Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.mft
File: 1Tm4aC89XOqjlcvPet7a2RFPqfk.mft (raw, json)
Hash identifier: o7f3Agk4r9siJDyl07phl2OScWNh3NtrmGinHZ2alVQ=
Subject key identifier: DD:5E:EA:C3:F3:64:21:2A:34:00:18:CE:4F:90:7F:89:14:F1:02:88
Authority key identifier: D5:39:B8:68:2F:3D:5C:EA:A3:95:CB:CF:7A:DE:DA:D9:11:4F:A9:F9
Certificate issuer: /CN=d539b8682f3d5ceaa395cbcf7adedad9114fa9f9
Certificate serial: 01A0F59FB67D3257A6204747487933168100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Tm4aC89XOqjlcvPet7a2RFPqfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.mft
Manifest number: 010A
Signing time: Thu 01 Oct 2026 04:01:19 +0000
Manifest this update: Thu 01 Oct 2026 04:01:19 +0000
Manifest next update: Fri 02 Oct 2026 04:01:19 +0000
Files and hashes: 1: 1Tm4aC89XOqjlcvPet7a2RFPqfk.crl (hash: gzlDcXXDtA8JRaHiBuRmCUmp2VDWDmE5wHqLp+f5oG0=)
2: AWbOy_liNGdmx811xpn2huXogl0.roa (hash: s8PFr9TztoBDWe3VrYxnh1Hk1tgm8rWogms1QJku0RY=)
3: B8fqsC3aShkcz3xinfEaCL9lJJM.asa (hash: mIOkxfOZ146cNVL+oCd/IPz7NJOCWL+FQcV3YMtA4Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Tm4aC89XOqjlcvPet7a2RFPqfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:9f:b6:7d:32:57:a6:20:47:47:48:79:33:16:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d539b8682f3d5ceaa395cbcf7adedad9114fa9f9
Validity
Not Before: Oct 1 04:01:19 2026 GMT
Not After : Oct 2 04:01:19 2026 GMT
Subject: CN=dd5eeac3f364212a340018ce4f907f8914f10288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:14:2e:11:8e:31:c4:19:4a:7a:0d:2b:cc:
f8:2c:2b:87:7a:f7:7e:d1:55:40:6e:1c:ee:75:08:
9f:9e:cb:3f:e4:ac:76:ef:17:0d:70:76:5c:93:aa:
c1:dd:bf:b5:01:fa:f7:e7:12:88:7c:dc:0c:0a:5d:
54:d5:47:e7:e9:b1:7c:10:c3:7c:6c:f8:df:a1:d3:
b3:c3:f1:f8:f5:d7:6b:6c:0f:b2:cc:59:fd:f2:66:
32:07:50:55:42:42:0c:a4:74:ba:d2:79:3d:0f:d2:
af:59:ee:52:02:21:a3:ea:47:ee:25:cc:d9:87:63:
1a:72:36:d1:f7:1b:ca:02:46:92:1b:26:2e:2d:c7:
fd:07:7e:4b:ce:34:83:cf:31:12:c9:ba:43:d8:3c:
8e:9d:35:69:fc:c7:e3:0c:02:87:6b:07:36:3d:85:
50:d6:d0:5c:0a:38:5f:bc:01:40:5d:41:da:55:96:
9d:5f:1f:40:13:57:af:5b:fe:0f:69:25:de:4e:f4:
54:84:c8:b0:ce:e3:35:11:0a:a0:c1:2b:3e:90:0d:
ba:23:f7:26:8d:68:bf:a3:ca:4b:c7:7c:7b:8e:60:
f1:e7:6f:b3:f0:0b:55:4e:ee:10:65:07:ca:c7:eb:
b9:f1:d9:03:eb:72:22:a3:70:c8:70:a6:40:54:87:
46:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5E:EA:C3:F3:64:21:2A:34:00:18:CE:4F:90:7F:89:14:F1:02:88
X509v3 Authority Key Identifier:
keyid:D5:39:B8:68:2F:3D:5C:EA:A3:95:CB:CF:7A:DE:DA:D9:11:4F:A9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Tm4aC89XOqjlcvPet7a2RFPqfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f1:ec:0f:2a:32:95:72:4e:2b:12:bf:71:56:31:9f:0b:ce:
1f:1b:8d:b3:87:87:ae:de:3b:7e:21:3a:b4:a5:52:a4:51:98:
4f:46:66:c5:c6:fe:da:f2:fc:20:2a:be:98:ae:9c:cf:e8:55:
bd:2e:c9:09:64:51:c4:26:a2:1b:8a:c7:0e:81:53:0b:45:1d:
5a:e9:14:f5:f9:39:7f:ce:49:6a:a2:13:c4:a3:86:78:06:d7:
bd:b7:27:ec:e5:0e:37:8e:9e:5d:58:e6:33:ae:15:fb:3c:25:
79:f9:2e:66:4d:27:2b:35:0e:6a:5f:0a:4c:9a:3e:00:ce:4a:
6f:4c:35:33:3e:0f:a4:f6:77:56:df:11:1d:f4:4b:49:1e:a6:
e5:9d:9d:cd:a0:02:6e:97:6e:97:2e:83:43:51:b9:93:af:d8:
4d:64:7a:7f:0e:de:4c:2c:34:49:60:18:e2:10:ac:88:e2:e1:
cd:0f:d8:b4:69:0c:27:bd:1a:7c:37:10:03:28:9d:47:f8:24:
a7:d2:04:22:13:a5:5e:9c:e5:73:c1:b2:db:f2:88:84:35:3c:
bf:c7:c1:3b:d3:71:3a:68:ab:6a:f0:41:ce:07:1d:5a:ed:ee:
43:41:de:7d:22:5c:f6:1f:15:df:91:2e:88:20:8f:60:22:4d:
7f:2d:cd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:33:56 2026 by rpki-client