Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
File: 1cH3vxvczjWLoL_c-_aWTzvqI2I.mft (raw, json)
Hash identifier: 9Hf1P7d8okMblfQvV8gVNtRtriSAicqBH5aDcQ/l+tk=
Subject key identifier: 6D:E6:F5:0A:E9:2E:DE:63:C8:E9:F4:68:65:F3:D9:D1:60:55:7D:F6
Authority key identifier: D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
Certificate issuer: /CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Certificate serial: 01A0401730AA055B21CF712BCC4A4B1D1B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
Manifest number: 03DA
Signing time: Wed 26 Aug 2026 22:00:56 +0000
Manifest this update: Wed 26 Aug 2026 22:00:56 +0000
Manifest next update: Thu 27 Aug 2026 22:00:56 +0000
Files and hashes: 1: 1cH3vxvczjWLoL_c-_aWTzvqI2I.crl (hash: z053a3fGzEH2dXGPxwx1DNKwkkTMPIn+JKbnx527ARQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:30:aa:05:5b:21:cf:71:2b:cc:4a:4b:1d:1b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Validity
Not Before: Aug 26 22:00:56 2026 GMT
Not After : Aug 27 22:00:56 2026 GMT
Subject: CN=6de6f50ae92ede63c8e9f46865f3d9d160557df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:41:51:6d:79:93:2b:d5:44:72:f2:3b:4e:
8d:cf:da:42:a0:9f:fc:c7:7a:0b:c1:24:64:d6:7b:
f7:d5:f3:dc:90:ad:30:81:ae:16:0f:e0:a0:48:c7:
f0:55:90:fb:c3:3e:c5:13:9e:11:53:eb:ac:5a:aa:
58:ac:0d:0f:1a:68:c5:7f:08:52:b5:6e:98:95:d8:
f3:a8:2e:c7:59:ef:ba:42:58:6a:d2:86:3f:91:53:
e0:af:60:16:3d:ae:fc:de:8a:94:bc:f8:8c:26:d4:
86:a2:16:d7:f4:45:05:02:f6:69:a7:94:5e:71:6e:
5d:f4:10:e9:5a:f5:11:fa:dc:c7:81:10:ff:0a:b5:
f9:21:52:30:37:43:19:54:22:cb:be:a8:86:c5:f0:
f8:2d:39:34:e1:90:d9:c1:81:c3:47:de:69:32:ee:
d9:d1:ba:f1:91:21:50:82:33:43:fd:16:25:c6:38:
05:c4:c6:a6:0e:f4:42:d5:8d:31:89:ec:1a:03:26:
09:70:ec:c8:8c:3a:3e:10:f1:c1:79:b8:1b:6f:4d:
83:37:e7:a3:d5:1e:d0:90:cb:d0:a2:84:b0:17:e7:
fc:fd:73:b4:13:44:66:69:5c:9f:8c:a7:0d:98:03:
83:d7:a8:0d:f0:e6:63:94:03:e8:1e:30:f1:78:86:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E6:F5:0A:E9:2E:DE:63:C8:E9:F4:68:65:F3:D9:D1:60:55:7D:F6
X509v3 Authority Key Identifier:
keyid:D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:85:96:08:10:43:2b:b8:84:f5:22:a1:f7:39:ac:58:aa:59:
52:99:35:9e:e9:1e:b2:88:ac:7e:6c:7f:db:84:66:e4:00:e9:
5d:ac:e0:1e:4d:a0:73:94:95:46:21:e4:b3:d6:e6:87:e8:ea:
3e:be:6a:75:f2:30:70:27:94:28:f2:95:f5:af:23:35:7d:ca:
a8:4a:8e:91:d7:84:59:52:a7:7f:1d:24:a9:b0:b7:04:b5:83:
11:9b:6d:76:2b:b3:24:6b:cb:a7:70:6e:d3:68:12:2b:f9:f8:
4f:34:8b:4f:2c:15:b9:63:8b:84:ec:ac:86:00:9e:48:29:f1:
cb:8a:8d:66:2c:42:12:c9:2b:05:a7:ac:85:2d:3b:35:20:a5:
29:ca:6b:ac:30:5a:f0:1d:47:fe:7f:1c:6a:71:06:1e:42:3d:
08:ca:0f:0a:39:48:16:07:a6:68:cb:9e:62:7f:73:a2:e1:5d:
98:be:df:f2:8a:d0:67:d5:cb:84:40:71:87:fb:5b:a1:5c:37:
3b:9b:03:a8:7d:30:0e:7f:d2:11:b1:cd:05:26:c0:60:c0:45:
c5:3f:fb:56:d5:a7:6c:a0:8d:24:02:95:97:43:e5:1c:08:b3:
63:1b:cd:04:58:79:ba:0f:98:4d:85:5c:71:59:7a:56:43:f0:
0d:2f:e6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:21 2026 by rpki-client