Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
File: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft (raw, json)
Hash identifier: pA3xor3+Wlvp5bqn81KWeSKAhJdJheW0OpKasptWEhk=
Subject key identifier: B6:50:E8:08:29:8E:A1:F0:4A:72:7F:43:CE:E9:20:A1:77:DB:E3:92
Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
Certificate issuer: /CN=d47d79c78a830699781b3e4331be092597c34b90
Certificate serial: 01A13F7092093421A1856A81376530C5357B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 12:01:44 +0000
Manifest this update: Thu 15 Oct 2026 12:01:44 +0000
Manifest next update: Fri 16 Oct 2026 12:01:44 +0000
Files and hashes: 1: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl (hash: u91M2ajOVgQ/92IDElEKGjFgSct6t7Zo2N/FXu3AFAQ=)
2: UjFwX21JbiqjDw7jVogurOY6vK0.roa (hash: StMP6W4VJaKc6UNnpuMnvzgEyfJwsKnjjavPWXE2/og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:92:09:34:21:a1:85:6a:81:37:65:30:c5:35:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90
Validity
Not Before: Oct 15 12:01:44 2026 GMT
Not After : Oct 16 12:01:44 2026 GMT
Subject: CN=b650e808298ea1f04a727f43cee920a177dbe392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6c:99:2e:17:a9:94:02:ca:54:24:db:f1:89:
f3:57:85:f5:3e:25:90:a5:67:ab:46:a6:5b:3d:ca:
be:cc:e5:1f:fa:dc:5e:be:52:4b:bb:e3:d2:d7:a6:
24:d0:33:33:72:26:eb:18:cb:96:13:70:3c:19:7a:
40:c5:5c:43:22:a2:cb:b4:a9:63:85:41:66:38:75:
9e:27:b5:b0:62:2e:a6:07:e8:bf:06:0c:49:68:36:
b4:eb:85:68:40:90:20:fa:60:e7:1a:e1:30:9a:eb:
62:52:fb:fe:3a:68:24:23:1a:a8:a1:65:27:42:df:
0b:e7:46:dc:b0:8b:89:37:6d:2f:e8:70:ca:f5:26:
05:46:17:f0:68:8e:0e:77:2a:a3:86:9e:1f:b6:e9:
bd:4f:2b:be:8c:e2:5b:3f:7d:9c:39:65:e6:c1:3a:
ed:63:cd:32:5e:ef:07:e5:fb:37:f4:2f:1e:48:a8:
5f:81:fa:e9:8c:b4:cc:91:bd:38:f7:c2:53:1d:6f:
6a:be:c7:c6:9f:da:ba:0e:a9:1d:f5:04:a2:ff:66:
35:22:e3:8b:64:0c:76:79:5e:c7:d0:34:dc:e2:ea:
ac:a5:30:ea:19:ff:ff:b8:26:61:fb:b9:3c:fc:36:
f8:b8:c1:c0:fe:0e:9e:d5:5e:47:12:3f:20:03:f9:
f5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:50:E8:08:29:8E:A1:F0:4A:72:7F:43:CE:E9:20:A1:77:DB:E3:92
X509v3 Authority Key Identifier:
keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e2:77:91:8f:03:42:0b:9d:66:14:c0:a2:86:b6:62:43:0c:
41:ec:86:d3:7e:b4:e6:ee:0d:76:69:69:a3:14:0c:fc:c5:60:
e1:2d:ec:b9:03:43:7d:63:c6:8e:9d:0f:62:6a:e1:95:81:e0:
88:7f:e0:80:dd:b9:6b:ce:25:7a:2f:65:cc:b6:bc:f4:5a:c2:
35:12:d5:5d:dd:00:2c:2a:1c:e2:b2:46:fa:2a:39:6d:4f:4a:
c2:91:a0:d4:c7:d9:e7:09:18:6c:b6:4e:41:61:29:98:91:39:
1d:66:af:9c:dc:c5:16:39:b4:03:de:8b:db:ea:d2:4a:50:3b:
97:ea:e7:ae:21:c7:36:5b:67:67:cf:4f:0e:81:89:bd:f4:3a:
2b:c8:42:28:7c:8d:7c:03:e4:c2:23:d3:96:da:84:00:80:6b:
eb:da:16:8d:d3:54:fc:bf:08:aa:af:64:a7:9d:f2:c9:1a:10:
0a:78:e1:50:19:6b:e7:aa:66:d7:88:be:21:4c:ff:7e:21:6e:
ec:5d:36:22:05:99:46:e4:84:7d:3c:3c:99:0a:9c:6a:6b:76:
18:bb:84:9c:04:39:7b:3f:9e:84:7a:b2:1f:c5:14:6a:0a:5a:
c9:3b:a0:12:27:6a:62:fd:d7:d8:e6:88:43:b6:7d:db:a6:71:
f5:a0:82:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:23 2026 by rpki-client