Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: Dqw1mlLga8l4W2vOXELrMuFvvxaVLwso0Yvleft1XSk=
Subject key identifier: 8A:0B:73:B7:01:BA:AE:BD:02:19:0C:4B:9C:81:16:96:88:19:6E:51
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 01A1BF8B5C1BF7C1F128F2FFDB36B263AEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 12C9
Signing time: Mon 09 Nov 2026 09:02:23 +0000
Manifest this update: Mon 09 Nov 2026 09:02:23 +0000
Manifest next update: Tue 10 Nov 2026 09:02:23 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: MdH1dA63RzKxdaGqEV53NrpxOIIltho3MMSSY2UB4jU=)
2: 6Pc_yuf6U7fifvpMORJRJWUOec0.roa (hash: YkCtWd8TqjpXFSR0IlaGJlvhxUpQhvA2ISYdw8xN7rc=)
3: SiiyX2N_VudkW_kgHjDWb96Midc.roa (hash: VBfDCyR0GjOaXAtcZCDfH6SSSVgHl3aLvPMUM1TIr7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 09:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:8b:5c:1b:f7:c1:f1:28:f2:ff:db:36:b2:63:ae:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Nov 9 09:02:23 2026 GMT
Not After : Nov 10 09:02:23 2026 GMT
Subject: CN=8a0b73b701baaebd02190c4b9c81169688196e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:01:7a:17:bb:ad:82:87:17:68:ef:9c:20:
df:e6:ca:51:7f:57:a8:55:0e:58:a4:b8:ae:bf:7e:
71:1c:0c:dc:96:76:31:28:fd:20:42:d2:3c:2d:e6:
56:ba:96:7f:ef:41:dc:63:dd:9f:ef:f0:66:d5:9c:
99:6f:31:df:f9:b5:6b:3d:ad:fa:2c:48:fd:c2:9d:
72:8a:b3:9c:26:cd:67:40:c2:ef:26:b7:f0:be:74:
4c:bc:22:71:f0:6e:84:79:68:c3:b2:97:b8:9e:cf:
ca:63:fe:42:39:5a:09:cc:85:75:46:73:d2:97:5b:
fc:48:da:ce:db:0a:5f:4c:62:b9:53:62:fa:f9:12:
78:fe:f1:c2:1b:22:ab:ea:1b:a6:9c:a9:cb:c9:c8:
2b:1f:37:d2:ba:e4:49:8e:06:e6:52:f5:e7:e6:76:
3f:fc:84:04:0f:a8:25:dd:83:76:16:87:71:f9:2a:
99:90:4e:e2:c1:1b:67:85:4e:bd:b8:7b:64:6f:5e:
ee:00:b8:f3:35:c3:8b:6c:e6:64:cd:15:5b:02:50:
97:34:7c:1b:b2:b5:c3:71:c0:39:e4:51:15:7f:8e:
80:3b:47:29:19:d2:c6:2c:85:f0:c2:3f:51:00:52:
8b:d7:12:1d:43:12:82:86:9f:b3:ee:15:0e:f3:27:
99:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0B:73:B7:01:BA:AE:BD:02:19:0C:4B:9C:81:16:96:88:19:6E:51
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4d:6c:48:3f:1f:f3:8d:9f:24:e6:e3:58:c2:47:56:52:1a:
27:b7:10:72:08:81:56:92:29:83:2c:c0:27:0a:83:24:c3:7e:
15:07:0d:82:e4:bb:fe:c6:4e:dd:bf:c3:43:03:23:78:7d:4a:
be:ab:9f:51:c5:39:b3:c3:3d:37:0c:6f:3d:42:4a:e6:d2:8c:
fd:b7:89:5f:8e:1e:9c:e7:be:11:96:70:54:fe:a1:8a:53:6f:
f2:44:d6:ca:e7:d3:13:7b:51:ec:1a:f3:9a:b1:6c:dc:c6:6c:
a4:42:6d:52:d8:7a:60:1b:05:11:44:d0:cd:de:d1:fd:7f:04:
2f:78:75:8d:11:18:0b:96:f9:55:00:86:49:28:cb:05:ee:9a:
d6:74:5a:d1:b6:af:bc:0d:34:01:b5:83:ca:b0:64:b9:d1:35:
35:32:8a:c1:77:29:8f:5b:a3:97:e5:6d:a0:70:bb:ab:1a:81:
2c:d2:0a:88:e7:39:39:e7:72:79:3e:fc:65:d1:67:00:ce:eb:
ef:02:03:78:9b:2f:ab:7d:a2:13:6f:77:aa:a0:76:b9:d0:1b:
36:91:6b:02:98:ef:5c:22:e7:28:9b:e8:35:f0:82:03:62:67:
57:74:16:e9:6a:59:f1:32:ac:f9:41:6c:c5:97:11:29:b8:22:
41:1d:f4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 18:19:33 2026 by rpki-client