Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
File: 1-c0pgMHHi89rubgKB5IFiwvK7Us.mft (raw, json)
Hash identifier: qb777anbk+K3aDX2Dnu/K6eAv54GykDlWLQzkMOhJTE=
Subject key identifier: 50:CA:A5:D8:47:5B:49:D4:5B:FC:86:12:5D:9F:40:D8:94:87:D0:FA
Authority key identifier: F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
Certificate issuer: /CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Certificate serial: 01A13DEEB8571EBE1F897CF15C90D636A337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
Manifest number: 1A63
Signing time: Thu 15 Oct 2026 05:00:17 +0000
Manifest this update: Thu 15 Oct 2026 05:00:17 +0000
Manifest next update: Fri 16 Oct 2026 05:00:17 +0000
Files and hashes: 1: 1-c0pgMHHi89rubgKB5IFiwvK7Us.crl (hash: AeOCZr1sWXTptHJzAW/q9vaEL4cnlWmRls1eZb+vYxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:b8:57:1e:be:1f:89:7c:f1:5c:90:d6:36:a3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Validity
Not Before: Oct 15 05:00:17 2026 GMT
Not After : Oct 16 05:00:17 2026 GMT
Subject: CN=50caa5d8475b49d45bfc86125d9f40d89487d0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:b7:e2:03:dd:60:97:c9:3d:c1:78:00:ef:
32:2f:00:99:fa:a8:01:89:bd:9f:82:a2:95:03:e1:
f3:78:81:21:ce:3d:ba:c5:3e:e8:ea:1e:f6:53:79:
a0:4b:b2:53:de:e7:d5:21:a6:8b:44:7f:70:6a:5f:
23:6d:a5:d5:76:8d:93:e3:2b:43:90:b6:ef:63:a2:
73:55:df:35:7d:46:f9:ed:0a:81:88:b6:24:20:66:
64:b0:49:55:0b:d4:14:97:ce:55:3b:67:00:8a:7b:
29:a1:d4:55:9c:3e:8c:0d:d6:d9:15:6d:97:05:d7:
ea:98:26:9d:1d:39:ee:0c:4e:16:33:27:67:75:7f:
d4:e3:c0:59:2c:4e:63:96:3d:bf:51:b8:6f:32:fd:
aa:b1:e9:89:a4:6c:4f:10:79:4e:2e:73:0e:46:89:
49:91:48:ca:5b:17:98:9d:8c:4b:81:d7:a6:ec:ae:
1c:db:bc:77:7a:39:7c:9f:00:bd:ec:9f:13:41:31:
27:53:86:de:97:36:4a:c0:89:cf:7b:f5:58:f0:55:
ab:51:a6:f0:99:42:30:4f:7b:a8:33:7d:a4:0d:6e:
88:59:e8:11:d6:09:92:5e:82:82:d1:88:b6:8c:9e:
78:5a:b0:2f:dc:6f:47:86:5b:19:bf:7f:0d:79:1f:
57:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CA:A5:D8:47:5B:49:D4:5B:FC:86:12:5D:9F:40:D8:94:87:D0:FA
X509v3 Authority Key Identifier:
keyid:F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c2:bf:2f:b7:f6:0a:00:9f:a4:14:d9:e3:f0:88:58:78:3b:
23:0f:0a:38:4a:51:a1:cb:b0:b2:fc:01:88:69:f3:80:ef:3b:
c7:45:ac:36:43:62:3a:4c:d2:4a:7d:45:ab:27:84:97:d4:14:
ef:bb:21:64:e9:de:b2:f1:25:d5:c3:62:f5:3b:d0:c3:f4:00:
5f:3e:5a:3d:36:c9:38:8b:80:a7:f8:8c:0e:24:7a:1d:a5:89:
a9:1e:4a:36:91:13:03:c5:0f:f8:91:44:14:6c:45:67:15:9e:
5b:b0:cb:9f:6e:75:9f:31:89:03:2c:14:e9:00:df:98:d4:c7:
ab:74:5e:ca:26:37:fa:a6:38:44:82:c6:73:ca:59:e0:b5:bf:
24:35:42:0d:e8:52:9c:80:32:2c:0f:2d:d3:90:e3:7b:b8:8b:
7d:4a:66:36:88:9a:ae:06:64:b9:4a:01:c6:f4:4a:3b:24:e4:
27:4a:ec:a0:b4:d7:42:0a:43:20:00:d8:41:63:bf:0c:16:f6:
0f:77:ae:28:ec:31:21:48:ff:a3:1c:7d:f6:8f:50:55:cc:fc:
08:d4:30:52:a4:ae:27:01:45:f1:bc:2a:4c:32:03:48:d0:1c:
7a:35:e7:9c:b2:7c:c4:2a:a1:52:5c:6e:68:bf:27:1f:45:84:
c2:2b:32:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:34 2026 by rpki-client