Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
File: 1fPMerDTZIuMvnYlNTOnFLoAnAM.mft (raw, json)
Hash identifier: nCdFxPOqpAhLTaWo245d2K0u8ZzT6lTAuB+kmWPlRxs=
Subject key identifier: C7:3D:72:18:3C:15:95:34:98:CE:14:30:C6:50:F6:84:3B:67:6C:F4
Authority key identifier: D5:F3:CC:7A:B0:D3:64:8B:8C:BE:76:25:35:33:A7:14:BA:00:9C:03
Certificate issuer: /CN=d5f3cc7ab0d3648b8cbe76253533a714ba009c03
Certificate serial: 01A181BE167A8F54768D6EE49DA4CAE88856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:01:20 +0000
Manifest this update: Wed 28 Oct 2026 09:01:20 +0000
Manifest next update: Thu 29 Oct 2026 09:01:20 +0000
Files and hashes: 1: 1fPMerDTZIuMvnYlNTOnFLoAnAM.crl (hash: tUgdc4iWlQUlaKfuKXx2Sv8rzZgJXOiW5uVCrSjywXc=)
2: BVJvwz2lh6qW2nCUQKTYIFcAKjQ.roa (hash: kaLfha+ZH+y5bWDO7gX0LkZS212RgAQ6Anv4ur63M5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:16:7a:8f:54:76:8d:6e:e4:9d:a4:ca:e8:88:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f3cc7ab0d3648b8cbe76253533a714ba009c03
Validity
Not Before: Oct 28 09:01:20 2026 GMT
Not After : Oct 29 09:01:20 2026 GMT
Subject: CN=c73d72183c15953498ce1430c650f6843b676cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:96:d4:3b:18:bb:61:6d:9c:e8:a2:24:3e:
d5:ef:f3:a0:74:d8:95:1e:85:9e:58:cc:5e:67:60:
aa:40:5e:56:81:43:66:97:37:1b:c9:ef:3c:02:e8:
1d:57:44:c1:4e:6e:82:7b:b1:71:ca:0d:04:0e:9d:
1b:01:d7:1f:3e:58:03:c8:c1:f0:4e:c2:25:e1:4c:
3d:9a:0d:f2:be:56:bb:d1:10:4e:76:b2:5c:02:4c:
9d:a4:92:d0:c0:52:c9:3c:07:68:55:8b:77:0f:c9:
60:d3:83:00:37:cb:51:87:e7:6b:23:7f:ec:64:5a:
c1:31:d6:80:c1:d6:e5:c1:d7:e0:dc:f5:0f:8c:4f:
60:17:32:43:5f:ad:96:75:fc:ad:86:be:a2:37:61:
fb:da:67:4d:98:ad:83:14:a0:f5:bf:9b:6a:41:b3:
78:a2:ce:d8:fd:bf:37:29:69:ef:f2:c0:2e:d0:10:
43:0c:40:2a:c4:62:e1:9c:7b:6f:e5:f9:30:b9:a7:
e5:e7:56:17:c8:59:65:b4:4c:18:7d:1c:79:0b:19:
38:60:af:37:8e:1d:1b:10:9e:c8:03:b7:85:0f:c9:
d7:17:42:1c:0d:89:ce:c9:1f:bc:0a:b3:9d:07:6f:
28:8d:4c:b9:8f:dc:67:99:5d:2c:b0:ce:fd:a6:13:
ac:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3D:72:18:3C:15:95:34:98:CE:14:30:C6:50:F6:84:3B:67:6C:F4
X509v3 Authority Key Identifier:
keyid:D5:F3:CC:7A:B0:D3:64:8B:8C:BE:76:25:35:33:A7:14:BA:00:9C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:03:75:9b:11:6b:c1:fa:db:ea:7b:e4:a9:2d:fe:3f:65:1b:
4f:9e:15:20:5d:20:5c:70:ad:26:42:8d:13:74:90:62:1c:f4:
dd:cc:94:53:ce:e4:35:ae:7b:f2:cd:20:4a:45:ce:f8:8b:66:
e6:9e:8f:52:31:a2:c0:f9:ca:44:2d:50:11:a3:38:55:87:25:
1e:8d:f6:c2:19:7d:3a:d9:27:a8:69:49:fe:4d:ef:e0:e8:56:
e8:31:ca:0b:69:02:70:8e:db:56:eb:19:1c:ac:ae:31:b0:0c:
05:4e:17:e2:fc:cd:43:3e:e4:f1:59:4d:a4:fd:4d:d0:57:ed:
c3:f7:b6:f6:95:1a:b4:fd:c9:e1:4c:bc:6e:ef:42:31:b1:78:
65:95:56:b1:8d:47:82:50:1b:b1:ee:67:2a:63:54:0f:fd:61:
a8:db:a1:09:45:18:88:0a:bd:83:7c:29:02:c3:6b:74:bc:b0:
6b:15:de:e5:df:71:9d:a9:37:d2:f3:14:7a:66:1c:5c:3f:aa:
e7:d8:63:08:49:2a:e3:5a:bb:89:8f:9e:6e:59:2b:d0:c0:33:
64:c9:73:5c:bb:e6:d1:07:68:8b:11:72:37:23:a8:4e:6e:fc:
4f:2b:a4:94:c3:b4:43:21:88:8b:12:27:27:fb:02:c0:e7:9b:
e7:a0:a2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:13 2026 by rpki-client