Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
File: 1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json)
Hash identifier: V/U01vRP0jeMfVr3h0f6vxrhW33p3v9morZ2Htnv8mI=
Subject key identifier: B0:6B:78:E1:8C:B7:C1:33:AF:25:B2:0A:BE:72:A5:E3:F4:AF:F6:31
Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
Certificate issuer: /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Certificate serial: 01A148A9EE9B2CB71FAB05D191420A379D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
Manifest number: 0833
Signing time: Sat 17 Oct 2026 07:00:58 +0000
Manifest this update: Sat 17 Oct 2026 07:00:58 +0000
Manifest next update: Sun 18 Oct 2026 07:00:58 +0000
Files and hashes: 1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: tIDQN3ff8z9AOp4a1Nu0X16aQQtFxvctL8shN/OCX9U=)
2: w4SYF93bZ7mEac54Bcw2Oj2Zjm0.roa (hash: AiCzf27YzXL7TiAwTl4rqi9Bv4ePafNZNaFvG1buGG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:a9:ee:9b:2c:b7:1f:ab:05:d1:91:42:0a:37:9d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Validity
Not Before: Oct 17 07:00:58 2026 GMT
Not After : Oct 18 07:00:58 2026 GMT
Subject: CN=b06b78e18cb7c133af25b20abe72a5e3f4aff631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:c1:03:1f:c3:8d:10:3f:4e:67:04:a2:58:
57:1f:38:f9:a9:98:34:7b:50:59:bd:38:3a:36:10:
c1:b6:ee:b3:7b:e0:a6:e9:f9:82:c8:0a:e7:9f:6a:
fe:a4:2e:84:3f:69:ea:69:20:c5:b0:24:aa:06:2b:
97:1b:ac:34:de:c3:16:02:a6:b4:7c:93:bb:3a:fe:
47:c4:61:ae:48:9c:d5:a5:2b:1f:d6:12:ff:c1:5c:
e8:8e:1f:8e:1b:9a:66:3a:2b:fc:50:76:dd:a2:da:
72:17:ca:c1:62:10:a7:c5:38:20:c0:52:38:d3:27:
d7:28:91:8b:5a:64:39:28:11:0c:21:bd:2b:68:97:
5c:05:cb:7c:47:a9:16:74:a7:bf:e8:42:cd:b0:70:
f6:25:a6:81:e4:fd:e4:da:b5:f4:a6:4e:89:fc:e8:
10:f3:58:24:06:c2:51:a1:9c:45:bc:c2:81:7d:74:
a9:fc:31:d9:29:ca:59:33:53:3b:50:6b:93:f6:8e:
95:fb:7f:75:11:87:8d:17:77:bc:48:a9:5a:a4:77:
8a:18:37:42:7b:44:49:46:3a:f5:e6:0f:58:ff:a0:
9a:bd:88:87:c0:ae:bb:3a:f3:4b:e3:b1:e5:cb:d0:
d1:11:02:b1:d3:60:c1:03:0f:20:32:16:60:04:72:
5f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6B:78:E1:8C:B7:C1:33:AF:25:B2:0A:BE:72:A5:E3:F4:AF:F6:31
X509v3 Authority Key Identifier:
keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:39:dd:4f:10:98:51:48:45:31:b9:1e:e0:9d:0e:58:9b:46:
ea:08:21:92:fa:a4:0e:f2:a9:89:8f:37:b3:6e:98:54:4a:ad:
fb:97:e2:06:c6:fa:14:40:6f:a0:6e:5f:04:5f:78:83:40:54:
d6:5b:ca:c4:5d:bb:97:d3:35:33:c4:01:91:d9:59:96:e1:b3:
26:32:7e:38:af:8d:18:58:1f:55:f6:26:7b:51:ce:07:4f:9c:
f4:85:47:55:29:fe:4a:30:af:b8:f7:5c:d8:7d:2c:57:95:99:
ed:ef:9b:35:55:69:0c:7b:5b:e0:ba:72:67:7d:fa:bb:db:d8:
5e:be:73:83:cf:f5:c1:40:d1:4b:37:d7:48:51:34:a6:bd:61:
be:4e:1c:61:a0:c2:5c:2e:72:3e:d7:1b:b9:5b:2a:ec:03:18:
4a:ea:e6:08:4d:a3:74:34:f7:6d:24:05:9d:f6:bd:ae:72:e9:
ef:02:9e:fb:85:eb:25:ca:f0:b2:32:8e:94:56:e2:dc:b2:0a:
96:01:2b:ab:5a:eb:9a:67:95:f6:e6:df:ce:bb:72:10:2b:8c:
57:a1:21:63:f2:fc:e1:5d:fb:b2:ae:d0:38:e5:d8:d6:6c:d2:
46:d7:f6:c4:43:98:8c:0a:5e:c4:e2:15:35:c0:cb:bd:9c:d6:
db:75:cd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:04:37 2026 by rpki-client