Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.mft
File: 1rsTICf-ZVBHbMrEPpL4rYE_DzA.mft (raw, json)
Hash identifier: jhqfgATPYMqygNAjLmcHrFn2EYxHKrVvpgxtDz7HewI=
Subject key identifier: 14:FC:B5:65:DA:23:23:E6:23:71:59:56:D2:50:B4:3A:71:63:6C:0E
Authority key identifier: D6:BB:13:20:27:FE:65:50:47:6C:CA:C4:3E:92:F8:AD:81:3F:0F:30
Certificate issuer: /CN=d6bb132027fe6550476ccac43e92f8ad813f0f30
Certificate serial: 01A14E3DDC5FE035D7CF822BE0CBEC2AC065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rsTICf-ZVBHbMrEPpL4rYE_DzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.mft
Manifest number: 0111
Signing time: Sun 18 Oct 2026 09:00:39 +0000
Manifest this update: Sun 18 Oct 2026 09:00:39 +0000
Manifest next update: Mon 19 Oct 2026 09:00:39 +0000
Files and hashes: 1: 1rsTICf-ZVBHbMrEPpL4rYE_DzA.crl (hash: yhTOyi5fzdcpFc5QDcvrKSZ4PkCWP9YDlBcZlvN/smQ=)
2: HGygdQ-Y-gCZzdzCa6B6oIjdjFM.roa (hash: sd3DHouChJiiWx6aUYWxL5mwg+5RY2ZI/mpyAHXQkl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rsTICf-ZVBHbMrEPpL4rYE_DzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:3d:dc:5f:e0:35:d7:cf:82:2b:e0:cb:ec:2a:c0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6bb132027fe6550476ccac43e92f8ad813f0f30
Validity
Not Before: Oct 18 09:00:39 2026 GMT
Not After : Oct 19 09:00:39 2026 GMT
Subject: CN=14fcb565da2323e623715956d250b43a71636c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:57:de:4f:35:7a:55:6f:f6:60:59:86:ba:
ef:55:eb:90:58:33:41:a2:00:dc:a7:92:e2:26:8e:
67:a5:5b:e2:fb:d3:27:56:b9:5c:06:57:ba:cf:f3:
94:c4:a8:58:82:fd:79:0d:d7:4e:40:cb:74:19:c1:
08:9d:e4:11:39:d8:9a:58:dd:b5:79:da:ab:02:9e:
25:a2:10:27:2d:55:a7:1a:57:e0:2a:4a:8d:bd:5c:
1e:1f:98:51:dd:b2:4f:20:66:b5:0d:36:5c:52:44:
11:46:61:8a:9f:ac:07:09:2b:ec:b5:0f:02:e8:ad:
81:35:da:ad:12:4c:4b:e3:e5:61:56:7f:0f:ee:48:
df:40:2f:db:cc:39:e3:f4:f5:df:13:4b:dd:98:ab:
15:ad:7a:1f:18:81:96:88:b9:2e:48:37:76:3f:a3:
46:be:d7:df:0f:4a:dd:ac:f4:41:d3:a2:99:ce:59:
a0:04:e1:b0:0d:fc:d8:8b:83:16:e8:8f:23:e0:8c:
09:cc:52:74:95:0c:ad:85:14:f7:50:a4:46:6b:0d:
f1:fa:99:3d:52:06:ad:a3:45:6b:5d:29:db:0d:94:
bc:47:5b:d0:fe:3e:f5:80:47:0a:a2:4b:d7:68:d8:
c2:bd:f2:1e:c3:c3:49:23:d1:48:b9:5b:e0:09:1e:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FC:B5:65:DA:23:23:E6:23:71:59:56:D2:50:B4:3A:71:63:6C:0E
X509v3 Authority Key Identifier:
keyid:D6:BB:13:20:27:FE:65:50:47:6C:CA:C4:3E:92:F8:AD:81:3F:0F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rsTICf-ZVBHbMrEPpL4rYE_DzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d2:ea:69:ad:cf:e0:fa:f9:23:a2:8e:cd:b9:17:78:08:8b:
04:ab:5a:48:b9:dc:d7:9a:31:f4:61:86:1e:9b:b6:73:b2:2a:
22:9e:02:35:89:e4:4b:88:db:39:f4:f8:9b:62:2e:ec:8b:5d:
d8:f2:ae:75:ab:f6:26:cd:92:5b:d6:f7:99:33:5c:3b:e8:39:
5b:7b:50:70:13:7f:72:ff:be:88:53:f8:cd:b3:b4:2f:16:47:
bc:f8:f8:0e:a0:1a:dd:5d:34:c5:dd:6f:69:8e:7c:7c:94:77:
77:56:b8:b6:89:52:ec:04:11:09:dd:a7:eb:87:0a:c8:27:5f:
68:b7:3b:c8:17:e3:f2:bb:36:b3:4a:90:6b:cd:c4:7a:b1:cd:
f4:25:94:34:20:20:3b:7f:e7:c0:49:0a:e0:a0:42:79:b6:da:
42:e1:c2:3d:a1:e5:dd:b9:35:ff:18:e8:eb:30:91:41:dd:64:
ae:75:7b:c9:df:03:f7:49:93:ff:47:f3:55:b8:89:aa:75:89:
63:3b:4b:bd:bc:da:6f:29:fe:5b:e3:a8:1e:c8:ca:c8:1a:52:
69:50:ed:f1:91:85:39:a0:80:f1:64:38:4a:ff:15:4d:8b:b4:
bb:3c:59:f2:eb:2c:21:27:38:24:1b:72:df:00:26:7c:8a:72:
4d:d7:6f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:49:59 2026 by rpki-client