Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json)
Hash identifier: OQptVIP8X/7AjNurqL0BqwtrZ/AyPxoMhdQRWbwY4wE=
Subject key identifier: 15:A2:B9:13:CD:EE:7A:63:CC:CA:70:01:9F:88:3F:70:0C:46:47:D0
Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453
Certificate serial: 01A1212E5E932B7ED947A077F939E38D78E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
Manifest number: 04FE
Signing time: Fri 09 Oct 2026 15:00:49 +0000
Manifest this update: Fri 09 Oct 2026 15:00:49 +0000
Manifest next update: Sat 10 Oct 2026 15:00:49 +0000
Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: xDcbK49i30RmSa0STYBydp9kRcA9fR4aSev2APDOcfk=)
2: 8bmJkssiqMmgoFhVLjPuiVh-JXk.roa (hash: wsFMvOiuuz/DL1nPZTplboq3GQRPHDLxwfXC+j9gOCo=)
3: I_gjmgTGM8CnfZUno5dhPGOiuGc.roa (hash: 5ceNk4RXSeeZg8BwSNJjPp6dzFZDl3gaP/ZwPUk12h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2e:5e:93:2b:7e:d9:47:a0:77:f9:39:e3:8d:78:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453
Validity
Not Before: Oct 9 15:00:49 2026 GMT
Not After : Oct 10 15:00:49 2026 GMT
Subject: CN=15a2b913cdee7a63ccca70019f883f700c4647d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b2:0d:f9:ae:92:e3:3a:e7:26:09:26:35:ba:
24:99:83:96:2a:b8:57:0c:60:32:d0:75:47:34:8b:
3e:35:08:d1:40:9f:3e:f1:58:68:32:53:f1:c9:99:
2c:e3:04:a0:29:4d:b6:46:c3:33:cf:79:91:ce:de:
a4:1b:11:78:37:5e:b7:1f:37:43:93:0f:85:0d:20:
21:f8:2e:e5:ce:ca:b7:92:6e:51:7e:44:e9:03:b8:
81:b1:74:0c:54:d8:b5:ac:5e:73:b6:6d:13:31:09:
58:be:0e:4c:01:c6:4e:74:69:a5:9f:cf:26:b5:28:
ea:d6:39:c8:27:a1:bc:f6:08:1a:5f:d8:8e:eb:53:
65:70:5e:fa:38:d9:81:85:8d:03:9e:e2:f5:09:97:
a5:eb:44:9b:75:39:dd:08:ce:53:12:cf:fd:e0:14:
f8:91:b9:46:10:36:04:f9:2f:18:a7:87:34:1f:f2:
23:bd:65:1a:06:29:3b:d1:38:b7:f5:6f:e8:dd:10:
57:7a:7a:25:48:af:13:7b:bd:d9:ce:26:48:41:e0:
61:bc:c6:cd:81:ac:d6:ea:0a:7e:4c:20:98:d2:06:
b0:d1:12:bb:3d:a7:35:69:bf:96:19:0c:05:46:8a:
ed:b7:b1:d3:9b:ce:5d:e8:c8:32:a8:b6:af:66:6f:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A2:B9:13:CD:EE:7A:63:CC:CA:70:01:9F:88:3F:70:0C:46:47:D0
X509v3 Authority Key Identifier:
keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a5:e7:5f:5f:aa:76:d8:cc:2c:8b:59:60:c2:9c:0a:14:fb:
95:7d:fb:93:a8:4f:fb:15:d3:ad:ae:83:ad:ba:38:d8:a3:fb:
86:62:23:90:2d:0a:9e:e6:50:c8:dd:3e:c4:b5:82:7f:be:aa:
73:1d:4b:9b:3b:bb:4c:3b:c7:f7:cc:76:23:28:d2:04:ef:c5:
2c:95:1c:a3:aa:7e:d3:03:45:b1:72:80:d5:06:88:35:1d:0d:
b4:c0:77:83:4d:a2:ff:b9:56:e8:aa:98:a6:12:70:2f:bb:4d:
2a:fa:43:f1:75:e8:52:ed:83:fc:e7:db:a5:b8:16:39:61:27:
68:1f:8a:69:82:a3:68:30:ba:c7:f4:08:c9:fc:71:f7:cc:17:
ba:9a:24:d8:ea:af:46:34:57:6e:7c:6d:89:f1:6d:cd:80:da:
63:e5:eb:c7:3e:0b:01:e9:11:00:81:cd:2c:79:e5:93:8c:6e:
0a:8b:15:05:ba:c9:89:78:c8:4a:22:0c:42:ff:24:4b:19:f9:
52:80:d6:34:e4:9d:d2:30:ae:43:8d:fe:35:1e:52:01:20:41:
8a:6f:0e:eb:90:47:19:c1:fc:be:95:7b:26:38:49:32:8e:5b:
65:e3:c5:71:0e:ff:37:6a:dd:44:00:a4:73:59:93:7a:31:98:
be:2a:7a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:08:16 2026 by rpki-client