Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft
File: 1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft (raw, json)
Hash identifier: N+WT8x2uK1M2423MOjELhy8G8aqEH+PLSBsDJR0In6o=
Subject key identifier: 8E:C2:16:85:C0:CE:6E:51:7F:0F:C0:B7:D1:DD:A7:07:B0:BB:F9:79
Authority key identifier: D4:F0:45:5F:74:5E:F9:3C:2D:65:BF:73:F0:53:F6:31:B3:AE:CD:80
Certificate issuer: /CN=d4f0455f745ef93c2d65bf73f053f631b3aecd80
Certificate serial: 01A08A8CD68A63CA04248DF17981F4ADF9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PBFX3Re-TwtZb9z8FP2MbOuzYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:20 +0000
Manifest this update: Thu 10 Sep 2026 09:01:20 +0000
Manifest next update: Fri 11 Sep 2026 09:01:20 +0000
Files and hashes: 1: 1PBFX3Re-TwtZb9z8FP2MbOuzYA.crl (hash: gxF8jTNj29OD9ZufYur1g5sOJEQ8eYn30Hv83Kmc3FU=)
2: 5vAwcbdTRz-0U7GLJ6AIyLP61fo.roa (hash: JnIHeO8xvI7ywhZBlyvW36i3gSDsUsdWcdM+GZ8Te+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PBFX3Re-TwtZb9z8FP2MbOuzYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:d6:8a:63:ca:04:24:8d:f1:79:81:f4:ad:f9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f0455f745ef93c2d65bf73f053f631b3aecd80
Validity
Not Before: Sep 10 09:01:20 2026 GMT
Not After : Sep 11 09:01:20 2026 GMT
Subject: CN=8ec21685c0ce6e517f0fc0b7d1dda707b0bbf979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a8:f5:5f:1d:ef:c0:56:49:f8:e8:90:d6:b8:
9f:58:57:f6:9b:ef:2e:8c:39:b8:dc:ec:0b:bb:59:
b3:dc:92:61:d0:d7:56:d7:70:40:cb:5e:83:fd:e3:
01:95:48:89:ad:14:4f:07:c9:3e:3e:a3:72:b4:65:
4c:8b:f9:a6:52:61:00:0b:bc:62:57:e8:cf:18:a7:
ca:f4:a1:6f:25:2c:cc:8d:f8:00:66:13:ab:9b:ec:
cf:82:ca:bf:cf:4f:94:5e:3b:ad:69:28:b9:01:ac:
90:cb:90:a4:e5:87:a5:0c:40:c8:88:88:11:c2:e0:
b2:dd:97:ff:e2:24:97:cf:55:22:5d:96:56:6c:06:
5c:45:ac:20:89:cc:0f:51:5e:4b:bc:cc:0b:7d:63:
22:b3:b2:8c:d5:e6:b0:1d:78:de:6e:7c:c8:6a:63:
00:9a:2a:4f:c7:34:01:1e:2d:9e:95:1e:0d:d7:9e:
b7:7b:eb:d9:52:87:2b:b5:fe:31:80:d1:41:69:68:
74:ef:f9:0f:c5:48:6f:94:e0:64:9a:40:71:47:e1:
b6:d9:bb:9a:11:b7:fa:29:e0:18:d6:69:84:bb:7b:
4c:b1:86:42:0b:9f:72:b4:9c:a5:5d:f1:a2:94:b1:
93:bf:8f:9b:8b:38:7a:98:13:fd:ce:ba:c4:9e:1b:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C2:16:85:C0:CE:6E:51:7F:0F:C0:B7:D1:DD:A7:07:B0:BB:F9:79
X509v3 Authority Key Identifier:
keyid:D4:F0:45:5F:74:5E:F9:3C:2D:65:BF:73:F0:53:F6:31:B3:AE:CD:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PBFX3Re-TwtZb9z8FP2MbOuzYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:64:bb:99:f8:3e:b9:f8:01:d5:56:9b:6b:48:61:85:0d:25:
6b:50:dd:3c:9a:13:e1:19:5c:9e:a7:df:9f:a2:aa:0b:18:1e:
f6:3a:09:19:ec:83:4e:67:de:88:b3:8c:81:1c:e2:3f:8a:b2:
f2:4f:90:ab:14:7a:cb:56:ab:d4:a7:1d:9c:2c:21:b6:95:db:
b0:2e:be:e4:ee:a6:6e:eb:1f:c5:fa:ec:d4:90:b9:da:17:a3:
be:d4:6f:ab:d6:2b:dd:6b:66:de:61:8e:e4:ea:30:b7:68:d6:
21:8f:6e:b0:41:98:ec:1c:bd:94:de:a7:c8:ae:86:c0:a2:b0:
7a:c9:6e:6b:7c:f4:9d:94:42:c5:61:f6:48:62:d2:57:36:0c:
1e:db:18:e6:4a:4e:3a:85:60:22:0b:62:0b:56:0d:67:1e:1b:
d7:33:2c:03:06:44:d6:74:b5:bc:71:e8:e6:db:1e:38:61:f4:
11:e6:8a:06:71:7b:f7:fc:06:02:5a:d1:85:4c:2b:98:de:82:
b9:35:5a:72:79:1d:e4:8b:a6:4d:84:7b:f7:02:73:0f:b9:2a:
a3:e3:f2:18:f9:f7:2c:50:d1:6b:d8:ea:7f:a4:62:be:59:97:
f7:e5:52:75:84:b2:d4:4b:6b:25:74:70:4e:a9:ab:e1:76:3f:
af:81:9f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:32:57 2026 by rpki-client