Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
File: 1-dhnzCTQvonwX8hyWOCHemAVgLk.mft (raw, json)
Hash identifier: fY+z9i9JrV2qRoVaSKanHQjixJ9n7xdFDSngidtSL70=
Subject key identifier: 89:22:0D:2C:04:06:AA:24:FC:77:13:68:0C:68:F9:BE:B4:6D:07:14
Authority key identifier: F9:D8:67:CC:24:D0:BE:89:F0:5F:C8:72:58:E0:87:7A:60:15:80:B9
Certificate issuer: /CN=f9d867cc24d0be89f05fc87258e0877a601580b9
Certificate serial: 01A0249FB3142B790E267E5936227FCD1F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
Manifest number: 30
Signing time: Fri 21 Aug 2026 14:00:40 +0000
Manifest this update: Fri 21 Aug 2026 14:00:40 +0000
Manifest next update: Sat 22 Aug 2026 14:00:40 +0000
Files and hashes: 1: 1-dhnzCTQvonwX8hyWOCHemAVgLk.crl (hash: 9rWOx4GtlcS2nG2CKfb8rpVOgJCl4bhUG/jYfs62rLw=)
2: qnrXMl_Xv_6kWMeF4Bz5-CYWYXw.roa (hash: 5fNuZXIYtTbTA6QK+TCdSGKbez77mXXj3Ri/akWeOsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:9f:b3:14:2b:79:0e:26:7e:59:36:22:7f:cd:1f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d867cc24d0be89f05fc87258e0877a601580b9
Validity
Not Before: Aug 21 14:00:40 2026 GMT
Not After : Aug 22 14:00:40 2026 GMT
Subject: CN=89220d2c0406aa24fc7713680c68f9beb46d0714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:16:7c:a2:37:1a:ca:59:d2:d6:5b:e7:18:
93:ed:39:b1:e8:45:9a:85:91:53:6a:b3:cb:2c:d4:
85:ac:d9:52:7c:fa:46:88:f3:7c:17:a5:de:bc:ca:
7b:a5:2b:ec:3b:0f:4b:32:ca:38:73:cb:09:d2:d9:
42:1d:98:4a:0f:08:9d:72:0f:ee:80:38:54:08:fb:
55:82:dc:2c:8e:79:68:1a:df:41:4f:b9:3f:a2:44:
5a:e8:ef:51:53:fc:9a:48:48:30:bb:41:d9:10:26:
59:70:97:1b:ef:da:20:0d:cd:a3:68:f4:91:09:65:
8e:e4:e0:5e:43:05:18:b4:b5:5e:82:48:ec:eb:74:
62:a7:2e:d1:86:eb:92:d3:10:4e:5d:28:71:dd:ac:
fc:ec:0d:f1:aa:29:28:e9:c9:85:35:53:f5:82:dd:
50:ff:9c:95:a9:e6:d8:d0:7c:bb:d4:02:96:85:1e:
c4:b7:09:83:f3:c3:9f:d7:ce:01:a5:22:4d:61:77:
a6:ea:90:07:c7:a2:fd:5e:f7:5e:ec:51:9b:e8:66:
b8:ee:d9:c8:38:a1:72:0f:6b:14:0a:cd:cb:ed:25:
5a:dd:75:d7:9a:64:b2:1e:49:d9:b0:41:d0:eb:6e:
dd:c0:a8:aa:d2:49:03:06:85:0f:cc:55:ce:5a:c1:
81:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:22:0D:2C:04:06:AA:24:FC:77:13:68:0C:68:F9:BE:B4:6D:07:14
X509v3 Authority Key Identifier:
keyid:F9:D8:67:CC:24:D0:BE:89:F0:5F:C8:72:58:E0:87:7A:60:15:80:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:db:3e:04:c6:ac:9c:d5:9e:30:b0:7e:ae:b2:21:46:f5:e8:
8f:62:db:20:9e:d5:ff:3d:54:8b:7e:1e:b9:9d:48:fc:25:e6:
66:c4:f2:a2:4a:cd:ff:36:7a:ef:18:88:b9:e5:65:c6:43:05:
7d:7d:09:aa:0b:d5:d1:84:93:6f:38:6f:48:ee:52:c6:63:45:
03:d7:bd:1c:77:18:26:8a:64:ee:70:93:68:4d:24:83:70:6c:
18:0e:88:57:ee:4c:2a:fc:f5:5f:c7:18:c9:7c:af:17:a1:06:
5b:d7:27:58:63:7b:a5:e7:4a:6e:1b:a4:87:aa:18:bc:c9:84:
ba:f8:4a:fa:7c:a4:fa:67:57:d1:b4:08:62:1d:75:7a:d8:43:
b4:c5:ee:d1:f0:42:27:ce:56:e8:6c:f7:18:df:ab:96:50:61:
68:69:73:3b:a5:13:55:c0:6a:48:1a:0c:af:9d:0a:a5:4d:cc:
c1:96:f2:6f:8d:85:20:1f:07:47:db:45:bb:64:04:19:b9:29:
05:58:37:77:fe:dd:6e:a4:d1:75:22:ed:a6:c4:0b:9f:9e:c2:
ba:a7:44:7d:42:a4:4d:79:5e:02:d3:99:3a:7d:93:98:a1:ad:
e0:86:39:8b:c6:20:f8:49:b5:51:a6:86:a6:d9:66:d9:99:1a:
e6:d3:75:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:40:55 2026 by rpki-client