Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/a1bac8-9e09-4806-b5d5-7cd82d0fdf97/1/1-TlI1x79hVeRsJq_P29waJrDqE0.mft
File: 1-TlI1x79hVeRsJq_P29waJrDqE0.mft (raw, json)
Hash identifier: TJaQ7JTkEnIq4R8CNl4cZxkU4SOnpfG3LKRPQpFciXs=
Subject key identifier: 62:20:4F:CF:8C:4D:04:20:6F:D4:70:72:BC:FD:60:25:41:A3:B2:97
Authority key identifier: F9:39:48:D7:1E:FD:85:57:91:B0:9A:BF:3F:6F:70:68:9A:C3:A8:4D
Certificate issuer: /CN=f93948d71efd855791b09abf3f6f70689ac3a84d
Certificate serial: 01A194685CB1424F723802256D5E6E35AB0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TlI1x79hVeRsJq_P29waJrDqE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a1bac8-9e09-4806-b5d5-7cd82d0fdf97/1/1-TlI1x79hVeRsJq_P29waJrDqE0.mft
Manifest number: 5C
Signing time: Sun 01 Nov 2026 00:00:29 +0000
Manifest this update: Sun 01 Nov 2026 00:00:29 +0000
Manifest next update: Mon 02 Nov 2026 00:00:29 +0000
Files and hashes: 1: 1-TlI1x79hVeRsJq_P29waJrDqE0.crl (hash: H7Kt02mwX+z3T6C2Qo5D0VQRGmiFH/Y+lqWuucIaQ58=)
2: Krz6hVFxqFgsNPyr2dbpuBo4uJY.roa (hash: T29vDO/mciNR8VKJe759tO1ECzxEqaKEfFJO65KDSPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a1bac8-9e09-4806-b5d5-7cd82d0fdf97/1/1-TlI1x79hVeRsJq_P29waJrDqE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a1bac8-9e09-4806-b5d5-7cd82d0fdf97/1/1-TlI1x79hVeRsJq_P29waJrDqE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TlI1x79hVeRsJq_P29waJrDqE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:68:5c:b1:42:4f:72:38:02:25:6d:5e:6e:35:ab:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93948d71efd855791b09abf3f6f70689ac3a84d
Validity
Not Before: Nov 1 00:00:29 2026 GMT
Not After : Nov 2 00:00:29 2026 GMT
Subject: CN=62204fcf8c4d04206fd47072bcfd602541a3b297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9c:1c:9f:81:f9:04:e5:a9:5d:47:9a:bd:c7:
34:4e:47:f6:57:5d:11:0a:17:9c:6e:21:d4:6d:8b:
0c:5c:c3:72:d2:76:97:aa:54:17:cd:e2:4e:e4:dd:
e1:fa:dc:5e:00:de:7a:15:18:87:99:ad:8b:52:b3:
4f:c9:3f:09:e6:da:25:bb:65:61:cc:8e:41:d7:02:
f6:5d:d7:b3:83:2a:f0:a9:51:c6:03:fe:31:97:be:
22:99:f6:cf:4c:df:34:2a:8b:b2:0c:ad:db:c7:f8:
72:2f:95:e6:a3:fa:cc:1d:06:1b:e3:16:d5:ce:e8:
44:62:7c:18:12:aa:08:49:7b:02:02:41:35:be:dc:
2f:ba:e0:91:a0:bd:d5:04:89:11:36:df:20:e3:d3:
e0:0c:1c:e3:aa:37:68:b6:0c:86:4e:69:ac:b4:4f:
de:b5:22:88:34:7a:e5:bc:32:8e:8a:26:f5:ce:58:
bb:91:d5:c3:4b:38:45:de:1c:ba:69:67:78:d6:41:
ac:5a:80:c6:43:f9:d2:f9:d3:54:3a:34:86:a2:c3:
36:7d:7d:38:6d:8e:45:8b:53:d4:99:1e:2d:5e:6d:
1a:70:7c:96:13:c2:73:b2:65:f1:06:d1:fa:2a:52:
d6:51:02:0f:67:74:f1:e8:7d:1f:f8:1a:c7:2e:48:
0c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:20:4F:CF:8C:4D:04:20:6F:D4:70:72:BC:FD:60:25:41:A3:B2:97
X509v3 Authority Key Identifier:
keyid:F9:39:48:D7:1E:FD:85:57:91:B0:9A:BF:3F:6F:70:68:9A:C3:A8:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TlI1x79hVeRsJq_P29waJrDqE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a1bac8-9e09-4806-b5d5-7cd82d0fdf97/1/1-TlI1x79hVeRsJq_P29waJrDqE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a1bac8-9e09-4806-b5d5-7cd82d0fdf97/1/1-TlI1x79hVeRsJq_P29waJrDqE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:09:df:23:cb:33:aa:10:72:09:ad:41:c8:56:28:ea:88:51:
5b:cc:f4:67:e9:cc:e5:a4:b0:68:f2:bf:d2:e0:ff:cf:76:2b:
6d:d7:34:be:f6:ee:be:f0:e5:17:4a:27:44:ef:b3:7d:ab:28:
01:af:f6:61:1f:ab:0d:56:88:f5:42:29:76:51:86:2c:ac:0c:
2b:52:dc:2e:f2:5b:fb:b4:73:a8:e8:40:cd:8c:00:f4:da:88:
34:9c:11:b7:51:1a:d8:05:a5:2b:aa:58:71:c1:f5:5e:4e:d5:
e8:1d:39:d1:f9:24:72:5e:aa:52:00:c7:99:b5:b2:8e:7f:ff:
e1:78:15:8c:a6:ba:bd:6e:91:f5:2c:42:0d:69:d8:e5:1f:d1:
10:46:1c:6e:ee:2d:37:f8:f6:3a:63:d3:86:9b:16:c0:04:65:
98:08:ed:a3:5b:4e:fb:51:b3:ce:10:07:57:27:27:f7:06:f0:
5a:1d:2d:f9:13:78:af:bc:5f:8b:f7:b7:f9:14:b3:28:9f:ad:
71:be:29:bd:8e:22:b2:ff:93:1a:59:ad:3a:ee:ed:bb:fa:fa:
62:6f:38:79:38:d1:79:fc:3b:3c:f1:d8:16:c5:71:63:32:bb:
53:dc:39:6e:b6:66:f2:e8:5b:6e:af:52:5c:58:46:b9:22:2f:
ac:59:e9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:31:13 2026 by rpki-client