Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: OqG3A/sI36/taIiz2DZ5BM3BM50NN7uP3v6m9NhJ+BE=
Subject key identifier: 82:AE:CE:2B:41:82:62:A8:5A:18:7C:DB:D3:C5:9C:56:89:FE:F2:6E
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 01A13C6E5F56E02D9BB8CACAA0417B035173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 0A2A
Signing time: Wed 14 Oct 2026 22:00:28 +0000
Manifest this update: Wed 14 Oct 2026 22:00:28 +0000
Manifest next update: Thu 15 Oct 2026 22:00:28 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: 0Bcu8YuwXE6zMfnuxe42FJOXytgZMdLcjfK5xJeRwkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:5f:56:e0:2d:9b:b8:ca:ca:a0:41:7b:03:51:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: Oct 14 22:00:28 2026 GMT
Not After : Oct 15 22:00:28 2026 GMT
Subject: CN=82aece2b418262a85a187cdbd3c59c5689fef26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:c6:cc:1c:21:d1:a7:7d:fe:4d:7d:8f:72:
e2:80:ef:4d:86:a0:ad:5a:8e:57:4e:c9:bb:86:32:
f9:4d:dd:0c:f2:b0:07:85:a9:6d:24:9a:61:7a:e1:
43:cb:cd:74:4a:5f:13:e3:08:f4:7f:00:1e:a5:05:
38:3a:69:52:d3:e4:cf:99:d0:fe:b5:2d:09:be:d4:
75:52:fc:5a:e6:5b:9d:c6:5b:39:48:96:ff:e9:a1:
7d:e1:01:69:d9:a9:8e:48:d1:6c:b1:d1:2a:03:bb:
3f:4b:ed:06:79:52:d2:80:f6:11:c5:a2:3f:4d:dd:
06:a4:1f:5c:1d:6e:42:9f:83:c1:60:95:b2:48:89:
a1:79:ed:9b:b6:c9:8b:c1:39:c8:e8:d4:c4:14:1d:
cd:f1:57:5b:bf:23:7b:2d:8e:1d:d5:eb:a8:fc:5b:
aa:d1:06:9c:c5:d8:39:23:ca:2c:4b:ee:04:90:2c:
3c:c6:e8:53:bc:4b:de:5a:f2:28:7e:1f:5f:89:ff:
9c:d9:d0:b4:1d:18:ef:4e:2b:06:fc:55:e6:12:c1:
c4:5d:55:0b:06:bb:ab:56:25:7c:4e:68:6f:34:df:
0c:3c:ce:74:cb:7a:c7:a7:66:95:b3:75:57:02:4b:
8d:20:3c:a6:ec:33:ad:b9:68:5a:6f:99:ca:88:8e:
e9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AE:CE:2B:41:82:62:A8:5A:18:7C:DB:D3:C5:9C:56:89:FE:F2:6E
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3b:42:bb:f6:e8:bc:98:09:ff:86:45:30:85:0e:5c:c6:e2:
98:99:5b:3e:6e:d8:b7:e2:09:45:2d:01:36:cb:97:f1:7f:e4:
be:d8:dc:52:34:8b:d1:9e:63:49:6f:46:95:0a:21:5f:2d:5b:
86:9f:e4:e8:05:2b:b7:99:58:f2:91:00:82:11:c9:b3:2a:2f:
85:e4:96:c9:c9:df:0a:69:b4:1d:c8:4a:e6:ff:c2:3d:85:26:
0b:31:83:30:a8:c7:c3:74:c7:3d:4f:24:f3:8b:80:f2:78:42:
62:97:3f:85:dd:16:f1:60:28:a5:c0:25:86:0c:ea:58:2e:6a:
ab:5c:4e:0c:9b:cb:ac:0a:f1:32:87:77:fd:67:f5:5b:ec:86:
38:ce:e7:b2:f3:cc:5b:2e:de:ca:0b:aa:65:0e:b5:9f:9e:52:
ad:27:2f:6d:95:73:4e:1a:fa:7a:27:13:bf:ad:43:88:40:6b:
55:e2:78:23:1e:2d:e2:bc:82:55:2b:8f:40:84:2e:74:00:df:
20:fd:6a:44:7b:da:c5:38:e4:b4:79:17:b1:ac:17:8b:bc:df:
60:7e:d0:7e:6e:34:5c:09:21:24:a3:59:e3:43:2c:6a:eb:ad:
75:9a:4d:3d:34:74:51:44:4a:4e:e9:38:88:dc:35:fe:a2:8a:
26:06:ad:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:42 2026 by rpki-client