Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
File: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json)
Hash identifier: qoZ1WQHgxNrE2qzLwMXPL+Q9nWJdqnyXRDttyXhUlV0=
Subject key identifier: E4:87:37:21:35:6F:38:6B:6A:8F:60:6F:7C:61:02:E8:A0:32:20:88
Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Certificate issuer: /CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Certificate serial: 01A13F0270283EB34124B3E1CEB4C7F1642B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
Manifest number: 13CA
Signing time: Thu 15 Oct 2026 10:01:26 +0000
Manifest this update: Thu 15 Oct 2026 10:01:26 +0000
Manifest next update: Fri 16 Oct 2026 10:01:26 +0000
Files and hashes: 1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: tmsz3VCNvPnXt7o+l9hDwfu7Lqq5HOZWJLSDueXg4eM=)
2: pBTRVkc_doy_5j6u74030-iWNL4.asa (hash: HIr4MkFNBXijh4gfuyioBh9G9eQXpFucU0HMCBxifKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:70:28:3e:b3:41:24:b3:e1:ce:b4:c7:f1:64:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Validity
Not Before: Oct 15 10:01:26 2026 GMT
Not After : Oct 16 10:01:26 2026 GMT
Subject: CN=e4873721356f386b6a8f606f7c6102e8a0322088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:81:e4:10:50:ab:49:bc:98:79:c5:ff:77:
ca:42:a0:c5:6b:4f:a9:12:87:41:f9:1b:d8:32:43:
98:35:e8:ee:6f:a4:ff:7c:d5:4c:d9:89:02:95:e4:
ac:c1:00:4a:7d:93:fc:34:14:b9:a3:8c:cd:a7:96:
c2:95:24:c0:ff:b2:85:ca:0a:5b:8f:be:86:bc:b1:
91:0c:5c:d3:74:91:38:a1:85:a9:0c:a0:37:20:b8:
cd:21:ec:d0:ac:39:68:e9:9b:97:07:7b:3d:dd:b6:
ce:4b:00:cc:64:43:8e:e1:6a:6b:5e:41:f0:3f:7c:
37:31:8f:1f:9f:9c:2c:be:54:27:b8:7c:94:95:0a:
6a:1e:70:da:72:17:36:58:24:c3:83:61:70:de:22:
73:92:b9:37:ae:92:ff:ee:91:d9:74:cb:4d:0e:32:
07:6d:85:90:18:81:34:f6:5a:df:65:91:d6:65:50:
de:37:20:58:4c:36:02:14:1f:20:4f:03:53:82:8b:
ad:ac:31:a7:da:e9:46:80:d8:0b:77:b1:de:31:20:
5e:6f:66:cf:4c:20:5c:30:7a:e3:56:a9:99:3e:fe:
a4:cc:0e:41:05:e0:01:95:38:c6:eb:b5:22:1e:2f:
27:ca:0d:aa:c0:b3:22:3d:8a:ed:2c:69:a7:17:79:
38:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:87:37:21:35:6F:38:6B:6A:8F:60:6F:7C:61:02:E8:A0:32:20:88
X509v3 Authority Key Identifier:
keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1a:a9:d0:e6:6f:8f:ea:18:4d:29:23:b8:6a:f3:0e:b2:7c:
4d:78:2f:3c:d7:69:bd:16:bc:03:e2:69:a5:6c:01:07:44:84:
9d:6b:e9:ce:b9:c1:f6:0b:1e:4c:34:f9:f8:aa:5c:d1:09:67:
73:e2:5b:a2:b2:22:e8:44:40:21:d5:2e:6d:27:8a:9d:8a:05:
4b:7c:d1:f8:e6:ee:36:0a:42:a0:c0:a8:32:c6:e8:17:3a:9f:
8f:1f:d6:c8:7f:85:12:f4:12:85:5a:15:4e:49:60:ed:9f:dd:
72:ff:d2:f0:43:8e:a5:dd:15:70:fe:07:de:34:2e:b8:84:0a:
a9:2e:c1:38:a3:30:a1:4e:f9:76:aa:1b:1b:f9:bb:fb:87:36:
db:54:35:a5:ae:b5:b0:ff:d5:aa:26:f8:4e:67:3a:40:38:61:
3a:45:b3:1e:8c:9d:a5:ea:20:a0:c9:d0:52:44:34:4d:c3:b4:
7f:6f:90:d7:b3:c3:47:39:0d:e0:da:6f:8a:d9:80:cb:19:3b:
b8:16:63:5e:28:71:24:84:b2:95:93:35:57:f5:a3:90:54:2d:
de:4a:6e:02:35:40:05:72:48:31:6c:90:fc:45:fa:20:c4:e6:
54:f5:1f:8b:da:93:48:3a:d6:c8:ea:a9:a3:fa:c1:06:15:5c:
5e:92:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:31 2026 by rpki-client