Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: hOpt4IWNrLId/HpfoqtAn9B2xyxFcd1LUD7u4iAU7Co=
Subject key identifier: E2:AF:4D:DD:C9:91:99:CA:A1:E7:3D:01:8E:81:07:5E:FE:F0:17:F8
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 01A13AEE308E49997FE8FE34A57A58713A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 1AA8
Signing time: Wed 14 Oct 2026 15:00:50 +0000
Manifest this update: Wed 14 Oct 2026 15:00:50 +0000
Manifest next update: Thu 15 Oct 2026 15:00:50 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: fMPF6dUzUjqo3+ECoKGq2/GkKpEUIKbv4Eig1sFkIF4=)
2: gMgy66IeqRUWzHc_Tz_B5xCML94.roa (hash: alaMur7cm6u5buHk6RtnuNKVEJYn50JpsYiMrntsAII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:ee:30:8e:49:99:7f:e8:fe:34:a5:7a:58:71:3a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Oct 14 15:00:50 2026 GMT
Not After : Oct 15 15:00:50 2026 GMT
Subject: CN=e2af4dddc99199caa1e73d018e81075efef017f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:66:30:73:f4:59:53:3f:3a:b6:bb:87:1f:
9b:0a:91:94:28:6c:a1:8e:11:5c:ef:23:a5:91:b4:
77:39:96:21:c1:2f:49:26:eb:f4:e7:f0:26:09:97:
56:02:8e:6a:2a:f5:9d:ae:7b:17:62:a8:35:f2:2b:
30:e7:43:52:99:15:3a:47:6a:29:2a:8e:a2:be:18:
10:60:59:b4:95:f2:bd:6e:ce:02:33:35:79:1e:ae:
6f:a1:86:5b:e7:d9:95:6e:96:5b:89:53:ca:26:df:
49:9c:6c:45:3c:60:72:38:06:14:cc:58:23:62:2b:
89:e3:5a:07:2d:00:d7:45:53:7d:01:fd:5c:1d:06:
8e:bc:1c:da:83:42:29:9f:e4:21:bd:2d:a2:03:5d:
b5:4c:fd:f4:97:64:bc:08:97:ae:ed:0c:ac:41:45:
ce:aa:ed:b9:e5:07:86:2d:a3:95:fc:08:c3:b6:e0:
3d:1b:03:ab:8f:9f:d5:0e:c5:2f:dc:0f:ff:92:5d:
a3:65:c1:ba:b6:75:c3:0a:26:bc:f3:f9:cc:18:a1:
a2:01:80:7d:ea:d5:ef:80:37:46:a9:0d:9e:1d:c7:
08:ba:bc:73:f1:ec:ae:46:fe:e3:4d:86:88:4b:75:
5d:8e:27:18:22:94:e4:31:71:d6:f0:e7:db:aa:6a:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AF:4D:DD:C9:91:99:CA:A1:E7:3D:01:8E:81:07:5E:FE:F0:17:F8
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:08:4f:ee:3f:9a:4d:ce:a5:bd:bb:30:ac:80:11:a4:54:0a:
f0:3a:91:3a:bb:5c:23:d2:f0:11:06:9c:5c:f8:2c:11:02:de:
b7:28:3a:34:9d:5e:28:c2:19:7b:57:32:3d:1e:7b:09:0e:ec:
7c:8a:d0:0b:ea:62:cd:f1:d8:96:29:21:6e:c9:ab:c4:f8:d8:
ff:ed:c0:21:90:32:a0:db:92:c6:59:00:62:08:cb:db:92:0f:
8b:c5:2c:b2:08:9d:ab:25:e8:82:0e:f5:27:03:12:99:15:1a:
16:e9:a6:93:43:8b:8a:35:22:7c:d7:38:9e:cf:2f:e6:19:53:
c4:81:5d:b7:77:38:d6:ef:be:4e:46:b2:e4:ae:fc:eb:b5:bb:
c0:7e:30:43:e6:29:95:9d:fe:b6:f4:df:9b:d5:b7:a0:28:b8:
53:16:66:39:de:43:dc:11:f1:da:cf:e1:b8:d9:df:62:eb:88:
1e:ed:21:28:f9:67:a3:c9:20:d9:56:69:d0:c3:ce:76:32:98:
26:dd:a4:0d:46:4f:21:13:2a:63:59:04:d0:c1:74:48:9d:38:
f0:29:ff:eb:dd:9e:2f:14:22:e8:12:70:14:a4:8e:b7:d4:ed:
fc:7d:73:5e:5c:31:00:46:03:7a:cd:77:33:0f:55:4a:12:e1:
90:1c:53:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:08:01 2026 by rpki-client