Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier: 8e20RWb4UytURyBaiviyMP5EbHSVIGadKCu7hJQZCbM=
Subject key identifier: 95:7D:53:97:45:FE:65:B4:39:41:96:E3:48:D5:9A:C8:AC:E3:9B:2F
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer: /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial: 01A13F02A98225804B055D3FF84B25B06541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 10:01:41 +0000
Manifest this update: Thu 15 Oct 2026 10:01:41 +0000
Manifest next update: Fri 16 Oct 2026 10:01:41 +0000
Files and hashes: 1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: CZMkJp2Kg0xqtOySl6ZJwRNzde3JwYXqG9ZBelPNF/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:a9:82:25:80:4b:05:5d:3f:f8:4b:25:b0:65:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Validity
Not Before: Oct 15 10:01:41 2026 GMT
Not After : Oct 16 10:01:41 2026 GMT
Subject: CN=957d539745fe65b4394196e348d59ac8ace39b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:a3:28:9f:b7:9c:65:c6:a0:e5:03:2a:13:
d6:e6:c9:8d:8d:c5:7a:5f:76:49:43:b6:47:a6:74:
6c:54:3f:00:e9:51:c7:91:93:0c:20:1a:dc:57:c1:
79:f7:0f:55:40:76:4f:c5:18:23:2f:90:ef:19:8c:
d8:73:79:46:85:f5:db:a2:5e:43:d0:d6:fe:a1:d1:
9d:46:c5:b7:01:a5:b1:03:e0:b2:40:2f:06:a1:ba:
3b:35:d7:97:69:68:f2:fd:86:d8:bf:9a:8c:92:5a:
97:93:cd:46:e6:d5:fe:14:7f:21:00:f0:42:6d:d2:
e8:94:9e:d8:65:ed:c2:3a:21:65:9c:cd:27:ca:e9:
b1:cc:81:60:5d:b5:da:cd:4f:de:36:dd:10:9e:af:
d1:2b:56:26:c1:7f:e8:e8:fc:cc:3e:dd:64:eb:35:
e4:72:2d:69:e4:7e:d5:02:45:91:76:76:1a:9a:00:
df:78:13:39:55:a5:31:ee:ff:20:08:b3:d8:72:43:
f8:c3:ff:8d:dc:8d:ff:76:ed:df:ff:1a:e1:1e:2e:
d5:b5:b2:e9:d3:47:24:a9:f3:a5:6d:e1:b3:b0:ed:
17:34:99:57:25:a5:e5:d4:62:99:74:eb:e0:2f:66:
55:74:a0:3b:c6:94:e8:81:c6:fb:3a:7c:4b:5b:28:
f5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7D:53:97:45:FE:65:B4:39:41:96:E3:48:D5:9A:C8:AC:E3:9B:2F
X509v3 Authority Key Identifier:
keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:75:58:3d:22:2b:f2:9c:4d:bf:a8:3a:af:df:40:95:69:a8:
2a:e3:54:bb:dd:13:04:cb:6a:2b:cd:e9:da:5d:5f:03:82:86:
98:35:b9:b8:8d:5b:ea:13:2d:fa:14:ba:fc:87:01:8a:07:f3:
7f:f1:6d:15:90:f8:ed:13:c6:e1:0d:2b:35:1e:bf:97:b9:08:
a6:7f:3d:7f:a0:04:69:cb:0b:dd:a9:76:0e:ba:83:04:ed:a2:
ab:60:71:87:38:c3:49:4c:c0:6f:3d:97:45:65:4b:33:4f:05:
40:f6:b5:a3:9e:4f:51:2b:44:df:2b:90:06:76:89:73:7b:6f:
dd:fd:2d:2c:4a:3b:d2:35:be:a3:fc:da:90:51:e3:1b:c9:42:
b8:4a:bb:8d:b3:6e:cb:36:a0:69:a4:ee:84:a1:39:38:b1:da:
40:e3:f5:ea:4d:91:4b:2c:25:d6:c8:7b:29:c2:d5:63:b5:9c:
e8:39:d8:e1:b3:45:ee:34:9e:42:b3:c4:21:74:06:e1:62:b2:
d7:6c:da:46:05:27:d7:3c:88:23:3e:15:21:48:97:50:83:d2:
23:13:07:e2:ec:4d:79:80:11:57:dd:d9:17:36:08:b4:a9:1b:
f5:fa:e3:9a:2b:40:a0:2f:0a:5b:78:cc:54:b3:42:3e:e3:d0:
65:df:2b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:24:56 2026 by rpki-client