Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
File: 1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json)
Hash identifier: /wkz6B6rE1/oUG6A+TiMk2lFtPTtsovHBZ8aDhacPZI=
Subject key identifier: 9B:4B:02:30:38:1F:6D:32:56:6F:1D:AA:80:05:BB:15:6F:40:29:87
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Certificate issuer: /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial: 01A17E86024271CC722C6E53CEBF218BA37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 18:01:13 +0000
Manifest this update: Tue 27 Oct 2026 18:01:13 +0000
Manifest next update: Wed 28 Oct 2026 18:01:13 +0000
Files and hashes: 1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: 4uHL+Chhw//i5Qn2HUGG6iIX7GZBFkwVYksgU5kdt0g=)
2: DoWhtMhiJd62u67yTypXkNyKc54.roa (hash: rOFqk1lXAk5Zo2qrvR0lJblhfPY81qij2Skbo2/XBYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:86:02:42:71:cc:72:2c:6e:53:ce:bf:21:8b:a3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Validity
Not Before: Oct 27 18:01:13 2026 GMT
Not After : Oct 28 18:01:13 2026 GMT
Subject: CN=9b4b0230381f6d32566f1daa8005bb156f402987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:73:67:fe:34:82:3a:3b:24:a7:79:19:52:3c:
5e:a4:5b:47:ab:e0:2e:72:da:24:65:d7:29:4a:65:
42:b7:01:24:84:fd:2b:a5:83:2b:b6:bc:22:57:0f:
49:b3:88:dc:be:08:0c:c0:8e:08:b0:7e:cd:d2:a9:
eb:5c:dd:7c:e1:36:72:5d:da:1f:0b:f0:c7:1e:f9:
2d:15:81:5f:42:b4:70:fa:eb:5d:65:a5:42:71:08:
ce:76:c3:7b:de:a8:0a:5c:c6:5b:dd:12:f2:b8:61:
f4:d3:76:7c:80:fe:76:23:e1:9e:c1:46:64:22:17:
54:1e:ed:c0:98:ac:18:b4:01:e8:bf:fb:61:c5:7d:
28:2a:a0:42:08:28:b4:50:a1:37:e8:28:ff:b2:e5:
77:9e:2d:ef:c4:bc:ca:84:37:69:1e:5c:3b:af:64:
91:63:e1:05:e2:ab:2a:05:ce:27:29:4b:f1:13:93:
19:c3:f4:d0:40:c4:60:b5:49:aa:8a:a6:fb:ff:67:
99:58:8d:ce:29:3c:8d:f4:1f:89:ff:13:55:ac:dd:
78:96:8c:0f:d9:7b:3a:b8:26:73:0c:6b:c9:b9:eb:
57:a0:f9:db:26:5c:90:79:d7:db:61:6e:28:01:11:
c3:ec:4a:53:89:ab:57:08:0d:e0:fc:a5:17:49:94:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4B:02:30:38:1F:6D:32:56:6F:1D:AA:80:05:BB:15:6F:40:29:87
X509v3 Authority Key Identifier:
keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:99:f5:9a:e1:b7:1e:ea:cf:4f:9b:7e:f7:a7:ac:40:c8:ec:
e5:09:ef:42:bc:47:15:05:fc:5a:b3:b1:6e:bf:60:ca:0c:c0:
a4:da:80:24:08:f7:6a:ca:1f:d3:a8:06:f0:58:5c:f4:0b:17:
7d:04:4f:dc:eb:d6:dd:b9:e3:9e:40:91:09:66:3f:88:e5:7e:
06:6c:0f:4b:09:bf:19:c8:17:30:0f:48:cb:ac:c4:20:9f:27:
44:5e:01:de:22:f0:22:cd:1d:98:6a:9c:b4:43:1d:b2:15:58:
09:56:92:ce:b0:cc:cb:5d:80:89:be:b9:f5:0f:c0:3f:63:98:
a8:d5:e4:78:e4:d9:08:37:3d:44:3a:f1:5d:5a:58:39:61:fa:
b4:0e:e1:81:3f:83:65:95:12:fa:5f:38:67:2d:19:f8:35:5c:
6e:78:88:fb:f2:0c:c5:fa:c2:93:5f:89:b9:4a:88:42:72:80:
d5:da:f0:e9:2a:f2:73:7d:c3:8b:82:70:74:a8:b5:01:f5:25:
7e:c8:91:08:4d:6e:fa:25:2c:31:3a:84:10:11:21:9f:9c:2f:
13:9e:28:de:4c:68:be:17:e9:1f:29:b9:83:c0:68:72:14:11:
1e:e2:e1:76:2f:06:3d:d3:65:68:17:b0:59:71:44:11:43:b5:
c9:68:c7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:04:24 2026 by rpki-client