Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
File: 1TVDIcElQ2AUXq8l9pk4uN80ezE.mft (raw, json)
Hash identifier: BzA5NIF5zroDYguMcRqsd67mzokSK+2vSHoCLCPMylo=
Subject key identifier: F1:E4:61:64:AE:39:39:A7:45:F7:51:F0:2D:FF:80:94:64:1F:62:A6
Authority key identifier: D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
Certificate issuer: /CN=d5354321c1254360145eaf25f69938b8df347b31
Certificate serial: 01A180AB7FC2EB651B4C72F1FAEF61EE2797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
Manifest number: 0FCD
Signing time: Wed 28 Oct 2026 04:01:25 +0000
Manifest this update: Wed 28 Oct 2026 04:01:25 +0000
Manifest next update: Thu 29 Oct 2026 04:01:25 +0000
Files and hashes: 1: 1TVDIcElQ2AUXq8l9pk4uN80ezE.crl (hash: v/3YIz+GbtAnEKJWcPx5+7/a96racTzzPU2jhZOe/U4=)
2: U_Wx_VLTmQnNrPIvYuTTTSM-csE.asa (hash: I4CjIkcycH3lVGB02lm5TtvHjphE6QjWpSGKbYEOAgk=)
3: r3HWDDRgTxZjt0f8A4zqbjMarks.roa (hash: +uYv6GLbwnY+R5JBDKQIFIfeDHhF4FB60kCchPztyPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:7f:c2:eb:65:1b:4c:72:f1:fa:ef:61:ee:27:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5354321c1254360145eaf25f69938b8df347b31
Validity
Not Before: Oct 28 04:01:25 2026 GMT
Not After : Oct 29 04:01:25 2026 GMT
Subject: CN=f1e46164ae3939a745f751f02dff8094641f62a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8c:2d:7e:99:56:cc:c6:e8:c3:6e:42:1b:42:
17:ae:eb:b6:8b:41:eb:37:e5:ff:38:17:50:c9:b8:
83:fb:94:10:13:47:ba:22:23:98:5d:a0:81:18:fd:
cf:64:c1:c0:7a:e6:9e:d0:82:95:10:a4:e0:ca:65:
8b:d8:48:b5:6d:e6:81:c4:a0:c3:01:8b:ba:f7:c8:
b3:17:f2:09:29:ed:1b:a7:67:df:28:6f:b7:2a:52:
42:1f:6b:cc:9a:01:95:15:ab:c0:54:3d:fb:05:3a:
b3:c6:5f:02:68:38:da:d6:0f:19:62:90:29:d3:95:
9d:87:ea:61:ea:8e:6b:23:28:b8:72:20:7b:24:df:
5c:42:5a:cb:39:20:a9:45:43:62:68:df:0e:10:20:
93:69:be:37:ef:e3:36:f8:a3:ac:61:c5:c5:6e:04:
82:95:a8:04:45:f6:26:ac:3c:65:01:94:4c:f7:6e:
19:65:1d:7b:97:6c:b9:6e:d2:c1:5d:de:d4:07:02:
ae:ed:19:c3:f5:06:72:25:75:2c:dd:a4:e2:68:f3:
fe:d3:f4:e7:fc:c9:13:74:3a:14:38:58:bf:d4:cc:
17:5f:e7:a6:0e:0d:aa:fd:36:e9:42:d0:4b:93:77:
90:66:9d:04:67:86:8a:10:70:73:99:86:df:c6:86:
ba:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E4:61:64:AE:39:39:A7:45:F7:51:F0:2D:FF:80:94:64:1F:62:A6
X509v3 Authority Key Identifier:
keyid:D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:de:e2:2d:d6:1b:cc:71:66:eb:07:bb:84:72:87:97:f4:be:
e4:1d:23:46:b9:72:eb:2e:9c:cf:86:eb:38:01:61:be:58:08:
bf:ff:1b:31:5e:c2:9b:3a:1c:e8:9d:14:b5:8a:d1:a8:cb:59:
dd:05:8f:c9:75:1d:21:f2:9d:9d:cb:1b:8f:3c:82:88:70:9c:
23:16:83:e2:cc:32:07:c1:0d:df:59:38:f4:a0:4d:f5:ed:ca:
fb:c2:f5:40:c6:a1:b9:ae:f6:be:f3:c4:16:1c:a3:26:56:7c:
e8:f9:67:0f:0f:c6:b1:f7:e4:9b:76:6a:c0:bd:97:30:59:c4:
46:fc:dc:3d:06:ff:58:14:6c:e9:5e:b9:b9:29:e8:77:f2:98:
62:24:0e:8b:6d:c7:8d:91:4b:28:d3:28:10:7d:c7:8b:58:69:
b5:ec:94:cc:43:09:ec:6e:8a:7b:b8:eb:2e:58:7d:53:17:3d:
e6:c8:3f:2a:27:52:e6:4b:28:31:03:45:3d:f3:38:b1:7d:38:
c5:47:9b:3d:ed:06:d9:d8:bc:a2:e5:2d:00:2d:0a:46:88:74:
ec:a7:0b:4a:fd:a3:d7:84:e4:a4:a7:f3:13:81:53:cc:76:35:
8f:03:bb:5e:77:f1:3f:f7:85:fa:67:73:f5:d7:39:64:17:24:
1f:5e:9b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:28:57 2026 by rpki-client