Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json)
Hash identifier: STF9kFfuowDW5VTPbR87ZZJhQe13KA3dlFo/MmuojAI=
Subject key identifier: 46:17:2B:CB:98:74:10:F8:76:51:18:A0:2B:52:41:CF:79:D0:61:F2
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 01A08D1F87B0C5AD48AE3431C766597A72BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
Manifest number: 0454
Signing time: Thu 10 Sep 2026 21:00:48 +0000
Manifest this update: Thu 10 Sep 2026 21:00:48 +0000
Manifest next update: Fri 11 Sep 2026 21:00:48 +0000
Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: Jc4os5JL5BALq2M5C+KRTUMAThi03jAGrJ7HVrG31v8=)
2: _5wD3GhDQ1YTzFTjqBTWs_Q3la0.roa (hash: wo2o5ggTBU2w++bpEVrPqvzmJ1RgxdR3NpxYQHN0044=)
3: k3iM252MCayhLR_PBb595fv_baM.roa (hash: EbtrM8zDUBSt9GwmEMPTeNJfc3L8jh3H2e88Yy2j2HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:87:b0:c5:ad:48:ae:34:31:c7:66:59:7a:72:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: Sep 10 21:00:48 2026 GMT
Not After : Sep 11 21:00:48 2026 GMT
Subject: CN=46172bcb987410f8765118a02b5241cf79d061f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:93:ff:9c:72:11:e0:e3:bb:94:62:78:08:d7:
0b:4a:90:07:a4:ac:84:55:58:76:9b:92:b5:b1:76:
89:72:cf:3b:c3:16:90:ff:14:22:50:a2:71:a9:5d:
67:57:4b:a4:95:d9:0e:bc:c1:a5:2e:43:b7:fc:24:
67:2e:95:6a:a3:c8:2c:13:51:b8:a1:1e:99:f0:db:
cd:ef:82:5c:81:02:b4:c2:6b:ff:4d:7b:20:bb:e3:
fb:32:95:75:cc:0a:ae:da:cb:e1:f9:95:7f:8a:a7:
fe:43:12:ac:19:66:5c:08:49:b4:3e:93:54:76:1b:
85:d7:7a:91:4e:a5:87:dd:96:ce:a2:a1:d7:ef:cb:
25:bf:93:d0:71:03:50:16:59:e7:65:80:10:59:bc:
11:65:83:c9:62:82:ec:d9:b7:63:2d:b0:fb:5f:ed:
e2:fb:8c:84:93:14:e0:0a:42:ef:ef:22:8c:31:8c:
b1:af:13:c3:5e:91:97:3c:2d:3f:fb:41:92:35:c2:
e6:7e:45:25:78:b3:e2:41:cf:17:4e:15:24:7a:be:
3a:da:16:b5:79:11:46:fa:d4:59:66:03:b9:e4:8e:
ab:f2:22:48:cb:c8:33:b0:5d:6e:3a:dc:95:04:12:
a4:12:b4:7d:71:45:31:69:c5:48:04:39:12:c9:35:
f7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:17:2B:CB:98:74:10:F8:76:51:18:A0:2B:52:41:CF:79:D0:61:F2
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:29:37:e3:87:9d:ac:65:df:4d:df:f0:16:72:16:95:4c:04:
3c:62:e7:3a:a0:34:04:35:e8:44:f7:05:75:06:6b:c3:bd:b7:
77:18:df:e5:b8:81:74:81:b9:1a:6c:f5:96:5c:4e:8a:9e:d7:
ab:0d:05:d3:7c:0c:57:18:2a:d4:b1:b3:b5:8b:dd:98:04:2f:
37:10:7c:2d:3f:0d:55:f5:72:3a:4e:1d:28:db:43:af:a8:83:
7e:9d:dc:b1:a5:bc:15:f9:c7:81:a1:61:66:a2:4c:52:87:55:
52:9d:95:bd:ff:93:aa:ce:77:ef:24:69:e5:59:11:5d:8d:1d:
92:99:4e:81:32:a5:4a:44:14:98:64:fc:7a:49:21:37:3f:ff:
9c:fd:2e:36:15:74:2e:00:75:75:ed:ff:b9:6f:5a:5a:3a:05:
38:36:87:4d:48:57:c7:a7:29:10:fb:73:d4:4d:0b:f2:58:7c:
f1:21:61:ee:7f:c0:be:6d:98:c5:d1:90:2f:41:39:1f:14:72:
be:c1:4a:7a:b4:a5:0f:5a:85:15:cd:05:24:1a:11:c3:b4:ca:
dd:08:4b:a6:07:e1:4c:ef:af:5d:ce:97:4a:c1:99:ce:e2:4f:
99:fa:e3:79:9b:ad:de:06:d6:26:ec:2d:7f:1b:3e:cf:cc:a1:
73:04:10:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:36:52 2026 by rpki-client