Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/d7bda7-414b-42e3-93f1-37bee341d5b6/1/1lo1UCaCk9tJpEwx3A4HZhWy5fc.mft
File: 1lo1UCaCk9tJpEwx3A4HZhWy5fc.mft (raw, json)
Hash identifier: SeryTGbz+S1BMFJt2JJY0ICKUKzTB53mocEggC/4nAA=
Subject key identifier: FD:47:B5:97:25:67:BB:43:37:5A:68:6C:4B:B0:BB:E2:D0:7F:DC:C4
Authority key identifier: D6:5A:35:50:26:82:93:DB:49:A4:4C:31:DC:0E:07:66:15:B2:E5:F7
Certificate issuer: /CN=d65a3550268293db49a44c31dc0e076615b2e5f7
Certificate serial: 01A1A7B90E8B0057651ADD643474AAB036AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lo1UCaCk9tJpEwx3A4HZhWy5fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d7bda7-414b-42e3-93f1-37bee341d5b6/1/1lo1UCaCk9tJpEwx3A4HZhWy5fc.mft
Manifest number: 77
Signing time: Wed 04 Nov 2026 18:01:25 +0000
Manifest this update: Wed 04 Nov 2026 18:01:25 +0000
Manifest next update: Thu 05 Nov 2026 18:01:25 +0000
Files and hashes: 1: 1lo1UCaCk9tJpEwx3A4HZhWy5fc.crl (hash: r/0SpeHOtY/htZE3iYUW25HCBODDXhquIc/IedwskcE=)
2: cytV20G2bBo39tVg7IAn_fvo724.roa (hash: 6yRKdGIP7ACoveMwQRKqL5rdUlANPoMl4K9JrWV2XL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d7bda7-414b-42e3-93f1-37bee341d5b6/1/1lo1UCaCk9tJpEwx3A4HZhWy5fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d7bda7-414b-42e3-93f1-37bee341d5b6/1/1lo1UCaCk9tJpEwx3A4HZhWy5fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lo1UCaCk9tJpEwx3A4HZhWy5fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:b9:0e:8b:00:57:65:1a:dd:64:34:74:aa:b0:36:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65a3550268293db49a44c31dc0e076615b2e5f7
Validity
Not Before: Nov 4 18:01:25 2026 GMT
Not After : Nov 5 18:01:25 2026 GMT
Subject: CN=fd47b5972567bb43375a686c4bb0bbe2d07fdcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:d0:e8:0a:09:be:fd:2b:8c:26:c3:89:cc:
85:16:7c:ae:d4:84:b5:cc:56:03:3a:76:55:0e:46:
96:6b:fe:f7:0b:e0:cd:9b:0f:18:32:b6:2d:82:1f:
98:ac:2b:30:a5:4a:10:62:e2:4e:68:e5:73:af:1b:
1c:45:48:f9:fc:f7:df:af:fb:1d:51:90:31:80:30:
c6:df:4c:3d:8c:32:3c:31:78:24:18:90:80:45:b9:
fb:62:23:7a:71:45:90:60:d0:24:8a:6a:e1:be:5a:
b9:16:0c:92:55:2a:09:a0:4e:63:9b:79:05:ee:4b:
ae:3d:97:38:05:77:f4:05:0e:fb:16:20:8b:ba:18:
6e:d2:3c:86:d9:a1:5e:7e:18:86:3d:32:97:f0:f8:
6a:9b:91:c2:9b:bc:91:3b:3e:79:3b:77:fb:9f:10:
ef:f0:32:70:88:09:bf:fb:c2:7a:d0:3c:c0:72:cf:
3f:1e:58:76:68:84:eb:b3:b8:e3:cf:d3:4e:20:e6:
c2:75:31:e3:5f:81:28:d5:f4:39:ce:87:e0:b5:c7:
26:bd:39:ee:50:a6:a2:78:37:4c:17:0b:c1:4c:8d:
6c:b1:75:eb:08:c0:15:b1:c7:aa:a5:b3:fd:f2:28:
ed:88:4c:70:1f:09:cf:6f:d0:c9:d1:5b:f0:14:80:
bd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:47:B5:97:25:67:BB:43:37:5A:68:6C:4B:B0:BB:E2:D0:7F:DC:C4
X509v3 Authority Key Identifier:
keyid:D6:5A:35:50:26:82:93:DB:49:A4:4C:31:DC:0E:07:66:15:B2:E5:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lo1UCaCk9tJpEwx3A4HZhWy5fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d7bda7-414b-42e3-93f1-37bee341d5b6/1/1lo1UCaCk9tJpEwx3A4HZhWy5fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d7bda7-414b-42e3-93f1-37bee341d5b6/1/1lo1UCaCk9tJpEwx3A4HZhWy5fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5a:55:f6:9f:e7:c9:d7:e0:f8:4b:da:d8:4c:fa:24:63:fb:
6a:22:fe:b5:4d:83:44:03:44:13:a9:71:15:8d:f1:67:04:2b:
53:b6:c6:8f:e8:bc:95:34:a3:7e:e8:bf:f8:be:54:bb:f1:b7:
15:bc:00:36:83:94:06:ae:42:5f:fc:3d:9f:21:2f:35:16:58:
36:45:b8:f5:97:02:9a:3d:28:09:64:9f:00:e8:e6:a0:df:95:
2d:17:a3:48:1d:8d:21:81:db:d5:b6:a8:88:d5:39:de:19:57:
a2:8d:dc:62:cc:9a:e0:f0:59:6f:4b:ed:1a:7c:bb:55:45:41:
e9:36:1c:0b:97:a1:ef:87:0c:ec:ba:18:c5:1b:eb:07:09:45:
a9:26:e8:fd:dc:3f:4e:fe:ba:5f:c1:94:78:fd:e5:c0:05:0f:
11:8f:69:65:f0:d5:89:19:9e:18:d6:c8:84:af:6a:ba:18:65:
da:43:eb:ef:15:d8:8d:d6:1c:62:40:a7:2c:a6:9c:83:a0:f2:
bc:c4:30:cd:17:70:32:2e:5b:44:3c:26:1c:6f:58:96:0b:ee:
b5:fb:65:cd:c6:e3:ac:bc:d6:7f:46:db:0e:c3:50:71:18:4c:
29:5a:dc:92:ce:69:96:ad:4b:ac:fa:5b:d2:1f:4a:6b:69:3f:
05:5d:50:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:42:51 2026 by rpki-client