Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
File: 1_T2S1EKQbB8nVAASzUlaUzEIjM.mft (raw, json)
Hash identifier: 3ozUTEWqyI5WtQZsJpWwL0tGlP7yZfTlVHiNLT17QFU=
Subject key identifier: 0D:B7:DF:BA:8D:B7:63:BE:1B:1C:15:FC:13:12:CE:EC:74:07:7D:9D
Authority key identifier: D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
Certificate issuer: /CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Certificate serial: 01A17F2AA1F8BFB123A9F3C1D692F4F1CEA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
Manifest number: 0461
Signing time: Tue 27 Oct 2026 21:01:02 +0000
Manifest this update: Tue 27 Oct 2026 21:01:02 +0000
Manifest next update: Wed 28 Oct 2026 21:01:02 +0000
Files and hashes: 1: 1_T2S1EKQbB8nVAASzUlaUzEIjM.crl (hash: a8DhM6s9pbULWrt7SLIVh3wTYEplnz5z+sdC3ccKtxw=)
2: O0den7khHq0NCn8QYd3S-g6e7Zw.roa (hash: f/zSeANbHfo0P2exhcovKtgSVaUQTewmpP+aAALiENE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:a1:f8:bf:b1:23:a9:f3:c1:d6:92:f4:f1:ce:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f4f64b510a41b07c9d50004b3525694cc42233
Validity
Not Before: Oct 27 21:01:02 2026 GMT
Not After : Oct 28 21:01:02 2026 GMT
Subject: CN=0db7dfba8db763be1b1c15fc1312ceec74077d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:44:cc:61:59:3c:26:59:b5:c2:3b:b3:c6:
67:36:d3:2f:2c:94:a8:e4:43:ad:df:1a:67:59:83:
15:8d:f7:43:f5:01:1c:6d:4b:9d:c1:df:8a:44:30:
e0:f8:e4:b7:ce:58:50:0a:9c:0d:c1:5b:c5:de:28:
a2:d0:c6:40:74:f2:ac:9e:26:75:38:39:f4:5a:b3:
61:37:6c:75:85:b0:dc:37:06:29:39:b6:36:9e:48:
f7:15:9e:77:4e:15:68:88:ee:e8:cb:02:cd:b2:ff:
44:c6:24:f6:48:d2:00:7d:b3:7e:6e:3d:3c:17:d5:
e2:cb:1f:9a:bf:38:fc:6e:19:fe:f2:2c:3d:8d:fd:
67:e2:48:86:25:6c:06:c5:8d:8f:44:7a:c4:0c:01:
90:0a:e6:23:45:f0:02:55:22:6a:3b:92:3a:5e:86:
e8:0c:8d:20:3f:2d:f2:aa:ee:c4:1d:18:c7:6a:a4:
c3:62:a9:c5:4c:e1:05:ad:69:f2:8a:aa:15:a1:52:
e6:47:93:8b:ff:55:1d:05:bb:ef:db:46:7a:7f:84:
df:a2:8c:39:24:3d:25:fd:5a:6c:f7:70:49:a1:a7:
6c:6a:15:3a:43:9e:29:d3:46:b7:60:5f:60:82:3c:
d2:e8:c2:63:b8:a6:b9:3d:31:a5:6f:6c:48:05:50:
ea:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B7:DF:BA:8D:B7:63:BE:1B:1C:15:FC:13:12:CE:EC:74:07:7D:9D
X509v3 Authority Key Identifier:
keyid:D7:F4:F6:4B:51:0A:41:B0:7C:9D:50:00:4B:35:25:69:4C:C4:22:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_T2S1EKQbB8nVAASzUlaUzEIjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9e3dcd-f1a2-4fb9-8c7e-d54562f52e93/1/1_T2S1EKQbB8nVAASzUlaUzEIjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:0a:5a:72:c8:7f:4f:81:3d:6e:a8:22:db:d7:a6:59:b2:af:
85:40:c0:fc:1f:2e:f3:70:85:98:2a:e0:97:5c:1b:c4:9f:78:
b1:92:77:74:08:94:c7:05:fd:0d:27:ab:ae:ac:c0:aa:5f:7e:
a3:6e:4b:54:73:77:5f:40:2f:43:44:63:78:c1:01:13:1d:17:
6f:00:3c:56:eb:37:2c:d0:3f:8c:4c:bf:e8:2b:b1:e9:79:17:
96:cd:07:a7:e0:3c:54:68:df:ec:ad:0f:c0:f6:17:83:79:df:
42:b3:6f:61:a3:b5:55:e7:2e:79:94:5e:08:27:d9:f1:17:1d:
a7:6d:f6:01:2c:9e:1b:59:8e:66:d9:3f:4b:31:fe:ae:cd:e7:
72:aa:94:f4:cf:3d:cd:63:a0:ca:7a:6c:26:ba:8e:d4:22:08:
3a:d2:fd:da:08:50:c0:c3:a0:85:6d:81:b2:1e:3b:f7:e6:01:
f0:18:e3:f6:c4:d8:62:9d:f7:96:e0:43:9a:db:f2:fd:73:22:
a7:d5:5f:60:af:67:1a:2e:e5:e7:36:83:53:34:c5:ce:a1:59:
0d:bd:81:80:63:66:77:b4:51:f9:2f:c6:20:5b:e7:e7:08:8b:
6d:93:39:b8:ba:02:07:fa:1c:3c:a4:b9:57:ee:07:9c:34:29:
8d:ce:ab:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:16:17 2026 by rpki-client