Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: 0GvcvJ68pzAn6VbLTpjj2fko/vno0Of/EMF3plbFNYc=
Subject key identifier: 99:30:95:B8:AC:D7:F0:66:B1:FB:B0:A3:CE:99:9F:5B:58:D4:AE:EA
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 01A151AD0410BF180DDF88676C6B69E30CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 113F
Signing time: Mon 19 Oct 2026 01:00:55 +0000
Manifest this update: Mon 19 Oct 2026 01:00:55 +0000
Manifest next update: Tue 20 Oct 2026 01:00:55 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: gYSxs95yplJ9j2SpUw0dkdGalUr9v2JwlGm/KQ7ylsE=)
2: GAUiyTIFwXNYaLqpXS7shunphho.roa (hash: SFsb3Fni2JlQZLpt6X2EgEMJ9MLA34f5MeJx3huTFiM=)
3: GP7KWBDJ3szsdg470HEvQ_eBiTU.roa (hash: WISQGdJU8WS2sRXkUu1VfI+qv72otRs4wKcVECbAYnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:ad:04:10:bf:18:0d:df:88:67:6c:6b:69:e3:0c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Oct 19 01:00:55 2026 GMT
Not After : Oct 20 01:00:55 2026 GMT
Subject: CN=993095b8acd7f066b1fbb0a3ce999f5b58d4aeea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:ed:17:31:0c:04:b0:9e:03:fc:46:1a:0e:
f6:04:20:92:22:6a:45:eb:75:0b:09:51:24:38:14:
e1:5f:86:ae:30:16:51:bf:60:db:4f:72:9c:00:84:
b3:07:f5:ca:56:e3:e1:34:84:cb:35:c2:e9:72:e9:
06:48:90:ad:15:99:78:58:41:ad:80:39:c5:84:83:
6b:f0:67:0f:7f:94:52:cb:37:15:3f:62:3f:c2:68:
06:c3:c0:cc:06:36:86:a3:d4:8c:63:60:e0:e9:8f:
d0:85:3f:8b:01:81:66:f2:e8:06:3a:df:1b:a3:6c:
b4:04:9c:4b:22:19:f9:49:96:93:a1:a6:af:99:05:
1c:d3:89:ad:8e:fb:61:18:0c:bf:97:45:96:d5:51:
91:68:c3:8c:be:e6:41:06:e0:04:e7:ee:1b:e4:9a:
5e:70:c3:93:0f:e0:54:d7:de:7c:80:25:c0:a3:e4:
84:42:e5:e5:87:29:c0:00:97:82:50:34:23:dd:26:
b8:ae:c8:6f:d8:a4:45:7d:ac:16:b7:ae:f7:f2:9c:
03:46:72:be:90:9d:cf:f9:1a:0e:96:f7:12:e6:7a:
4e:37:dc:77:75:7d:8a:ac:65:a6:cb:e8:54:80:ea:
fb:d4:6f:6d:bc:96:9c:77:ef:96:98:45:77:c6:00:
d0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:30:95:B8:AC:D7:F0:66:B1:FB:B0:A3:CE:99:9F:5B:58:D4:AE:EA
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:82:a5:e3:a5:fa:37:59:7e:d4:91:52:92:82:7c:c6:a6:a4:
28:9a:f3:e8:cf:01:b8:49:2f:53:a9:8e:22:2b:5d:74:d2:b7:
c4:44:78:64:90:06:da:85:91:0f:99:60:36:01:b5:a6:1f:4d:
2b:74:ba:43:e5:89:8e:1c:fe:66:77:c5:68:b1:63:15:4c:f2:
da:7f:7d:42:a0:25:6e:2f:22:11:12:33:99:6f:dd:34:b7:8c:
96:d9:ba:bb:77:2f:7d:e8:b6:f9:0d:ef:d2:d0:1d:d5:b1:47:
83:57:ee:5e:f5:30:ef:78:17:85:4b:2d:ba:9b:b5:31:1e:64:
12:02:4e:1b:b6:50:c7:a1:64:0b:76:2d:ec:63:a5:5e:12:0b:
da:34:a2:8a:b4:40:99:2f:d4:f4:82:4a:89:c2:d0:23:cb:a2:
91:f4:da:bc:10:f8:e4:71:c6:f5:e9:02:11:2f:37:f3:06:54:
67:54:17:11:7a:e5:0f:6b:4c:b5:ef:09:00:e0:46:4d:45:96:
16:16:6a:19:a3:3b:ed:b2:5a:d4:5a:15:e5:19:72:d7:e4:2a:
b6:85:df:de:b4:ab:d7:c2:51:04:c3:77:9c:1c:4c:ed:b0:46:
dc:a3:ef:68:1a:11:8e:a6:50:1b:42:2b:38:2e:93:13:0e:3d:
8a:3d:67:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:01:25 2026 by rpki-client