Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
File: 1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft (raw, json)
Hash identifier: 7WnnMCZi+QtbijBZeCUNuODCd17JfxAyJYJkmZgcsMU=
Subject key identifier: 2B:CD:20:FC:C5:08:29:1A:62:2A:DF:3A:28:19:BE:D0:4E:58:3B:3E
Authority key identifier: D6:D4:AB:4F:B4:C5:76:40:56:48:81:DC:77:B3:A6:61:FC:4C:C4:35
Certificate issuer: /CN=d6d4ab4fb4c57640564881dc77b3a661fc4cc435
Certificate serial: 01A040BB96F0F18C343BD6BFCD309F1B95AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
Manifest number: 0388
Signing time: Thu 27 Aug 2026 01:00:30 +0000
Manifest this update: Thu 27 Aug 2026 01:00:30 +0000
Manifest next update: Fri 28 Aug 2026 01:00:30 +0000
Files and hashes: 1: 1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl (hash: Ev3CXivf7Ond88WBd5jggvWBdiMsw6OCWu3gkEs1g1I=)
2: hrDir8hInSlFPN-Q1uO1aajy_9g.roa (hash: LO9s/4upanODPdu0Y/QyxRsG/lztm/48QBv0SUqV5f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bb:96:f0:f1:8c:34:3b:d6:bf:cd:30:9f:1b:95:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d4ab4fb4c57640564881dc77b3a661fc4cc435
Validity
Not Before: Aug 27 01:00:30 2026 GMT
Not After : Aug 28 01:00:30 2026 GMT
Subject: CN=2bcd20fcc508291a622adf3a2819bed04e583b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:4e:02:29:ae:54:98:e7:48:b3:c3:c6:4b:
00:d9:8a:df:cf:d4:8c:9a:b6:eb:4b:c4:69:99:18:
8d:2f:9c:ba:86:98:dd:8e:06:ac:e6:97:d2:42:0d:
87:73:ac:3c:18:d2:a0:08:9c:8c:6e:7d:5f:5a:59:
20:b3:eb:64:68:1b:6d:a2:79:65:3e:b6:2f:1b:d3:
de:ec:5b:70:36:79:ea:44:e5:02:a7:e9:2b:e3:7f:
b0:a1:f4:03:ee:93:20:52:f1:df:70:62:c0:a7:51:
f3:d4:cf:96:e4:4e:8b:38:5c:d6:d0:1f:66:8e:66:
7a:e1:ea:13:94:d6:42:9f:e5:85:8e:d7:45:d9:df:
f6:f5:5f:4b:e6:d2:4a:f5:db:b5:d2:22:10:69:83:
3c:65:e4:b3:1d:23:c6:85:0b:2c:f1:32:99:39:ee:
36:07:39:49:12:eb:f3:a5:17:0d:b2:46:bb:f3:64:
f2:93:83:95:a2:9b:d3:69:3f:c0:90:fe:d5:40:a3:
df:39:1f:b2:45:f2:7b:2e:46:86:c3:dc:63:5d:26:
62:0f:2e:55:37:34:b2:ac:0f:a1:0c:fd:7b:24:74:
2b:ef:86:80:ac:aa:f9:22:69:66:19:d6:f9:4b:b5:
ea:d4:8a:b9:57:79:41:fd:ec:e8:cd:51:f5:4d:d7:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CD:20:FC:C5:08:29:1A:62:2A:DF:3A:28:19:BE:D0:4E:58:3B:3E
X509v3 Authority Key Identifier:
keyid:D6:D4:AB:4F:B4:C5:76:40:56:48:81:DC:77:B3:A6:61:FC:4C:C4:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tSrT7TFdkBWSIHcd7OmYfxMxDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/68e53f-70a8-43ae-830e-f9d6f4a33309/1/1tSrT7TFdkBWSIHcd7OmYfxMxDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:38:b4:90:3d:3e:4c:50:2d:77:60:0a:d8:44:97:2c:3e:d0:
b2:bd:59:04:a3:5a:81:c1:dc:d9:cf:6d:13:15:15:d5:b4:a0:
fb:08:e8:be:d8:99:5b:6f:fd:a2:76:45:ba:0b:80:5a:f6:76:
9a:be:92:3b:78:73:b2:80:3a:42:de:f3:0a:e1:de:b9:d8:b7:
82:5a:77:5f:66:8d:18:01:df:f0:25:64:4c:d8:e4:be:b1:70:
8d:01:9c:7a:05:d9:24:8d:14:ee:e8:6a:b1:c5:61:c2:33:a1:
ad:7b:76:c7:04:5a:67:0e:a5:e0:81:2c:75:e5:a0:08:1a:42:
f5:fe:2d:68:2c:eb:25:c0:d1:2a:99:4d:58:01:45:44:e7:ba:
37:46:23:d8:39:df:82:a9:a4:a2:b7:2e:74:33:b5:02:e2:11:
e3:3d:33:ff:c5:de:1e:11:14:dd:d9:58:37:a9:45:b3:77:e2:
aa:06:4a:28:05:b2:ef:e8:5b:f5:c2:f4:9f:0e:b1:49:65:77:
6c:4d:d6:e5:56:62:4b:2e:93:fe:d4:f7:db:30:1c:38:04:af:
47:5a:5b:da:5b:3e:d2:27:8d:eb:ec:03:4b:36:a1:f4:eb:a9:
aa:2d:64:d0:ec:04:ce:52:95:65:79:7a:6c:52:fb:8e:9b:a0:
fc:bf:77:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:34:00 2026 by rpki-client