Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier: bJXYgFHttzmkLeE36IuEW9ErlH2s+Vx2OeuAHUC9jkE=
Subject key identifier: 24:71:DA:81:57:94:79:FF:B3:18:98:2E:1C:20:F1:13:6F:12:EA:28
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 01A119AB6C35813AB9E33BBCF698DBD0BEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number: 071D
Signing time: Thu 08 Oct 2026 04:00:27 +0000
Manifest this update: Thu 08 Oct 2026 04:00:27 +0000
Manifest next update: Fri 09 Oct 2026 04:00:27 +0000
Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: vDyckNB4hevw05Nq9Ngy/0SdS6DcsCdbSpsFliqt6+E=)
2: Z41uijNFQ0G-iZW7PiDpJ2EAmv0.roa (hash: AfUXmqvyv0xkNeTqOicnT0Mi5qeFfpzbGMDou/p87aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:ab:6c:35:81:3a:b9:e3:3b:bc:f6:98:db:d0:be:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Oct 8 04:00:27 2026 GMT
Not After : Oct 9 04:00:27 2026 GMT
Subject: CN=2471da81579479ffb318982e1c20f1136f12ea28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:60:f6:cf:88:e0:3c:31:ab:df:d8:fe:ba:
f9:29:53:20:ac:b5:29:57:de:dd:5a:5f:6f:56:fe:
55:50:13:bd:bc:9f:bf:b0:50:8b:0b:ea:2d:39:15:
14:28:1b:72:1c:ce:0c:66:2d:f5:8c:85:c3:46:05:
43:db:a0:5e:5d:15:65:3f:8b:0c:15:d8:b8:1e:99:
e5:a7:67:82:c9:f7:d1:90:63:45:9f:31:42:a0:26:
3e:a5:3e:6a:88:af:56:75:07:aa:c5:94:dd:b4:d5:
16:9b:70:66:c3:83:9c:08:6a:0a:6f:aa:7e:23:69:
65:58:e6:75:4b:fc:ab:c6:72:07:79:88:60:a9:11:
8f:32:e1:5f:b2:00:d6:a7:e6:92:67:b8:a6:17:d7:
db:d4:3e:36:5a:72:4f:39:88:cc:54:db:47:d1:39:
e4:63:60:d6:62:2a:99:16:35:21:04:0e:03:49:9e:
0f:d4:71:50:bb:26:14:06:20:33:b0:88:db:91:07:
a9:21:41:02:e3:0e:13:c6:0f:16:fa:2f:19:43:10:
22:f1:8c:2e:27:23:19:cb:86:d3:a7:d9:87:c4:5d:
fd:22:b7:3d:e9:17:97:29:a4:bf:dc:a6:ea:b7:8b:
cb:db:e2:76:63:c0:59:20:e5:84:71:b5:17:7d:22:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:71:DA:81:57:94:79:FF:B3:18:98:2E:1C:20:F1:13:6F:12:EA:28
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:00:61:a5:67:73:63:33:6c:d5:38:fb:19:79:b6:b7:8a:d0:
97:01:8d:48:9d:b7:8e:59:4b:34:98:79:92:b5:c8:93:a0:a4:
01:cb:ff:2e:31:4a:11:a0:a7:bb:09:3d:02:d1:a9:3c:82:79:
1a:61:e7:a9:80:1f:bb:da:fc:47:45:ac:9f:11:6a:de:a2:ea:
eb:45:97:20:39:55:02:4d:8e:d5:a8:89:5b:fa:5e:b1:aa:d3:
d1:05:25:9f:44:74:3a:40:10:3e:6e:39:80:8b:f1:27:b1:c8:
d7:8f:eb:e8:0a:b0:28:89:68:ad:ef:60:10:26:50:ae:c8:d3:
40:10:b1:3c:e0:42:1a:0a:7f:27:2e:e6:e7:85:bf:50:12:4b:
0c:1d:93:27:6a:be:33:a2:b1:e5:e5:dd:b9:b8:7b:44:d5:2c:
fe:d8:0e:7c:66:a8:7b:7c:cd:e6:65:0c:87:d2:31:b2:1c:c9:
e3:99:a0:94:cf:dc:ca:8e:08:f1:88:95:bd:73:cd:66:f7:e3:
5e:9f:3f:9c:a1:a7:08:97:a6:e2:5d:78:85:bd:b4:9a:1d:b9:
b8:c4:d8:63:49:f7:ee:71:44:01:5c:9e:0b:62:35:93:91:e4:
58:56:00:36:8b:86:d1:ce:44:3f:0a:34:5a:e5:2f:74:c4:28:
89:c8:74:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:15:18 2026 by rpki-client