Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: AJ6fJjCPAu/ZT0tHLBzt9iw3X7i1TkKu8HxyfZHBbR8=
Subject key identifier: C9:98:89:DC:C2:0B:34:7A:1D:26:B2:89:94:21:72:36:3A:F1:40:6B
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 01A13D80F0D75BE0123338DEECF8F0F6D707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 1AAF
Signing time: Thu 15 Oct 2026 03:00:22 +0000
Manifest this update: Thu 15 Oct 2026 03:00:22 +0000
Manifest next update: Fri 16 Oct 2026 03:00:22 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: Hi0kAU7vcD/H2k9EQo5anKPYXbSZ8Y7PegcCHCqvOPQ=)
2: 6sTBdAYOdsPVCJ7oIkKrll3rRVI.roa (hash: yTR0IA9nFjjo1Ldxk+L5OOie2llv02FCoCgvYWgevjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:80:f0:d7:5b:e0:12:33:38:de:ec:f8:f0:f6:d7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Oct 15 03:00:22 2026 GMT
Not After : Oct 16 03:00:22 2026 GMT
Subject: CN=c99889dcc20b347a1d26b289942172363af1406b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ec:d2:d2:88:ca:d7:ee:72:e8:49:b8:7d:25:
4a:d8:e4:b8:8e:53:fe:0d:73:26:3f:af:2f:f3:1a:
8a:c0:8d:0b:04:a5:c2:ac:63:fd:94:64:f4:7b:ad:
f0:58:2b:6c:41:a5:ed:28:31:c6:66:34:a6:d9:b9:
52:32:4d:f2:91:ae:a2:4b:6a:a3:bb:51:02:f3:6d:
25:c9:e8:97:0b:ee:0f:1f:bb:7f:62:f8:b2:a6:7a:
68:2b:f8:f5:c3:06:c1:7c:1f:38:4d:6f:dc:93:9c:
99:17:e4:8b:ed:08:06:ea:4a:35:13:31:d6:8e:62:
a9:a6:44:61:00:9e:f4:da:aa:ed:6f:96:f4:d6:e7:
78:e3:77:7f:d8:4d:b1:5c:5e:54:09:8d:c3:3c:78:
66:02:38:4a:45:f5:70:3b:09:2c:ea:47:dd:9d:d9:
ad:83:a6:78:4c:a5:13:9a:68:23:97:01:5e:07:7b:
31:a9:94:46:8b:f7:7d:cb:34:66:16:16:e5:b9:9e:
48:76:c2:10:ee:2c:aa:7b:ae:6e:ab:f4:37:6e:6b:
e9:02:50:5f:4f:64:6f:ab:aa:27:48:59:35:67:12:
a6:7b:10:01:f5:f0:99:c7:a3:c3:34:21:60:cd:3d:
c3:d0:57:01:2f:1a:0a:a0:c8:a4:bb:ae:9d:26:bd:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:98:89:DC:C2:0B:34:7A:1D:26:B2:89:94:21:72:36:3A:F1:40:6B
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:b6:8b:8c:7b:6c:65:e1:22:29:5b:32:00:dc:af:d5:db:97:
72:6a:35:8f:ff:d8:02:50:ea:2c:b2:a7:28:87:af:59:d8:18:
fb:a9:8a:38:c7:b1:90:2e:55:1d:83:97:77:c9:ad:b3:d7:1d:
c4:82:6a:ff:7f:c9:a2:35:19:56:ec:3c:57:0e:30:6d:fa:42:
33:c8:a9:ec:3f:1c:c2:4a:0d:bb:b9:97:39:f3:dd:21:9b:82:
30:c5:be:57:61:ac:08:36:be:5a:e9:00:71:4b:df:80:33:f3:
44:b1:32:c2:6d:7a:56:22:09:86:73:8b:41:8f:18:ff:ad:a7:
6b:cd:c1:bf:04:1c:96:47:30:d6:24:6c:ca:67:f0:d3:1f:65:
24:aa:49:cf:7a:cf:ed:91:bc:59:f1:6c:8f:27:67:86:27:58:
1b:c4:ef:4e:86:47:00:3e:16:9f:76:62:39:4a:45:f6:48:89:
bf:50:60:6a:62:aa:81:85:6b:13:8f:11:5c:a1:dc:08:0b:57:
03:70:b8:83:ea:38:46:43:05:2b:ad:70:2b:f5:1a:6a:b2:e9:
93:fa:d5:47:f6:43:c0:b0:c3:15:c7:ef:1a:fb:d8:11:eb:12:
c0:fd:06:56:b5:85:d3:12:f8:3a:61:ca:64:35:07:43:66:19:
74:fe:c1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:22 2026 by rpki-client