Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: /aJqPo3H1FWx4pjxGPjFYcKv9VC9UsDjQ3qeMBR7CFU=
Subject key identifier: AF:15:5A:3C:9B:64:40:D1:18:C7:84:60:CF:05:52:3B:3E:49:4A:47
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 01A1558A15AA358ACCE57D85AB47BB4AECEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 1141
Signing time: Mon 19 Oct 2026 19:01:14 +0000
Manifest this update: Mon 19 Oct 2026 19:01:14 +0000
Manifest next update: Tue 20 Oct 2026 19:01:14 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: 394s0QpaUBSMS7mEgdjc8sO27G+boNYWPS3ICYn8z6Q=)
2: GAUiyTIFwXNYaLqpXS7shunphho.roa (hash: SFsb3Fni2JlQZLpt6X2EgEMJ9MLA34f5MeJx3huTFiM=)
3: GP7KWBDJ3szsdg470HEvQ_eBiTU.roa (hash: WISQGdJU8WS2sRXkUu1VfI+qv72otRs4wKcVECbAYnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:8a:15:aa:35:8a:cc:e5:7d:85:ab:47:bb:4a:ec:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Oct 19 19:01:14 2026 GMT
Not After : Oct 20 19:01:14 2026 GMT
Subject: CN=af155a3c9b6440d118c78460cf05523b3e494a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:ac:2e:a1:28:7e:e2:b2:be:e6:3c:e9:28:
1d:ad:1b:1f:30:2b:b1:58:59:f6:2e:be:12:1f:fa:
92:0d:43:bc:b0:7e:9c:79:7e:de:67:1a:5b:44:9e:
09:c7:91:bb:06:03:d8:22:b6:82:aa:ce:43:f7:22:
a5:72:f1:e8:b3:dd:0e:13:58:7f:bf:97:a3:25:9f:
e1:f4:e9:41:e0:a5:7a:22:6e:1c:5b:ba:df:31:f3:
25:c2:22:de:77:e6:fd:cf:8d:14:11:d3:6c:55:12:
3e:49:4c:14:10:47:93:40:3e:2b:57:fb:8b:71:e0:
da:f9:02:cb:a4:87:77:ea:52:6a:f7:cd:aa:b7:d5:
70:79:17:ef:b1:84:93:b8:23:d1:1b:18:51:d4:54:
0d:7e:24:e2:cd:5f:66:12:56:d1:ec:a5:ae:50:9c:
37:a1:b4:03:31:20:0a:20:4a:1c:99:31:22:cf:41:
b2:78:13:b8:7b:89:58:8c:54:6c:11:43:1b:91:c1:
77:b7:fa:90:66:5e:e1:97:e0:bb:90:fd:38:8b:2c:
82:7c:82:89:4f:60:2a:71:66:f6:6e:5e:f5:48:ea:
a8:d7:37:a1:06:f3:33:3b:3f:2f:fe:6c:1b:e2:49:
67:a9:90:5f:05:b3:de:73:2e:82:b4:b5:da:55:89:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:15:5A:3C:9B:64:40:D1:18:C7:84:60:CF:05:52:3B:3E:49:4A:47
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:26:b8:b8:34:5f:91:cc:e3:f3:87:61:28:6a:2f:13:41:48:
2b:29:91:a9:e1:9c:53:f1:35:88:5c:36:57:a8:23:24:8b:fd:
80:e6:20:7e:b2:e5:39:b7:fd:ba:7b:a5:d6:fc:8e:48:82:d6:
2b:0a:eb:ef:17:7d:36:d9:69:a0:e1:65:a7:4c:9a:19:bc:4f:
43:03:7e:74:ac:d8:57:39:17:a5:72:47:4e:3a:d2:34:db:5b:
7b:43:da:29:a9:86:ad:a6:d2:24:a5:73:15:9d:1f:2c:da:1e:
07:22:fe:15:bb:61:d6:d9:8e:8f:ca:48:61:a0:7d:14:49:68:
ea:61:d6:de:15:7f:94:50:c5:71:d7:38:7c:2d:42:4d:c0:b9:
b1:01:fe:20:b2:e2:95:1b:fd:a5:0a:86:a4:f3:a7:46:16:2a:
e4:d3:6a:83:24:87:0b:09:3f:9a:9a:24:e1:c8:b7:0b:2e:91:
9d:b3:f8:16:58:de:61:1b:9e:18:38:cf:81:3f:99:34:e6:29:
45:00:0d:49:ec:95:66:eb:fa:86:64:98:79:55:9a:c8:bf:cb:
ba:0e:cc:67:60:b5:95:a0:3d:c7:a3:7b:8e:35:c5:62:65:da:
a1:69:e8:2a:32:5c:bb:ec:01:fb:6b:2a:30:08:8e:b5:b4:3e:
72:ef:5c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:50:29 2026 by rpki-client