Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
File: 1fPMerDTZIuMvnYlNTOnFLoAnAM.mft (raw, json)
Hash identifier: yb8WCGtlcusUgUw0XqfaagfBZL3fMYv5YHi9fVTP3EY=
Subject key identifier: DC:4A:DC:2B:FB:B8:5A:7D:21:6D:EE:BB:88:1D:D0:68:92:28:FC:9E
Authority key identifier: D5:F3:CC:7A:B0:D3:64:8B:8C:BE:76:25:35:33:A7:14:BA:00:9C:03
Certificate issuer: /CN=d5f3cc7ab0d3648b8cbe76253533a714ba009c03
Certificate serial: 01A0412AE599BE95F529802F8D234768A42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:02:05 +0000
Manifest this update: Thu 27 Aug 2026 03:02:05 +0000
Manifest next update: Fri 28 Aug 2026 03:02:05 +0000
Files and hashes: 1: 1fPMerDTZIuMvnYlNTOnFLoAnAM.crl (hash: 3UWAsVD4bgv7pI7RxClHZypTGHy9IlFHMEGyoj7waSo=)
2: BVJvwz2lh6qW2nCUQKTYIFcAKjQ.roa (hash: kaLfha+ZH+y5bWDO7gX0LkZS212RgAQ6Anv4ur63M5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:e5:99:be:95:f5:29:80:2f:8d:23:47:68:a4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f3cc7ab0d3648b8cbe76253533a714ba009c03
Validity
Not Before: Aug 27 03:02:05 2026 GMT
Not After : Aug 28 03:02:05 2026 GMT
Subject: CN=dc4adc2bfbb85a7d216deebb881dd0689228fc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:41:5c:11:6e:73:c8:2d:65:e6:f6:2b:cd:b2:
52:64:3a:29:bc:77:d5:c7:bd:47:8e:63:36:ce:59:
39:17:8b:35:c6:0a:a6:a3:19:af:8e:65:de:b6:ed:
14:8a:25:79:0d:41:4b:cf:ce:f8:08:33:47:ee:c8:
47:ef:9a:4a:ee:8f:a5:56:00:f8:08:6b:04:87:33:
c4:80:d3:8b:e1:4f:bb:c1:22:e7:da:78:08:23:d9:
8e:bb:50:ca:3b:08:1e:9f:c1:6a:35:a2:b0:65:6d:
b5:81:37:84:bc:38:68:0e:1c:ee:6d:cd:76:c9:83:
b9:9e:f1:89:c8:85:e1:ae:76:56:77:7e:20:26:74:
39:c9:c1:4a:b0:e9:43:e3:83:b2:38:82:74:92:e1:
6a:97:16:92:b8:84:75:f8:14:5d:ac:aa:0d:b1:3d:
47:8b:2d:ab:bb:1d:c1:30:37:15:d3:09:d9:d7:e4:
5e:09:16:e9:11:aa:15:1f:4e:bc:4f:16:8a:f4:2b:
fe:3d:dd:19:4d:2c:3d:58:b4:88:27:12:17:3b:5d:
34:e5:c0:d6:1c:31:7c:12:11:ba:75:0d:84:5e:5b:
76:7f:c1:5a:92:f6:10:6d:24:23:ce:18:dd:d4:7f:
fa:ee:ed:ee:26:20:d0:da:eb:18:5f:e5:40:78:3c:
cf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4A:DC:2B:FB:B8:5A:7D:21:6D:EE:BB:88:1D:D0:68:92:28:FC:9E
X509v3 Authority Key Identifier:
keyid:D5:F3:CC:7A:B0:D3:64:8B:8C:BE:76:25:35:33:A7:14:BA:00:9C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7a:39:14:96:17:80:d7:a6:f7:9c:e7:50:6e:1e:9d:d3:92:
c0:3e:c6:5f:72:26:3f:f6:7a:d3:9a:ca:bd:36:4b:73:0d:1d:
30:02:f0:4f:74:eb:82:23:9d:5d:47:04:ba:80:3e:f1:bb:a9:
36:54:d7:d4:f1:85:7f:22:3c:3b:6f:fc:54:f0:c9:e0:59:bb:
63:bc:8e:9e:af:6a:d1:00:7e:19:67:b3:0c:7b:6e:5e:7f:19:
55:59:92:ee:ad:6a:28:9b:2c:b1:9f:5a:14:b5:67:d7:2f:0e:
d1:0f:dc:5e:9f:da:49:51:a5:bd:12:08:1b:2d:d6:b2:3d:21:
bc:72:49:68:3b:2c:f8:87:10:a9:1c:0b:26:4d:5c:bb:c0:44:
60:b0:e3:27:35:36:fb:f8:c8:22:15:4c:b2:9e:f3:10:2c:24:
81:20:9a:2f:9b:1d:ec:81:e5:ec:57:9c:5f:55:56:05:dc:e2:
3a:85:e2:7d:64:2b:72:6b:c3:8e:82:84:37:e6:f9:ba:1e:cc:
90:c3:e1:c8:d7:7f:24:3d:1c:c9:ff:46:42:d9:78:d5:ec:70:
44:c8:82:94:f4:5f:cb:a5:5e:03:51:22:4c:9c:c5:44:ad:31:
da:e1:06:7d:81:89:53:e3:d3:05:e5:4d:93:61:5b:87:29:3a:
c8:13:bb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:41:01 2026 by rpki-client