Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: ptC3u8CzOhLI+U1RcRSvTe2XL+59ePv7krP67djp7HQ=
Subject key identifier: 5C:79:BD:FF:E1:DC:51:F3:FB:9D:1B:60:80:3A:ED:06:D3:9F:8C:2D
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 01A13E2624FAB11076BE69701D1DB93BA82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 1286
Signing time: Thu 15 Oct 2026 06:00:49 +0000
Manifest this update: Thu 15 Oct 2026 06:00:49 +0000
Manifest next update: Fri 16 Oct 2026 06:00:49 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: xsN2akMz9Zfqqq/twqEjthbK3jaoILDLIsy4+WhmHDI=)
2: 6Pc_yuf6U7fifvpMORJRJWUOec0.roa (hash: YkCtWd8TqjpXFSR0IlaGJlvhxUpQhvA2ISYdw8xN7rc=)
3: SiiyX2N_VudkW_kgHjDWb96Midc.roa (hash: VBfDCyR0GjOaXAtcZCDfH6SSSVgHl3aLvPMUM1TIr7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:24:fa:b1:10:76:be:69:70:1d:1d:b9:3b:a8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Oct 15 06:00:49 2026 GMT
Not After : Oct 16 06:00:49 2026 GMT
Subject: CN=5c79bdffe1dc51f3fb9d1b60803aed06d39f8c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:17:8b:60:14:4a:53:d5:19:8a:c1:e2:91:
ce:6a:1a:69:2b:16:66:c8:15:79:50:70:e1:ed:a9:
a6:db:fd:34:c4:44:04:b6:36:a7:9e:3e:ba:db:40:
cd:27:6b:8b:37:dd:48:e7:e8:81:3d:95:1c:db:a6:
eb:77:2e:b8:12:c0:6f:1b:c9:68:e1:51:38:e3:4a:
57:63:df:9b:e8:60:c6:d3:6a:7f:c9:22:1e:7c:9a:
1b:d3:6a:f4:81:bf:0f:54:48:b2:b7:fb:5d:79:5a:
22:ec:0d:0d:60:ef:47:6b:99:4a:7e:3d:c8:00:71:
b2:6f:17:e7:25:28:a8:9a:ec:68:5f:25:f4:25:b4:
41:f3:b0:cd:65:e2:db:2b:77:6d:16:1f:fe:91:16:
0c:41:a4:42:e8:ae:c9:20:23:4e:0b:2d:da:c7:d4:
ee:fe:e6:a6:9b:da:60:7e:70:26:b5:3e:a3:47:62:
d4:e2:ed:ac:27:34:48:57:5d:ea:04:1e:9c:7c:93:
b3:4b:e9:f2:df:1d:4f:7e:25:f4:1d:7d:09:eb:25:
1d:60:03:23:c6:93:31:5f:7f:12:09:fd:fc:b5:ba:
3f:fc:2d:ff:87:48:01:8f:f5:8e:2c:3a:62:d6:fc:
6a:1f:24:0e:ae:9d:3e:d6:9b:e0:33:27:85:61:b2:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:79:BD:FF:E1:DC:51:F3:FB:9D:1B:60:80:3A:ED:06:D3:9F:8C:2D
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:91:7c:e3:8c:16:66:c3:5f:36:b0:50:55:f0:27:57:6d:e5:
13:74:8f:20:16:3c:cb:3a:32:08:7d:c3:84:7d:fc:22:a4:82:
80:ad:87:b5:fc:2a:81:21:80:7a:99:e5:96:09:f8:df:28:5c:
e5:37:d6:09:35:68:8a:49:f9:e0:aa:9e:cd:8a:e1:2b:49:1a:
86:e3:67:fd:58:fe:5b:df:f0:f9:3b:30:04:a9:39:7c:07:9e:
41:dc:fc:00:a8:36:bc:b1:6a:75:c0:20:10:f1:c1:f2:60:4b:
f7:4c:cc:8f:15:f4:ea:53:54:6b:ec:37:45:51:c4:c7:4e:ac:
ee:ce:02:6a:19:be:6a:48:07:7b:70:05:59:c6:12:e0:04:6e:
55:5b:3a:ee:c3:5c:4d:42:54:4a:55:de:1d:07:ce:a5:46:d3:
d8:fd:20:01:aa:c6:9b:78:e8:93:d4:79:44:b6:54:c2:82:5b:
69:9d:e6:e7:18:91:80:47:e3:0e:2b:92:f8:ec:7e:a0:02:3f:
e3:90:89:73:dc:e2:1a:32:3f:e2:12:5e:8b:02:aa:61:39:60:
5d:36:d6:34:c3:1c:5a:c3:28:c3:ab:4d:80:c8:72:65:26:dc:
85:09:6a:61:ae:61:df:0b:d0:78:0a:a8:52:14:5a:09:46:71:
af:5f:05:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:17:37 2026 by rpki-client