Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier: zJo724yhwx3p0AwMTA1rRR2gCSylPAhW+OxhYQKsO+A=
Subject key identifier: C0:9F:82:32:BF:43:29:8B:4E:9D:71:32:21:34:B0:FB:72:28:5C:FE
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial: 01A13F702E1629043EF18228550B1C04D848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number: 17CC
Signing time: Thu 15 Oct 2026 12:01:18 +0000
Manifest this update: Thu 15 Oct 2026 12:01:18 +0000
Manifest next update: Fri 16 Oct 2026 12:01:18 +0000
Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: EjJq7hGMxNxcdD+Z1kwgH/6GWIc5Sf8+q5mtSjSgUuw=)
2: jTE7aus6FHt_I5mpklvVVf-KpAw.roa (hash: jTSKuDkQyIFhQKFi7+s/96OtXGRbDcnGaxvdpome6eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:2e:16:29:04:3e:f1:82:28:55:0b:1c:04:d8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
Validity
Not Before: Oct 15 12:01:18 2026 GMT
Not After : Oct 16 12:01:18 2026 GMT
Subject: CN=c09f8232bf43298b4e9d71322134b0fb72285cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:42:f1:ad:01:3c:cf:ab:6c:8f:b5:19:2e:
94:16:42:57:0e:2b:10:9e:71:40:a0:93:f2:15:63:
ba:20:8f:b8:99:1d:7d:a4:53:70:40:8f:8a:16:bf:
47:d0:a5:3d:95:e2:7d:8d:2c:15:27:a9:3c:4e:e5:
a7:ef:f3:44:4f:c8:7a:1a:d6:de:8e:78:c3:02:b8:
6a:e4:06:cd:2e:24:14:e3:76:6b:d8:f8:6b:45:21:
64:b5:53:11:ed:99:3d:81:b5:07:e9:d5:3e:77:8e:
9d:b3:37:94:5c:8f:86:1f:50:f7:67:f3:4b:f9:3f:
1a:f7:2a:3a:31:7e:d1:6a:bd:a6:c8:c8:6f:84:b2:
fc:96:18:e9:9f:2d:69:ef:7f:48:e4:fc:ca:dd:d2:
fe:e3:44:21:c0:92:26:d6:93:c3:44:56:1d:48:74:
e3:fd:cc:a7:87:5a:12:fc:f0:fd:8e:fc:c9:d7:62:
85:62:f8:64:8f:bd:6d:fd:65:9e:d5:cc:62:3c:72:
33:93:26:07:89:c2:b6:a9:c2:7f:4e:74:a5:25:52:
e0:dd:4d:53:19:12:9c:e1:ff:44:5c:97:2c:85:2d:
3b:1c:1c:6e:bc:a0:b3:06:af:f0:c0:6b:d3:12:c6:
82:b3:5c:5b:9d:f9:95:d2:78:0e:4d:fd:de:f0:23:
de:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9F:82:32:BF:43:29:8B:4E:9D:71:32:21:34:B0:FB:72:28:5C:FE
X509v3 Authority Key Identifier:
keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4c:94:6b:76:70:68:5c:3f:16:87:dd:ea:6b:0d:01:6c:7f:
e7:09:84:4e:8e:38:77:cb:9c:e4:88:ae:e1:f5:23:d8:93:98:
71:33:f0:41:6e:b5:de:a3:02:e4:65:62:92:3d:8a:f6:be:d4:
3c:d1:52:bb:b7:f0:7e:0c:62:22:56:e8:18:c3:81:ad:e9:a2:
09:fd:2b:4b:3b:85:06:c7:80:91:13:a7:f9:05:dd:f1:ed:c8:
9b:5d:b6:40:ae:b0:56:d6:1c:fb:de:84:a5:e2:c5:7a:9c:60:
66:41:85:38:bd:be:4d:b8:ba:c9:ce:57:df:a3:e2:96:b0:73:
4d:ba:08:97:91:58:ae:16:8f:a9:44:26:13:18:72:19:2d:ed:
11:a6:9e:36:e8:06:22:c5:d3:0d:75:a6:c7:c8:a7:e6:bb:90:
c8:68:1d:03:14:49:c0:8d:91:a9:ea:75:b5:6c:3b:b6:19:d7:
11:c1:07:7b:51:6a:d6:75:d3:6e:92:24:c8:6b:eb:60:37:5c:
df:05:57:5c:30:8a:11:02:df:c6:93:f8:13:5a:41:83:1f:b8:
d7:d4:5d:42:65:3f:4e:6c:50:ed:99:30:6e:66:b1:4a:15:1e:
99:0c:3a:fd:e2:6b:e4:59:be:6d:27:bd:d1:0c:78:33:cf:fa:
df:c0:c2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:58:42 2026 by rpki-client