Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.mft
File: 1J7IxkOjtRboTEp-pcJ8_MmrIsI.mft (raw, json)
Hash identifier: i2yFqMUYBYM6NtidiAufVs6si16Zp+iRSa9BFrkdiOU=
Subject key identifier: 9A:18:96:0E:E8:E5:74:B8:CB:1E:81:CE:9E:7F:94:79:27:64:70:9A
Authority key identifier: D4:9E:C8:C6:43:A3:B5:16:E8:4C:4A:7E:A5:C2:7C:FC:C9:AB:22:C2
Certificate issuer: /CN=d49ec8c643a3b516e84c4a7ea5c27cfcc9ab22c2
Certificate serial: 01A0D83BE6214D0B75CC79EBD0DB6BA77D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1J7IxkOjtRboTEp-pcJ8_MmrIsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.mft
Manifest number: 87
Signing time: Fri 25 Sep 2026 11:03:19 +0000
Manifest this update: Fri 25 Sep 2026 11:03:19 +0000
Manifest next update: Sat 26 Sep 2026 11:03:19 +0000
Files and hashes: 1: 1J7IxkOjtRboTEp-pcJ8_MmrIsI.crl (hash: s5rOmpy6SqFiW/oymng6f7WkUcCMxL+HbGU6se99mLY=)
2: cCHc2071jPUfSdxVw1hfya7219k.roa (hash: G7uzQDVgliOYaasp15D3RtdUjtrHzBqJYwkoucVPw7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1J7IxkOjtRboTEp-pcJ8_MmrIsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:e6:21:4d:0b:75:cc:79:eb:d0:db:6b:a7:7d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49ec8c643a3b516e84c4a7ea5c27cfcc9ab22c2
Validity
Not Before: Sep 25 11:03:19 2026 GMT
Not After : Sep 26 11:03:19 2026 GMT
Subject: CN=9a18960ee8e574b8cb1e81ce9e7f94792764709a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b3:66:51:1c:5b:73:2e:34:0d:81:37:af:3e:
50:22:c2:32:1a:a5:03:5f:11:10:b1:a0:7c:c0:9e:
b2:dc:c5:41:d8:5e:40:43:50:70:b7:37:1b:69:e2:
f6:6c:fe:f3:2c:1a:6c:79:1a:8d:dc:bc:44:0a:ee:
92:ff:8b:89:34:ee:68:dc:39:58:55:a3:8c:61:76:
b8:2e:bb:9d:a7:78:a5:0c:1f:15:3d:90:76:3e:a8:
f3:36:b3:43:5c:e2:e1:2f:eb:fc:15:7c:dd:e1:64:
f8:7e:2d:5d:5f:7e:88:0b:80:e3:eb:6a:80:d0:3c:
1d:76:9a:d6:a0:f4:71:4a:b3:8e:2a:3c:31:5b:3e:
f9:a2:19:cb:55:15:e3:86:73:ba:02:28:d2:bd:4e:
42:32:ad:f0:e7:83:11:c3:11:1b:71:ed:3e:f1:17:
1b:de:85:a3:30:07:de:98:da:ec:fc:59:32:5f:ac:
77:88:53:e3:d8:a9:b2:e9:59:55:36:3e:59:52:be:
f8:90:05:2e:a0:c2:38:a6:94:fe:c2:e0:2e:5c:24:
d4:12:53:8e:11:62:15:59:5d:7e:59:34:96:c0:20:
9a:2c:f3:83:b9:79:30:28:49:a0:ba:d4:fb:ae:ea:
30:b3:d3:96:0d:b5:5e:a9:5a:fa:9c:57:dc:47:9c:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:18:96:0E:E8:E5:74:B8:CB:1E:81:CE:9E:7F:94:79:27:64:70:9A
X509v3 Authority Key Identifier:
keyid:D4:9E:C8:C6:43:A3:B5:16:E8:4C:4A:7E:A5:C2:7C:FC:C9:AB:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1J7IxkOjtRboTEp-pcJ8_MmrIsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0d9aec-10a0-4202-8f4d-d806d8e4d433/1/1J7IxkOjtRboTEp-pcJ8_MmrIsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ff:c8:ef:c4:fd:72:d7:01:90:c9:7f:d1:de:3f:78:96:23:
89:1f:28:cc:29:6b:b5:c4:0b:0a:6a:f1:98:1e:86:54:c2:97:
a9:33:6e:bb:01:f7:3e:7b:04:c2:4a:ca:17:b1:72:5f:76:fc:
22:8f:56:2f:13:e0:8a:f8:43:60:79:61:2a:6e:35:3c:94:df:
14:79:bb:cd:04:cd:9c:3c:1b:3a:5b:cf:2a:d5:d4:40:91:d4:
9a:ca:4d:95:95:0e:9f:4b:1e:5e:25:2c:fd:b4:9c:ad:93:77:
40:ac:6c:7d:99:ee:bd:89:66:64:c0:f9:83:b3:06:f2:05:7e:
93:27:d5:ed:a8:f3:98:b0:60:af:04:de:bc:a4:bb:54:42:ca:
e7:76:92:70:d0:87:03:61:fc:43:9a:9b:1b:b5:74:4f:e7:d4:
da:79:57:b4:53:7a:b8:13:f1:d2:0b:45:ad:f7:f7:4e:1a:9e:
c0:84:44:d0:8e:ed:34:5f:1f:9c:82:76:2c:56:b4:6e:b7:c3:
8e:66:4a:06:82:51:6b:d8:1b:8b:94:af:30:81:8c:60:12:16:
a8:17:4b:d5:98:79:5d:04:07:e1:0a:29:60:ce:29:f6:6d:9b:
3a:6c:71:9b:77:24:38:90:30:08:36:11:71:cf:13:d9:a3:b9:
ac:8f:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:39:42 2026 by rpki-client