
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
File: 1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft (raw, json)
Hash identifier: li06nbkaoWyk+NZt8UmFRpHUDh+AOD01mertHJifgDw=
Subject key identifier: 29:FC:65:F6:00:C7:DA:8F:F9:06:A2:99:B1:CD:58:3C:13:55:17:21
Authority key identifier: D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41
Certificate issuer: /CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
Certificate serial: 01A13DEF5FE9F40CB721AEEDAD02493D5488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
Manifest number: 1AA9
Signing time: Thu 15 Oct 2026 05:01:00 +0000
Manifest this update: Thu 15 Oct 2026 05:01:00 +0000
Manifest next update: Fri 16 Oct 2026 05:01:00 +0000
Files and hashes: 1: 1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl (hash: KhsSj/qGdU1mwNt7Hcjf/Rl57l5vwRh/wzbsFCLetqA=)
2: WqEnKFzBfeJzGRg3q0xQA818br8.roa (hash: p62OMTqeflTKBBGHK0BkC6wtW0ZeWTlpmF+DHVQ50XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:5f:e9:f4:0c:b7:21:ae:ed:ad:02:49:3d:54:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
Validity
Not Before: Oct 15 05:01:00 2026 GMT
Not After : Oct 16 05:01:00 2026 GMT
Subject: CN=29fc65f600c7da8ff906a299b1cd583c13551721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:c9:4c:b4:4e:83:10:46:83:2d:2c:b4:00:
ae:9f:81:1f:8d:5d:d4:ff:50:0d:87:bd:03:f0:55:
f8:29:23:8e:96:42:58:36:20:28:21:c6:f2:f1:9d:
2c:7a:ee:13:cd:d3:ca:df:c6:a5:58:82:25:8f:39:
0f:63:81:23:ec:a1:d9:38:35:2b:7f:3b:1a:39:16:
94:ec:2a:d7:9e:c7:51:1b:c0:dc:80:38:8d:fa:ca:
dd:d0:fe:4a:8a:db:7a:22:55:f7:83:f5:7e:45:f5:
b1:24:8b:77:37:23:cb:47:20:a1:27:c1:81:23:60:
b6:01:0e:a1:10:14:03:24:76:b5:5d:b5:87:a9:2c:
6b:56:b8:ef:7a:37:95:61:99:97:05:40:65:d9:87:
18:fe:09:7b:58:11:87:2c:25:dc:00:7e:55:11:16:
51:a0:e2:9f:92:32:84:21:0f:ee:6c:08:fc:7f:83:
91:d3:29:a4:f1:57:d2:5d:20:e6:9f:77:00:ae:c2:
2a:cd:60:fc:1a:49:5c:fd:6b:a4:d2:37:a9:ee:cf:
7a:72:b9:92:ce:37:e2:2d:16:73:27:36:26:15:f6:
30:c8:05:09:1c:95:40:47:c9:8e:8b:ea:da:eb:cc:
93:18:2e:01:b3:03:2a:68:30:61:52:d8:d0:01:eb:
a3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FC:65:F6:00:C7:DA:8F:F9:06:A2:99:B1:CD:58:3C:13:55:17:21
X509v3 Authority Key Identifier:
keyid:D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:03:e5:f9:c2:f1:92:3b:77:48:a5:3d:15:dc:7a:3e:50:c5:
99:52:fa:d8:37:d0:97:d6:90:74:01:ae:54:3b:48:a4:bf:c4:
ca:be:f5:36:4f:28:75:55:ba:4f:50:c6:85:81:ce:25:bb:bd:
41:97:40:eb:4b:8e:ba:ea:38:97:96:4d:57:38:83:f5:23:06:
7a:65:65:0d:c4:7a:5e:d5:e5:a1:f0:0c:c3:44:20:51:1b:09:
74:92:2f:4e:c7:d2:ad:a7:46:00:88:02:89:2a:35:bb:30:4c:
15:de:e1:47:c4:6a:66:c4:b9:a0:a7:7d:05:71:b8:96:dd:cc:
06:50:8b:15:e0:9a:4f:b2:e9:23:11:ac:78:16:90:c0:51:c2:
fe:7d:6d:7d:07:55:c0:ac:8b:71:0b:31:5c:1f:f7:e8:d6:a0:
37:7b:2a:e0:cb:94:be:6e:8a:43:65:a6:58:2d:3a:99:7a:52:
66:4d:80:f7:91:c2:ce:ad:56:66:1d:16:d5:a2:92:d2:dc:4e:
00:27:48:d8:20:24:71:41:24:4d:dd:b9:19:5e:fe:b9:6f:4e:
d1:3e:95:44:4e:9a:4e:f8:e1:5a:ff:db:ea:bb:e8:4f:94:8f:
2a:cc:41:a4:9f:0d:2e:0f:65:6f:24:ec:20:77:11:bd:00:e6:
da:1f:d5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:08 2026 by rpki-client