Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier: sdPMIqLfB4CUFkXoP36WBrqrsenpFrwKqts0PswalaA=
Subject key identifier: 1A:AF:1A:6E:CD:28:CD:06:6B:E7:28:A1:26:87:30:D7:7B:07:81:5C
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 01A163B34EE1113DE35B08F924A940401372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number: 174B
Signing time: Thu 22 Oct 2026 13:00:57 +0000
Manifest this update: Thu 22 Oct 2026 13:00:57 +0000
Manifest next update: Fri 23 Oct 2026 13:00:57 +0000
Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: RofXMvWEmmtrJ4Djaa+KP1MrMlJlrg0A2lTa/GTSs5M=)
2: 4ZvAi-gn1pF-qrIQmhpNRfK8kj0.roa (hash: fHKVM+9R/f9S25YhWf0k6ch7xqovB3duuxyKCTErDx0=)
3: IWwnPa171sfGXqpY2mWfswCRM5U.roa (hash: 6A+J6jDcFtUHVF1QTU8jgrZFLP13CFzG45TXvJZuPBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:b3:4e:e1:11:3d:e3:5b:08:f9:24:a9:40:40:13:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Oct 22 13:00:57 2026 GMT
Not After : Oct 23 13:00:57 2026 GMT
Subject: CN=1aaf1a6ecd28cd066be728a1268730d77b07815c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:d4:7c:21:3c:aa:90:34:fd:79:3e:07:cf:
5b:a2:48:79:e3:b0:fa:3a:8a:4b:37:f3:09:2a:c5:
f9:b0:ba:03:a7:cf:c6:75:72:bd:f6:84:6b:65:3a:
71:ad:43:47:d7:b3:32:4c:ab:b0:e8:78:11:66:ee:
7f:b9:38:3d:79:93:ac:d1:db:cd:5e:e7:a3:69:f3:
5a:51:05:ad:63:79:40:df:f2:4d:f6:db:7a:99:9d:
41:dd:03:f0:5f:c3:d5:ff:ac:33:99:a2:7b:e6:f7:
01:32:ac:1b:34:fd:44:c6:a5:99:6b:84:f4:f4:09:
35:58:12:6c:f8:90:e4:d3:a4:3e:78:ba:fa:76:bd:
75:f6:85:79:d3:34:30:73:9f:a6:bc:de:3e:a8:f4:
f6:fd:00:19:74:eb:ee:47:b1:1b:dd:26:fc:06:24:
63:3c:75:5c:ef:c7:68:71:0f:07:f9:d9:61:87:56:
5f:eb:f1:62:37:9c:42:36:75:dd:aa:ed:68:3a:b1:
1c:50:bc:9f:d6:fc:d8:94:f2:85:1d:8e:0b:83:c6:
a9:21:fe:25:f5:e5:f5:03:c1:52:75:be:29:44:dc:
e2:76:f4:9f:c1:70:1f:f4:fd:82:de:a9:57:c5:fc:
af:63:9b:3c:e3:27:4e:b4:28:e4:ac:91:b2:6a:47:
db:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AF:1A:6E:CD:28:CD:06:6B:E7:28:A1:26:87:30:D7:7B:07:81:5C
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c5:bb:0f:c2:77:bf:fb:07:94:73:44:a5:5d:ab:7a:b5:78:
41:f6:56:e7:ba:16:71:20:e0:6d:54:fd:59:99:a1:97:20:64:
b9:a1:b3:8d:ea:62:13:4d:63:25:b7:8f:d9:21:5e:af:3c:c5:
65:2e:e3:67:1f:bc:bc:f2:32:cf:bd:81:dd:5e:9a:f8:37:c1:
fb:75:a1:b8:cb:06:5c:6c:2e:a4:37:d1:18:26:27:a1:3f:b9:
64:d8:87:92:1d:86:1a:4a:2d:b5:36:d9:f3:95:7e:24:bd:d7:
8e:de:53:53:73:9e:55:47:8d:34:67:42:ba:3a:a7:f0:b3:7b:
dd:4d:b7:57:ba:65:34:a7:d3:7d:aa:e8:00:98:ba:8f:96:d7:
61:4c:a8:5c:4c:32:5f:ee:34:51:d6:25:e9:3a:bb:4b:20:b9:
86:b0:61:7a:d5:68:01:ff:da:8d:54:d6:0d:de:20:b5:44:a8:
01:dc:83:9b:ec:da:d1:2d:77:f9:69:e6:76:9c:96:50:f5:c1:
c3:17:85:b8:28:c6:54:8b:43:63:f1:1d:02:20:c9:a0:24:38:
b6:b0:7d:98:7e:eb:fa:d7:9f:38:e9:6f:d5:9a:b8:3f:15:05:
7c:66:55:5e:16:b8:81:67:82:93:f0:3f:11:60:11:ce:94:bb:
da:69:ae:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:43:18 2026 by rpki-client