cf:b8:2d:f6:c1:2e:4f:0d:e5:45:62:5e:ab:
8b:40:37:6c:90:f0:bc:3e:36:c1:e5:40:30:8e:aa:
d8:95:9e:d6:f5:cb:70:b8:99:3e:0f:c9:c2:5f:7f:
06:93:22:6a:c1:96:35:0e:70:c5:1f:f0:55:92:c1:
89:07:a6:a7:8e:95:53:a0:7f:42:5d:86:7a:ab:4b:
3d:48:d4:9f:b0:94:e4:a3:5b:2f:6e:bd:a1:b7:cf:
c8:e5:c6:cd:55:88:6f:72:a9:39:1d:24:74:fd:4f:
65:82:7f:d8:8c:d2:c9:b7:79:40:e1:21:da:8e:0c:
9f:c6:08:0a:0d:c8:58:9b:31:53:e6:ca:b5:bb:4b:
ee:7f:76:04:56:22:f3:b1:59:29:61:65:f9:f0:d3:
a6:f9:ad:0f:ff:ff:3a:67:a7:f6:1b:d2:96:86:d8:
82:38:70:69:2d:6f:c4:fb:44:8d:ba:d3:3a:81:0d:
ed:e2:e0:e2:04:bb:bb:bb:b9:ff:b4:c3:52:d3:11:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C4:CC:B3:2D:B1:73:01:26:9C:0E:E8:73:9E:A1:04:B3:DE:A9:58
X509v3 Authority Key Identifier:
keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cd:10:ee:eb:e5:23:ec:da:5b:92:69:8d:c0:71:08:f4:bd:
8f:73:9a:0e:e7:b9:a2:c8:8e:6e:50:a4:b2:2b:99:97:96:db:
ab:fd:a6:da:bd:f2:30:6f:71:db:b6:4d:c5:70:d2:93:16:d5:
26:04:dd:17:46:1f:15:6d:9e:d1:71:c4:70:45:ad:09:02:f4:
4f:14:e2:11:95:1c:b9:af:8c:27:20:cd:09:ef:67:c5:36:69:
16:11:ca:87:9b:4f:db:15:96:1b:15:e4:4f:34:95:bf:9c:f6:
18:80:da:0f:76:ad:fc:5d:87:c6:2c:16:ba:83:0e:9d:8c:c2:
dc:74:94:61:ba:89:f5:b0:11:3c:2c:22:fa:f6:a5:eb:b7:1e:
9f:74:ce:18:5e:18:86:5f:cc:f7:d5:92:7b:80:6e:f7:24:e2:
be:2a:d8:a0:6f:c5:89:db:8b:3f:71:1d:09:7a:2b:cc:b8:fd:
d7:45:91:8a:e3:5f:16:19:e1:5e:ba:3b:0c:f1:4d:da:98:b3:
2b:57:f8:1b:98:a8:0e:d9:a7:e9:6a:54:2b:9f:8e:49:a8:ba:
98:e0:f5:9c:75:77:38:50:d3:cf:f9:25:43:6a:cf:18:4e:72:
1c:9d:e4:96:38:2a:9f:e5:06:4d:10:01:78:e1:d9:c2:78:2c:
1c:e8:c8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:36:38 2026 by rpki-client