Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier: vS9yICKmTP8OEoI/p2L3BKx4CxZG4dOQg62moBWGe3Y=
Subject key identifier: 0F:34:49:A3:03:86:4B:E2:E4:1C:FF:CD:11:89:1C:69:BB:3F:86:17
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 01A001A66E4EF7F17502C2C8D7089A12A80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number: 068C
Signing time: Fri 14 Aug 2026 19:01:19 +0000
Manifest this update: Fri 14 Aug 2026 19:01:19 +0000
Manifest next update: Sat 15 Aug 2026 19:01:19 +0000
Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: unQKLrZ49hx9Ip/wXAr6rjbPcVrPHMfuMVq5JnJwFec=)
2: Z41uijNFQ0G-iZW7PiDpJ2EAmv0.roa (hash: AfUXmqvyv0xkNeTqOicnT0Mi5qeFfpzbGMDou/p87aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:6e:4e:f7:f1:75:02:c2:c8:d7:08:9a:12:a8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Aug 14 19:01:19 2026 GMT
Not After : Aug 15 19:01:19 2026 GMT
Subject: CN=0f3449a303864be2e41cffcd11891c69bb3f8617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:28:11:17:cd:6f:e5:fe:89:c2:7c:4a:66:28:
40:90:6e:14:bf:50:e6:6b:c2:1a:8a:1b:0c:db:08:
5b:eb:13:8d:0f:4c:f7:33:79:7e:bc:b8:22:73:fd:
fa:b6:dd:f8:40:ae:7a:d0:ba:5f:dd:d5:76:0d:a9:
21:17:d3:17:c4:f9:66:c3:54:ac:13:7d:14:0a:73:
70:03:cc:98:e7:77:e3:20:da:00:63:13:16:35:77:
e0:95:b7:e6:38:7f:ba:4a:fa:67:35:55:8b:22:33:
41:dd:72:f4:20:ca:7c:b9:32:bd:66:42:a4:33:2b:
ec:7d:2a:91:d5:a4:d7:55:d2:ac:3b:21:cd:68:f5:
21:c5:65:c3:20:f9:ff:ff:1f:ea:be:63:d8:ef:00:
73:60:3d:85:cf:64:ed:3a:1f:a1:eb:82:b9:34:e5:
1b:dd:b2:73:59:81:8f:72:eb:c2:7e:f2:39:64:6b:
57:05:1d:c7:75:20:a9:38:05:e1:69:99:91:27:cf:
18:91:7d:a3:d9:55:50:be:fd:f7:d5:c6:5e:0c:97:
b1:bf:67:9d:5d:d4:03:4a:a5:fb:d8:87:e5:1a:35:
86:4b:df:3b:f9:15:5e:e7:75:4e:f1:b4:a7:8b:cd:
7a:ab:98:8f:5d:8f:27:47:64:e7:56:e8:3b:bf:60:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:34:49:A3:03:86:4B:E2:E4:1C:FF:CD:11:89:1C:69:BB:3F:86:17
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c6:ff:ed:a3:46:23:8d:26:f8:64:51:5f:07:5c:63:26:f5:
0d:23:12:c6:ad:52:fc:c8:94:03:87:e4:6e:55:bd:c2:b0:ac:
67:db:d4:20:ed:70:57:e8:68:eb:0b:1e:39:13:d6:ce:b7:40:
db:7b:9a:13:d8:26:03:bf:6f:0f:79:c9:d1:38:ac:f0:7a:e6:
a2:be:52:e8:b3:1a:ef:29:14:8b:c4:05:37:c1:78:3b:22:36:
a1:85:01:e2:ed:6a:c6:85:22:b6:04:b2:43:99:6a:f9:41:18:
73:12:54:c7:1a:fb:f7:1f:9a:84:03:07:c9:9e:fb:1d:b3:5e:
7f:d5:86:f7:8e:1c:c9:e5:a4:aa:93:1d:81:55:98:ff:eb:ff:
3a:cf:a0:1d:76:e9:49:a9:b2:8c:9b:79:55:56:37:01:61:a6:
80:1a:29:e4:ac:c6:c5:76:68:31:41:98:62:14:af:b0:8d:15:
d3:b7:54:62:2d:d8:07:6c:f1:0a:82:09:ae:8f:28:32:68:97:
8a:e2:2e:e6:d5:22:e7:36:74:09:a2:76:d2:16:a0:f4:fc:4b:
f9:2a:06:e4:5a:b4:b1:a0:d4:36:1e:52:7b:34:c2:d6:32:df:
eb:41:bb:c3:f7:db:87:dc:58:11:84:b0:b0:af:28:c9:fb:1f:
a7:05:25:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:47 2026 by rpki-client