Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json)
Hash identifier: 3LcXD52hRFd+7EjFk4wleoVK4VblQSQnZTjcfwTYABw=
Subject key identifier: 3C:60:B3:C1:54:16:5C:37:43:3F:4F:58:9C:5E:5F:A1:A9:8B:29:E7
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 01A12FC681B9DBC48A05D4EBE9F9889B6072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
Manifest number: 0CD6
Signing time: Mon 12 Oct 2026 11:01:40 +0000
Manifest this update: Mon 12 Oct 2026 11:01:40 +0000
Manifest next update: Tue 13 Oct 2026 11:01:40 +0000
Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: PUTzO/sNItLYF9H2UjXOsLFbW+cy8UXvPU6eqp5bSQU=)
2: SpCVnDCeEekxdblga7xr60e2Z5Q.roa (hash: 38e7O6zFRveFVAruc/e0fsqYdqeGU4GrUOL6ww1G6oQ=)
3: xKZaKt2ejyS1RvKxbygcbV14q7Y.roa (hash: pRhnCq62G3nLpLOE3zJBDzARRGgB05rKDlaS5XncNNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c6:81:b9:db:c4:8a:05:d4:eb:e9:f9:88:9b:60:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: Oct 12 11:01:40 2026 GMT
Not After : Oct 13 11:01:40 2026 GMT
Subject: CN=3c60b3c154165c37433f4f589c5e5fa1a98b29e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:b1:45:3e:bd:c2:be:ae:61:aa:11:77:0b:
5e:ef:9a:05:da:8f:84:25:66:54:50:12:ec:64:47:
60:f5:8a:5e:4d:32:16:0c:ff:e2:c2:0c:a0:1d:30:
6c:93:90:0a:30:77:fc:89:54:4d:bf:fb:db:7b:d8:
54:cd:c6:61:07:3a:9e:f4:66:88:06:af:28:f4:39:
25:06:ab:0e:16:37:c0:cc:9a:71:67:d1:91:2b:05:
f6:20:b2:fe:9a:0c:da:94:2e:cc:3d:25:95:10:a3:
e9:79:7d:d4:10:9e:2a:83:76:71:30:08:a2:53:68:
21:06:8e:41:e5:32:96:b3:91:af:1d:97:d6:92:ca:
50:99:90:2a:c3:b8:f0:61:e1:3a:bf:fd:d7:3c:27:
a6:ec:fe:7e:21:ce:62:84:c4:ef:76:7b:bd:c7:72:
77:76:60:ca:bc:f8:e5:bf:74:ca:ce:84:39:bb:e1:
39:02:14:76:59:40:f1:8a:ad:1c:e2:13:d0:e1:a8:
2c:8d:da:b9:6c:36:f8:f6:e6:68:a6:83:f3:fe:b8:
71:6e:bf:29:15:ba:df:1e:c3:f5:da:f6:6d:b8:29:
3a:af:2c:b2:4d:3c:43:53:bb:de:13:08:18:4e:6a:
11:c6:c5:90:56:c9:e2:23:2c:ba:f4:ac:3e:2f:7f:
e3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:60:B3:C1:54:16:5C:37:43:3F:4F:58:9C:5E:5F:A1:A9:8B:29:E7
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:37:5c:46:7a:eb:a1:11:ed:56:b5:82:e7:b3:fb:fd:2b:1c:
e3:c3:a9:32:ab:e0:01:45:39:c8:ce:9e:dd:bc:36:59:41:9f:
10:80:b0:87:d7:75:fb:a7:d2:ed:03:77:c1:20:52:54:19:a1:
db:47:cc:19:58:9e:b8:a0:68:9d:b3:e9:4b:3c:d5:bf:8c:78:
86:90:5b:3b:3d:df:de:e8:19:a2:d8:43:85:52:1f:40:8b:11:
ea:b7:39:da:a1:bf:d8:4c:2f:9d:57:ee:26:1c:5f:0b:d9:1c:
42:0c:e4:eb:7f:c9:96:f2:32:50:17:3b:85:63:1b:40:5c:78:
a2:20:3e:dd:56:61:68:ea:f4:38:89:0a:ea:49:0e:1f:ed:bb:
14:34:e0:9a:d7:ce:29:88:c6:37:b1:e9:8a:0f:9b:c9:f3:e9:
3b:89:81:09:29:9a:17:53:4b:87:d5:26:12:08:36:9a:df:c7:
8c:34:64:01:6a:0b:1f:93:a1:82:b9:f6:37:c2:58:4c:f4:5d:
20:05:91:79:3f:d9:7a:f7:5a:01:ff:df:93:00:4d:00:5b:c9:
0b:56:e2:e3:51:e7:60:3c:2b:ad:cd:03:b1:60:92:dc:b2:5a:
c3:5e:20:4f:bd:34:10:f0:00:fd:7b:f3:a3:83:53:d6:96:cd:
55:db:2e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:15:29 2026 by rpki-client