Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
File: 1K5pV43Ol3ozqindV8oZD6aHd_o.mft (raw, json)
Hash identifier: QYVLUYjuaQtOMTGPRTSKoT8J3GSudZGUSZk0zWB499o=
Subject key identifier: A6:60:25:7F:DD:FE:7A:91:C2:2B:B3:42:67:2D:98:E0:26:23:39:53
Authority key identifier: D4:AE:69:57:8D:CE:97:7A:33:AA:29:DD:57:CA:19:0F:A6:87:77:FA
Certificate issuer: /CN=d4ae69578dce977a33aa29dd57ca190fa68777fa
Certificate serial: 01A13DB81CFE4E04011F6AF9CEA0CAAD647B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
Manifest number: 111A
Signing time: Thu 15 Oct 2026 04:00:38 +0000
Manifest this update: Thu 15 Oct 2026 04:00:38 +0000
Manifest next update: Fri 16 Oct 2026 04:00:38 +0000
Files and hashes: 1: 1K5pV43Ol3ozqindV8oZD6aHd_o.crl (hash: CtCd3sXTyslpLMa3n5I8i7UkscnkkUMRl1ZtTOJYSws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:1c:fe:4e:04:01:1f:6a:f9:ce:a0:ca:ad:64:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ae69578dce977a33aa29dd57ca190fa68777fa
Validity
Not Before: Oct 15 04:00:38 2026 GMT
Not After : Oct 16 04:00:38 2026 GMT
Subject: CN=a660257fddfe7a91c22bb342672d98e026233953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:ec:b9:4e:85:16:98:a8:db:88:9b:e4:79:
e2:85:55:f1:02:66:46:51:dd:89:c7:e1:47:5a:b5:
5c:ca:c8:6e:93:cd:e9:d3:5d:5a:2d:2b:05:16:27:
8d:b7:41:f3:b5:b3:cb:f5:e4:69:bd:81:e7:4e:58:
0b:51:9b:8e:90:f5:16:2f:88:59:0c:09:92:66:e3:
4b:0b:c8:74:ff:13:bf:a0:ff:3d:a3:65:74:47:3d:
98:55:52:b5:e8:ac:41:f8:f6:3d:1a:bd:85:83:8e:
bf:39:bb:5f:24:4b:40:3e:83:95:e9:93:1e:cc:fd:
8f:a8:5a:60:17:d6:90:f9:c6:2c:f5:52:60:c1:1f:
ec:17:9c:42:15:9c:90:72:86:58:26:26:27:75:6e:
0d:04:87:f8:2f:22:78:0c:46:96:81:4e:50:43:09:
09:34:bc:90:8a:38:2b:e0:fc:03:6c:29:8c:58:a1:
34:c6:7d:1e:c6:ad:73:7d:06:64:98:56:17:54:eb:
87:6f:55:05:e2:99:cb:f8:35:40:00:d0:89:32:33:
f7:f1:b0:83:c4:e6:c2:0d:ce:18:ec:9b:33:93:e2:
6a:2a:c1:64:4a:74:b8:92:15:70:fc:b3:d0:8e:4e:
26:e8:cf:63:c3:c1:3a:41:db:f3:46:fa:5e:0b:4d:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:60:25:7F:DD:FE:7A:91:C2:2B:B3:42:67:2D:98:E0:26:23:39:53
X509v3 Authority Key Identifier:
keyid:D4:AE:69:57:8D:CE:97:7A:33:AA:29:DD:57:CA:19:0F:A6:87:77:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:69:3e:e9:56:07:33:c6:b8:54:61:4c:1d:7c:58:c9:e9:6d:
60:ac:53:8c:56:a3:f9:cb:d0:72:a7:12:7c:51:ee:d3:13:cd:
27:b1:63:55:a5:4b:a2:1a:6c:58:16:ea:7e:11:16:a8:3d:2b:
6e:8c:5d:d6:f5:ff:f4:4e:65:39:1d:57:42:3f:62:2b:40:3b:
a1:6a:f6:22:72:f1:01:ba:1b:b4:01:10:8e:7f:29:4a:2e:38:
f8:0a:a3:52:07:14:89:18:e8:63:04:bf:07:bd:26:bc:11:4e:
e1:45:b5:6b:55:12:d4:81:d3:a0:9d:9e:25:f5:b4:e8:db:60:
c6:d3:84:20:8d:43:fc:1c:7c:92:e3:b4:67:67:11:c1:5e:ee:
d1:04:a3:40:7e:f8:93:d6:85:98:a9:35:0e:1c:d2:93:11:fc:
42:ff:18:68:fc:dd:aa:48:93:86:c1:ea:95:59:c5:06:89:e5:
af:b4:d8:da:22:bd:78:3a:65:5b:43:6f:74:c8:be:96:11:bc:
29:c5:41:32:69:7a:c8:3b:e0:b7:bc:99:ba:af:2a:d6:a9:48:
3d:aa:6a:a0:85:c5:78:b9:ee:5f:16:6d:93:15:c1:20:28:ce:
2a:37:40:ad:59:72:d5:cc:67:f9:68:19:5b:1e:4b:d1:2a:82:
d0:8e:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:07 2026 by rpki-client