Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier: ptKYhUGVdjmY88F3vvDeNiVWNcHna/HeIVd1Z4hMQ8w=
Subject key identifier: 21:5F:E5:21:63:B4:60:AE:09:FF:F6:42:1D:96:B5:88:72:7B:4C:7A
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 01A13F70C610F72590B4E4E10AB5A20E3974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number: 0FB4
Signing time: Thu 15 Oct 2026 12:01:57 +0000
Manifest this update: Thu 15 Oct 2026 12:01:57 +0000
Manifest next update: Fri 16 Oct 2026 12:01:57 +0000
Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: G1cfNSwpqw4w5XRiT7Yyv6FiWuEyyO7g6uYUN6kmPeQ=)
2: 3SGaIwhtWysQLWn0sQ-j25aYWzk.roa (hash: 6nFcHI9+JyUVi2ufE9HEixwgDofNaQHxTSquSnDsJV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:c6:10:f7:25:90:b4:e4:e1:0a:b5:a2:0e:39:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Oct 15 12:01:57 2026 GMT
Not After : Oct 16 12:01:57 2026 GMT
Subject: CN=215fe52163b460ae09fff6421d96b588727b4c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:6b:41:3e:1e:07:4d:ee:69:0f:ba:d7:7a:
0a:7b:c5:e9:41:1e:b5:1e:9e:63:dd:ce:0b:f3:f5:
4d:a7:ba:3d:b4:58:2e:f9:ad:a3:8e:2e:9d:a3:81:
7d:44:ba:f2:c4:44:e1:3e:c4:14:3b:3f:28:cc:c8:
d6:46:91:dc:e2:92:db:45:0e:f9:15:4b:80:ff:50:
66:a3:e4:9d:67:32:94:a2:af:74:3f:22:ca:da:0b:
25:8b:98:55:c0:3a:c7:71:ee:aa:9e:c9:aa:b9:4e:
bb:ba:90:d9:b2:06:97:fa:f4:bd:94:66:0a:e9:8e:
05:5f:b6:c9:75:03:69:f4:58:f5:f4:0d:8d:95:64:
54:3a:6d:11:64:52:37:e5:0c:e9:61:f1:58:19:03:
ee:49:1d:b0:a6:68:6f:c2:62:28:97:af:fe:7e:d8:
31:a9:90:5e:5e:40:6e:db:5f:02:dc:cf:5c:98:1d:
2e:0d:66:30:1a:80:ee:aa:44:b6:ed:88:0a:26:b7:
a0:43:c8:b7:48:c0:a7:cf:2d:45:6b:87:55:4e:0e:
92:f2:7f:f9:a5:01:05:d0:f2:92:fd:3b:0e:86:19:
b0:93:37:a1:fd:da:7e:c4:45:97:55:93:9e:d5:97:
07:84:a0:2b:70:2d:1b:e4:3f:e3:de:34:df:3d:83:
a5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5F:E5:21:63:B4:60:AE:09:FF:F6:42:1D:96:B5:88:72:7B:4C:7A
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:08:d5:05:6f:29:2c:b4:07:65:5a:de:9e:bf:67:3b:b5:e7:
6f:90:65:a7:38:f2:df:e5:2c:dc:d5:09:48:9a:9e:17:38:16:
df:da:cd:2f:ae:52:e6:9e:37:dc:63:c1:35:38:d0:2f:59:89:
49:52:6d:7e:49:0c:78:d5:f3:46:7b:56:0f:8c:ae:2a:3e:c4:
b5:6e:c0:73:06:7c:36:41:53:89:13:42:ac:ad:03:f6:4e:5e:
7c:61:18:a0:69:39:bb:2f:0d:18:d2:d1:aa:f8:0e:25:9a:84:
e0:df:11:f7:6a:b0:93:c6:e2:0b:71:56:d1:fe:05:83:2d:02:
30:65:bf:71:01:04:76:d5:2b:71:13:b1:cc:ca:2d:1b:54:d5:
5a:d2:91:ed:92:4b:68:08:06:61:4f:3b:e8:9f:ff:6e:42:e8:
9a:94:cb:1f:ea:6a:b0:6d:0c:e5:fb:62:54:e8:ba:fa:e8:4c:
a5:e3:93:cf:16:7d:a1:c3:60:2a:17:c5:2a:5d:b4:4b:8e:6c:
45:2f:99:31:ca:53:df:e1:24:83:c4:56:0f:ab:6d:c9:8c:5d:
42:c7:bc:4d:dc:97:2c:a4:51:a1:70:d1:0c:ba:e9:a8:2c:43:
a6:94:13:ff:63:38:e7:43:38:e6:da:97:cc:9c:56:4d:cc:66:
2f:60:77:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:55:08 2026 by rpki-client