Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File: 1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier: +UxlW3iCY940QQS7hkt3YjuBx/Z64cmldkuTY1uWhEQ=
Subject key identifier: 31:30:BB:75:1E:9B:E5:14:4F:AB:80:AE:F5:9F:7D:51:21:CB:88:34
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial: 01A05A7BCACFAE6E5547DD02D35B988C0BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number: 0CFE
Signing time: Tue 01 Sep 2026 01:00:57 +0000
Manifest this update: Tue 01 Sep 2026 01:00:57 +0000
Manifest next update: Wed 02 Sep 2026 01:00:57 +0000
Files and hashes: 1: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: eW8hN5R23lholhvHS3+e19Zub+P3l4RbBQkkElw/mIg=)
2: Ac8C988WG2rKoPAyM0PJx2rNaoE.roa (hash: 89LOHLJ7QAy8vGNQbBqFUdTxIH6fXbqoySpOcf8nHiY=)
3: Hs0IPvXPiiu5SRQabWCm2vLaUng.roa (hash: Jz9KhpCFWy1oS1Y7LmpahQlNI+tRAYvjIo9xoWdqMAY=)
4: IHsIqdWKW3oXqrv8CC_-_K3HeCM.roa (hash: dZCFigPRpz1prER5FdjelyGWWX2YW17+YhrDgGzAMCw=)
5: LpR-LQvQfXymcif_LMaWE0JZD3g.roa (hash: zhvd1luynFJPjxGKrx2N652wizkvdv3su1q7wp46nxA=)
6: URkF_3wWv4caQ7gSHuTsb7r6MGI.roa (hash: Gjnz59P638W/IUVQMIM+Nm7HP3jZwW2uLN6LQ+PZObA=)
7: hnX6AgrOaoGB1pS6d2IohDyU9YY.roa (hash: TyBpxjx7ARYI2/qA9SgTNdxkKgP/znTGEAT9++KH4mc=)
8: vAK4daozNSO59AKfeMnlfBD0uBI.roa (hash: BWOG9qwyAhGR7urMCtstbKhY8qOFr3C+wcw1uSuJqsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:7b:ca:cf:ae:6e:55:47:dd:02:d3:5b:98:8c:0b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Validity
Not Before: Sep 1 01:00:57 2026 GMT
Not After : Sep 2 01:00:57 2026 GMT
Subject: CN=3130bb751e9be5144fab80aef59f7d5121cb8834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7d:a2:8f:34:e7:c9:7b:36:2f:e0:45:e0:5c:
04:6f:d5:24:df:50:d7:d1:28:d1:09:e0:b1:19:c0:
35:1f:84:28:c4:93:5e:a0:6d:f0:e2:bb:6d:88:5e:
18:f5:8f:61:94:cd:10:88:ab:75:50:f1:38:c0:15:
21:e6:97:ad:0c:ab:ae:2e:0d:02:0f:96:0b:98:3d:
e6:c0:07:b0:0a:4f:9b:73:33:21:3e:88:dc:fd:48:
3b:17:d0:2e:e2:ea:00:c5:44:bb:63:16:f9:09:f3:
af:e8:29:bf:19:df:81:43:0a:d0:d1:23:e1:ad:30:
bd:a6:54:df:93:f9:64:72:1a:24:0d:fd:ae:49:a2:
d9:8e:c9:eb:4d:bc:cd:c3:e0:4a:8a:3a:cc:75:d0:
01:d9:8d:4b:54:c7:bb:1f:39:c4:25:0f:56:a8:b8:
98:b7:f3:b0:e0:bd:6b:23:24:24:3e:f8:11:69:a5:
48:96:87:e2:c2:f9:f3:94:e4:70:b3:cc:fb:ff:94:
63:47:57:ae:c9:60:7c:e6:1e:1a:07:47:20:82:d6:
36:59:6c:7e:e4:29:d6:34:3e:3d:53:71:d9:b1:6a:
b2:b9:c7:f9:d6:ed:49:56:07:c4:6b:1a:7d:de:68:
b2:0f:bc:0f:94:8f:d5:73:8b:68:da:54:a5:e7:f0:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:30:BB:75:1E:9B:E5:14:4F:AB:80:AE:F5:9F:7D:51:21:CB:88:34
X509v3 Authority Key Identifier:
keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e5:83:e5:41:ad:d0:7a:fe:43:28:a7:b4:2e:55:79:3a:a6:
1d:bb:8f:b4:5b:b1:ef:18:a2:61:6b:81:14:0c:1b:e2:ca:e2:
e4:f0:c9:2b:e2:bb:eb:d2:77:15:6e:36:b0:4a:69:38:d6:a8:
8a:7d:c7:f6:c6:13:31:db:28:45:64:6f:e4:c2:bd:ce:8c:36:
92:14:b2:6f:c8:61:61:d5:24:02:74:81:5a:a7:e2:97:ab:94:
0c:63:35:26:46:25:d5:0f:8e:f3:60:1e:45:53:db:61:af:62:
dc:0f:91:cb:53:ac:78:bf:5a:38:4b:9d:6c:81:c2:26:9f:25:
c4:48:7c:08:4c:87:34:9c:80:fd:aa:dc:79:44:b7:07:90:1c:
ca:63:b5:0e:be:19:d4:c0:b3:85:4a:6a:12:4f:90:ab:71:46:
12:6a:1f:5d:fd:db:1b:5c:0c:70:5d:10:bf:0c:b4:2f:db:66:
28:a8:d3:c9:a0:fa:80:e0:5b:97:bd:f2:b9:7e:a2:4a:0d:ab:
97:f9:37:a1:a7:ce:61:36:89:a1:7f:b0:e1:31:d8:2d:b3:8b:
0d:f7:5e:d0:9b:b0:88:05:19:cf:c2:7b:43:a1:e7:bb:a0:8b:
ed:4b:c7:94:8d:1d:21:d6:55:39:fe:33:85:43:e4:5c:59:63:
c9:b7:f3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:22:14 2026 by rpki-client