Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: mMcsO187nUPoPfEMCg1wdn+fjhh9K04mScDF0t+M2ug=
Subject key identifier: 64:BE:FE:14:81:C4:8B:73:7C:4F:E2:64:28:EC:BF:72:F4:F6:39:DE
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 01A0C47CA01DEC817E1A0B79A093F4931A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 1247
Signing time: Mon 21 Sep 2026 15:01:36 +0000
Manifest this update: Mon 21 Sep 2026 15:01:36 +0000
Manifest next update: Tue 22 Sep 2026 15:01:36 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: 5qOzQw17nkrg4RL4Ko6De/syMQdGoSZ+h3JJ+xQgg+U=)
2: 6Pc_yuf6U7fifvpMORJRJWUOec0.roa (hash: YkCtWd8TqjpXFSR0IlaGJlvhxUpQhvA2ISYdw8xN7rc=)
3: SiiyX2N_VudkW_kgHjDWb96Midc.roa (hash: VBfDCyR0GjOaXAtcZCDfH6SSSVgHl3aLvPMUM1TIr7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 15:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:a0:1d:ec:81:7e:1a:0b:79:a0:93:f4:93:1a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Sep 21 15:01:36 2026 GMT
Not After : Sep 22 15:01:36 2026 GMT
Subject: CN=64befe1481c48b737c4fe26428ecbf72f4f639de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d0:2d:45:01:fc:96:d9:71:27:36:cc:87:23:
d1:ed:a3:fe:57:91:df:05:5a:a5:62:65:30:91:f9:
13:ba:ae:19:c5:5e:2c:e2:97:27:31:c1:08:1e:02:
9b:d1:19:8a:90:30:a2:1f:c3:91:94:f1:97:7a:fd:
9c:cc:53:dc:9f:22:38:84:18:05:53:42:7e:20:1d:
03:4a:89:86:ef:b0:41:f0:34:a7:9c:4b:72:f5:3f:
dd:7c:37:0f:3c:a7:cf:ed:f7:72:05:70:e7:a4:8e:
30:6b:14:28:2f:2c:27:6f:8b:78:c9:fc:da:3c:1a:
f7:e1:c2:90:72:0e:2c:21:da:6c:3c:06:6e:c9:38:
e5:74:5b:f4:d9:38:2b:20:45:b8:58:5a:e8:fe:37:
02:75:b8:8b:ab:af:6a:6a:4a:d0:ef:dd:3b:d4:c6:
b2:06:05:89:9d:94:b5:e7:bb:46:89:ba:11:4b:96:
f8:d4:0c:f6:cd:8d:ff:9c:20:d6:85:c4:bf:de:6d:
99:60:75:f1:da:9d:cc:83:f0:b1:ca:41:73:47:83:
f7:8d:73:5e:c5:f0:9d:22:56:ff:80:7d:a2:80:28:
eb:50:ac:03:f9:76:f0:69:85:61:7d:ef:58:32:ec:
3b:09:8d:37:33:eb:1c:31:6f:27:d7:7a:fc:15:f9:
e5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BE:FE:14:81:C4:8B:73:7C:4F:E2:64:28:EC:BF:72:F4:F6:39:DE
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7a:78:ba:8b:80:4f:79:89:f5:b1:1c:77:c9:f8:d5:60:70:
ca:9b:c9:5b:0f:ef:7a:43:db:a2:14:d2:a1:c8:6b:e2:9e:df:
93:31:46:06:cd:42:d5:58:3f:f9:29:44:e4:c7:ad:cc:04:5d:
96:0c:a4:f2:14:34:f1:ae:af:63:31:43:1f:91:84:d6:14:ae:
f9:e1:27:e0:6f:c5:8f:17:83:d2:36:3f:19:0f:cb:6d:22:1f:
e7:95:50:00:f2:32:a9:c0:25:51:c5:53:69:75:94:64:a0:2a:
84:d2:1d:e2:cd:be:58:59:fb:11:96:65:ed:07:9b:18:60:b8:
2a:fa:e1:ec:ab:e6:0e:38:c2:16:78:f2:13:14:79:fd:58:2f:
a1:c2:97:29:da:9a:5c:44:15:b4:a1:de:99:ab:91:43:16:f7:
e6:1f:a4:f9:af:31:3f:01:a5:0b:c7:50:28:c7:f6:6c:2b:df:
98:70:5c:29:be:cb:9a:05:2e:7e:aa:33:3f:bd:a1:f3:ce:65:
b9:63:0e:39:4a:db:f6:a0:6d:c4:48:e0:21:75:49:99:2f:91:
39:7b:ac:8c:ec:da:1a:10:d6:98:ba:9b:66:44:48:bd:e1:34:
8d:63:58:86:29:a2:8b:3a:32:8b:36:52:d2:db:72:bb:0e:b4:
39:58:ed:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:19:26 2026 by rpki-client