Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
File: 1dzeISXwQFitT0eOF4iEFCzy2tA.mft (raw, json)
Hash identifier: LIl2E5KsuZ3U0H8ZXF4fA95EO/KcyA7c1+FhA/ybZZc=
Subject key identifier: E1:97:88:32:D6:42:B8:39:CC:21:F6:53:15:A4:63:29:48:9B:95:F6
Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Certificate serial: 01A0C2C48ABF69E3B2B314DE8B8686D73A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
Manifest number: 142D
Signing time: Mon 21 Sep 2026 07:00:55 +0000
Manifest this update: Mon 21 Sep 2026 07:00:55 +0000
Manifest next update: Tue 22 Sep 2026 07:00:55 +0000
Files and hashes: 1: 1dzeISXwQFitT0eOF4iEFCzy2tA.crl (hash: X84yn/04Pknhyotc9FcAAYoRtKM15VRm4Xk1xVx5E7g=)
2: 8BYDJuaf2CuIte9znhQTMnQNfzY.roa (hash: /nJhQIQ9VVW/Qtz2O6f+WJOXBH0IlvQwIRyYeoC0B4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:8a:bf:69:e3:b2:b3:14:de:8b:86:86:d7:3a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Validity
Not Before: Sep 21 07:00:55 2026 GMT
Not After : Sep 22 07:00:55 2026 GMT
Subject: CN=e1978832d642b839cc21f65315a46329489b95f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f5:3b:22:7a:13:8e:b2:4f:ce:75:9c:0f:2f:
94:9b:9d:72:17:ee:ed:b4:88:75:47:3a:e1:00:7c:
8a:ac:99:9e:7c:3d:0a:59:05:bc:49:a4:63:d0:51:
ac:41:ec:b0:a2:db:55:85:79:98:55:ac:a9:db:22:
d5:40:ac:4c:77:93:be:14:ca:62:7e:34:5a:0a:ad:
e2:b9:ac:ac:e0:36:81:ec:11:0d:82:c3:5c:b2:aa:
af:24:79:1b:a8:66:62:3f:6c:5e:ce:ab:a4:22:5d:
04:13:81:d9:61:dc:f1:d5:02:aa:f0:36:e7:06:be:
06:b9:bc:93:b4:5c:eb:36:00:03:9e:dc:3e:a4:13:
95:c0:53:bd:e4:2e:d6:da:54:4a:c2:3a:11:81:68:
7e:2e:57:45:04:38:54:5d:d8:9a:23:b2:45:37:2e:
31:e5:29:d6:51:6e:79:0b:90:76:6d:27:75:81:6b:
3f:4c:53:df:b6:72:49:9c:f6:74:79:d5:a5:ab:fa:
18:1f:cb:6f:58:c9:79:38:26:7e:e9:2b:dc:af:f9:
61:12:6e:fe:3a:f1:76:d3:66:40:a2:96:55:36:30:
8d:87:a1:a1:13:4d:7b:1b:c9:2e:28:5f:97:c0:82:
e8:d3:13:14:d0:7f:62:6d:ca:21:e1:85:5a:85:4b:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:97:88:32:D6:42:B8:39:CC:21:F6:53:15:A4:63:29:48:9B:95:F6
X509v3 Authority Key Identifier:
keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fc:48:a3:5e:d6:f0:5b:46:c9:3e:0b:81:0c:08:3c:de:61:
1f:92:19:69:2d:ee:5d:e7:04:a8:a6:80:2a:d9:48:f0:5c:de:
32:c3:94:f3:f0:2b:51:57:f6:07:af:f1:b8:d4:9d:f0:42:6b:
b3:3d:9d:2a:8f:61:21:af:2c:cb:4f:e7:61:1e:ed:98:be:30:
25:b3:19:28:c5:2e:a1:c0:fa:2a:69:08:31:57:fa:fb:38:d2:
c0:bc:0d:a9:45:32:f4:f9:f9:2f:96:9b:0a:93:57:9a:99:79:
48:c3:35:51:08:bf:3c:2c:6f:f5:a7:62:2b:e3:8b:95:c3:c9:
17:33:a5:35:75:47:71:ca:5b:b7:ed:f6:ee:e5:57:0e:22:7e:
d6:21:9c:93:e2:72:67:d8:e7:57:9a:91:4e:f1:22:d6:19:93:
cd:34:41:c0:27:39:02:c6:4c:f2:b2:1b:ee:57:fa:ee:ee:34:
5f:bc:8f:b2:ce:e2:f3:b6:43:7d:ad:41:b2:61:ae:73:5b:12:
df:49:68:57:92:51:22:98:fb:e3:48:45:8a:f3:9e:62:09:51:
66:95:a0:18:e0:de:cb:61:ec:c9:20:70:0c:9d:7b:17:c1:f7:
0e:15:40:e2:85:ab:3d:1c:53:8b:0f:7b:19:f6:0f:6f:a8:67:
16:39:77:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:59:52 2026 by rpki-client