Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
File: 1TVDIcElQ2AUXq8l9pk4uN80ezE.mft (raw, json)
Hash identifier: 9gl+1XuhcMsx2OZ45F7XohHnvHyikphZORVYxPATzgw=
Subject key identifier: F4:34:A4:7C:40:EA:DD:9B:6A:82:D0:8A:B3:C8:2D:64:2C:06:9F:DA
Authority key identifier: D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
Certificate issuer: /CN=d5354321c1254360145eaf25f69938b8df347b31
Certificate serial: 01A184882793D45239D10C4A70A080DF5675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
Manifest number: 0FCF
Signing time: Wed 28 Oct 2026 22:01:17 +0000
Manifest this update: Wed 28 Oct 2026 22:01:17 +0000
Manifest next update: Thu 29 Oct 2026 22:01:17 +0000
Files and hashes: 1: 1TVDIcElQ2AUXq8l9pk4uN80ezE.crl (hash: r0CcAyCVFcOY9qneyIOiQecpoP7LUVloEosRMc4ehD4=)
2: U_Wx_VLTmQnNrPIvYuTTTSM-csE.asa (hash: I4CjIkcycH3lVGB02lm5TtvHjphE6QjWpSGKbYEOAgk=)
3: r3HWDDRgTxZjt0f8A4zqbjMarks.roa (hash: +uYv6GLbwnY+R5JBDKQIFIfeDHhF4FB60kCchPztyPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:88:27:93:d4:52:39:d1:0c:4a:70:a0:80:df:56:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5354321c1254360145eaf25f69938b8df347b31
Validity
Not Before: Oct 28 22:01:17 2026 GMT
Not After : Oct 29 22:01:17 2026 GMT
Subject: CN=f434a47c40eadd9b6a82d08ab3c82d642c069fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:34:2b:7d:43:e9:6a:33:c1:a7:ac:e3:db:0e:
d2:62:31:c9:8f:e6:2c:ee:59:68:4f:a1:60:05:99:
d9:c4:d2:ee:30:01:0d:ca:d7:3e:be:81:3d:cf:51:
65:d1:23:3a:4f:65:e1:6c:3f:ab:86:78:0c:80:81:
f6:31:9d:2d:ef:49:8e:c7:4e:7f:eb:1e:b9:ce:9d:
82:80:44:b2:be:53:e4:06:32:5a:40:ea:c2:c5:96:
d3:bd:a5:da:a7:67:62:43:52:5c:ec:3d:9e:4c:54:
75:d1:e9:66:5f:28:f6:32:a2:3a:e3:d2:d8:d5:4c:
d2:3d:30:25:fb:e9:fa:74:1e:07:97:7a:ac:86:69:
de:bb:3c:50:c3:e1:53:e3:fd:16:58:d4:df:a9:08:
bb:cc:eb:0c:43:43:4a:9f:e3:43:99:f4:c9:23:6e:
62:93:89:64:30:c5:7a:c4:cc:eb:59:cc:49:46:c6:
1f:6f:05:2c:33:aa:75:c6:79:74:8b:f0:b9:40:32:
5a:d4:be:04:06:ca:67:f9:6a:6f:92:22:a6:d7:06:
93:3c:f8:d9:92:fe:18:83:6a:5c:c1:a0:0f:f4:c2:
24:2d:10:5a:15:b3:93:e9:7c:2d:df:70:a0:8d:8f:
03:1c:cc:77:ec:75:63:47:b8:94:50:6d:6e:bb:df:
57:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:34:A4:7C:40:EA:DD:9B:6A:82:D0:8A:B3:C8:2D:64:2C:06:9F:DA
X509v3 Authority Key Identifier:
keyid:D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:62:34:d3:ee:9d:8d:4e:e7:af:a8:1b:39:20:95:4b:8b:1c:
70:39:b0:1c:8b:cf:62:97:c0:16:38:d2:4c:d7:ab:cb:47:84:
2e:47:bb:34:70:ae:f8:ed:91:c9:bf:ba:a0:69:4f:bd:79:b5:
bc:e9:73:da:9a:89:1d:72:74:ce:f3:f8:77:3b:d8:ca:5c:39:
4a:b9:83:68:9d:b9:f8:58:5c:4b:6f:49:0e:c7:8d:48:33:ab:
f3:59:40:57:dd:5c:f5:16:2c:08:11:61:30:81:45:7a:15:53:
4a:90:c3:73:09:26:64:00:c3:bf:de:af:e5:36:43:0f:a0:2a:
cb:d8:7b:f1:4a:48:9d:a2:66:63:89:be:a8:20:63:a4:04:26:
33:4d:7c:84:0c:34:ed:31:db:af:76:80:dd:fd:b5:12:a7:8f:
34:0e:07:ae:32:71:6c:36:e9:c0:98:2f:90:15:f5:10:a4:b3:
0b:1d:f5:05:46:82:18:10:fb:5a:aa:2c:90:68:0e:ec:3f:21:
7c:2d:b0:b9:c2:f2:0f:ee:f5:a8:23:98:fd:44:15:27:6a:4e:
3a:65:f7:49:0a:80:90:af:ca:42:e5:05:e4:fd:d1:3c:15:e7:
7f:32:f6:ba:2b:bc:84:50:fd:4c:fd:69:a5:0d:e5:ee:d5:99:
69:10:7f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:44:26 2026 by rpki-client