Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/1cf938-a749-4257-8f5a-bd2767af5994/1/1oSD4ZrBNWztzi4qwqoma0vleCo.mft
File: 1oSD4ZrBNWztzi4qwqoma0vleCo.mft (raw, json)
Hash identifier: v2fXcfHd9BZ7QlYcl4SjR01lisGOv7tMP96iMjlU7sg=
Subject key identifier: F9:0C:97:BA:7E:9E:9A:AF:D4:A9:72:4F:41:6D:8F:05:52:29:A0:6C
Authority key identifier: D6:84:83:E1:9A:C1:35:6C:ED:CE:2E:2A:C2:AA:26:6B:4B:E5:78:2A
Certificate issuer: /CN=d68483e19ac1356cedce2e2ac2aa266b4be5782a
Certificate serial: 01A17EF44FC5194135A24254C692AC51DD64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oSD4ZrBNWztzi4qwqoma0vleCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/1cf938-a749-4257-8f5a-bd2767af5994/1/1oSD4ZrBNWztzi4qwqoma0vleCo.mft
Manifest number: 13
Signing time: Tue 27 Oct 2026 20:01:42 +0000
Manifest this update: Tue 27 Oct 2026 20:01:42 +0000
Manifest next update: Wed 28 Oct 2026 20:01:42 +0000
Files and hashes: 1: 1oSD4ZrBNWztzi4qwqoma0vleCo.crl (hash: OhPdr3+6HqAMJLBrXymTQgt+PfXRpdde/sTNtajkPmM=)
2: r5aXV61T92-yzOB2Z49Y9-3TynM.asa (hash: MvJ/DmH8Eg1ibE50/NXD4S3pB7Yv8nVCUiIqv5J7rtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/1cf938-a749-4257-8f5a-bd2767af5994/1/1oSD4ZrBNWztzi4qwqoma0vleCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/1cf938-a749-4257-8f5a-bd2767af5994/1/1oSD4ZrBNWztzi4qwqoma0vleCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oSD4ZrBNWztzi4qwqoma0vleCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f4:4f:c5:19:41:35:a2:42:54:c6:92:ac:51:dd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68483e19ac1356cedce2e2ac2aa266b4be5782a
Validity
Not Before: Oct 27 20:01:42 2026 GMT
Not After : Oct 28 20:01:42 2026 GMT
Subject: CN=f90c97ba7e9e9aafd4a9724f416d8f055229a06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:f9:10:84:5c:53:c8:c4:13:c5:50:77:a7:
2a:f5:ef:5b:b7:0b:04:4d:35:0a:5c:b0:60:32:1d:
35:8a:ed:1b:7e:c2:73:6a:f2:7c:90:c6:48:b4:da:
ab:b1:7f:d3:4f:2e:46:ae:66:90:b5:62:f7:66:21:
e3:d6:08:0b:30:8a:b9:57:a5:22:c5:af:70:7d:40:
de:5c:50:fc:83:d6:b3:9c:27:ae:be:4d:57:6b:60:
9d:31:97:a2:d3:a2:57:13:ca:96:ac:29:06:7c:aa:
40:44:78:7b:dd:8b:23:ac:22:84:41:4e:bd:61:63:
fb:fd:07:f1:ab:2b:0c:9c:18:99:0f:b1:1b:c8:c6:
9f:a1:29:26:ef:be:41:0b:e3:28:3a:b7:68:32:4c:
87:a9:c2:e2:62:a8:48:7f:00:81:f7:70:b2:db:95:
68:c3:90:80:34:02:b2:5e:9f:3d:62:90:39:76:35:
7a:53:e7:45:4b:b6:d8:6e:1e:ab:ca:c2:7b:b0:82:
a9:a3:29:98:ae:99:46:c1:b0:50:30:10:90:2e:07:
98:79:56:b2:bf:16:43:a2:cb:22:10:2b:08:5a:15:
24:c4:07:ef:ca:b0:9a:5f:25:19:83:f8:15:2b:c5:
a1:f9:13:8b:1e:de:21:05:91:cd:64:ff:16:e0:f3:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0C:97:BA:7E:9E:9A:AF:D4:A9:72:4F:41:6D:8F:05:52:29:A0:6C
X509v3 Authority Key Identifier:
keyid:D6:84:83:E1:9A:C1:35:6C:ED:CE:2E:2A:C2:AA:26:6B:4B:E5:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oSD4ZrBNWztzi4qwqoma0vleCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/1cf938-a749-4257-8f5a-bd2767af5994/1/1oSD4ZrBNWztzi4qwqoma0vleCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/1cf938-a749-4257-8f5a-bd2767af5994/1/1oSD4ZrBNWztzi4qwqoma0vleCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0d:3b:1a:92:46:99:2c:58:d1:a5:2c:91:8b:29:c8:75:bd:
f5:e1:ea:87:5f:81:b8:d1:d4:c4:dc:c5:94:6f:0b:48:e5:1b:
3d:2d:53:6a:c8:bb:e1:8d:af:a1:80:f9:56:0a:13:fd:31:50:
e3:71:ff:3f:76:b5:e4:33:b7:de:7c:5e:d7:26:fa:cf:e8:dd:
c0:b2:08:1c:69:af:5f:55:fa:7b:ba:a3:cc:6c:60:77:05:30:
e8:43:57:b7:95:43:f2:b6:4c:86:ac:3a:36:3b:10:ea:a2:c1:
eb:2c:df:b5:73:2f:1a:b6:eb:46:4b:87:3e:81:19:1b:be:14:
d8:0a:f1:94:2f:94:4e:22:32:09:9e:63:95:6b:5b:33:c9:3f:
89:f7:01:e8:bf:79:b5:ac:e7:45:f2:f0:2b:7c:80:7c:6b:5b:
a2:27:71:18:4e:68:68:c5:5a:3d:a0:ad:06:a0:74:35:28:51:
1f:b4:42:86:3e:6f:f9:92:cd:30:ec:1a:24:e0:ac:f9:3c:d5:
3d:10:8a:ad:f4:68:fc:0d:17:8d:02:39:1d:a1:1d:f6:a2:3c:
ad:26:a5:ee:85:06:40:6a:88:41:62:aa:d5:aa:da:9c:7a:f0:
5d:dc:40:25:97:91:af:f8:f8:e9:8d:cd:78:66:88:6e:39:74:
3c:77:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:22:31 2026 by rpki-client