Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/1trYhVwnrD8dbX4u-OWXV3pqqSA.mft
File: 1trYhVwnrD8dbX4u-OWXV3pqqSA.mft (raw, json)
Hash identifier: YbYU6WvUE2LgQ2zrqMr+eArE8lAURQi10tF62TqBKm4=
Subject key identifier: 18:DC:B8:47:2B:BC:87:92:26:DC:0F:29:A6:A3:96:D0:4A:BB:80:1A
Authority key identifier: D6:DA:D8:85:5C:27:AC:3F:1D:6D:7E:2E:F8:E5:97:57:7A:6A:A9:20
Certificate issuer: /CN=d6dad8855c27ac3f1d6d7e2ef8e597577a6aa920
Certificate serial: 01A125423E50E2D58E5ACD6E365ABD721F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1trYhVwnrD8dbX4u-OWXV3pqqSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/1trYhVwnrD8dbX4u-OWXV3pqqSA.mft
Manifest number: 15
Signing time: Sat 10 Oct 2026 10:01:00 +0000
Manifest this update: Sat 10 Oct 2026 10:01:00 +0000
Manifest next update: Sun 11 Oct 2026 10:01:00 +0000
Files and hashes: 1: 1trYhVwnrD8dbX4u-OWXV3pqqSA.crl (hash: b8jrjrkVXcWbwMqJBhXCwW24nS7h7kEQH6FsR2a1uho=)
2: _YWFB8tl5Y8gMiLHOtKbHI--A70.roa (hash: IjVGacV+Q23BecX32dX/SDafJuoloB3F56TXBAzJvXM=)
3: cIgHVKNh533KrGBu3r1u02KG0vE.roa (hash: FISV07d/2Gbmgpj8aJOUTEuVMMVqa5/L2CaIyRaP1CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/1trYhVwnrD8dbX4u-OWXV3pqqSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/1trYhVwnrD8dbX4u-OWXV3pqqSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1trYhVwnrD8dbX4u-OWXV3pqqSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:42:3e:50:e2:d5:8e:5a:cd:6e:36:5a:bd:72:1f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6dad8855c27ac3f1d6d7e2ef8e597577a6aa920
Validity
Not Before: Oct 10 10:01:00 2026 GMT
Not After : Oct 11 10:01:00 2026 GMT
Subject: CN=18dcb8472bbc879226dc0f29a6a396d04abb801a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:3d:a2:1e:a0:e5:91:08:75:b4:37:3d:6b:
87:11:17:c3:72:0a:b7:0d:98:43:7e:59:7a:f9:5f:
fe:a0:e2:10:b8:52:94:9f:5c:27:1d:21:87:7d:02:
48:0b:8b:75:0e:29:e2:5c:75:44:0b:bc:4f:cd:e6:
44:1f:b5:c6:a6:7c:07:8b:0d:3b:75:fd:71:ed:09:
51:67:1d:c7:eb:6c:ca:37:45:59:43:f2:7e:75:18:
cc:cf:b6:5a:fd:8b:89:7f:58:71:30:5f:b6:39:f0:
66:b1:00:99:38:ca:aa:d7:60:89:6e:1e:36:ef:39:
ad:ff:ee:f9:15:6b:64:df:95:9b:97:cc:dd:fd:e6:
0d:2f:5d:5f:30:4a:dc:1a:f8:5f:95:06:20:a1:4c:
5a:fb:76:11:02:f1:6d:a0:e1:c0:33:17:87:8b:be:
85:e5:44:f0:7c:ad:6c:eb:de:68:03:45:be:b2:f1:
b9:44:0c:08:82:43:2f:22:91:ff:fe:d7:a1:ac:12:
a4:ca:01:f9:da:7c:58:79:df:67:7a:bd:21:47:5d:
e8:73:4d:3d:8f:a9:89:d1:a8:98:e7:27:19:4b:99:
33:54:e2:1c:6d:82:69:0d:b4:e8:dd:0a:56:c8:dd:
a8:70:6d:e6:0c:f6:fa:c5:a1:b6:9d:1b:6c:70:1c:
2a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DC:B8:47:2B:BC:87:92:26:DC:0F:29:A6:A3:96:D0:4A:BB:80:1A
X509v3 Authority Key Identifier:
keyid:D6:DA:D8:85:5C:27:AC:3F:1D:6D:7E:2E:F8:E5:97:57:7A:6A:A9:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1trYhVwnrD8dbX4u-OWXV3pqqSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/1trYhVwnrD8dbX4u-OWXV3pqqSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/1trYhVwnrD8dbX4u-OWXV3pqqSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a5:1c:21:9b:35:05:b2:34:73:3e:93:61:11:b4:bc:93:ad:
8e:24:c4:6b:3f:d8:4b:15:b8:3f:de:a1:f2:ae:40:02:1b:0e:
46:08:19:4b:83:bb:33:13:51:b3:b8:89:f1:b4:88:a7:d6:e5:
28:54:89:b1:4f:79:27:46:c4:f1:7b:1a:4e:f2:10:a8:39:cc:
fb:12:5c:ff:5c:d8:84:c3:70:30:26:16:44:86:75:6c:e4:2a:
aa:b3:c5:b4:5e:d2:d0:fc:63:a8:4c:61:b4:e7:7c:5b:e6:62:
57:13:8a:1f:96:91:6f:e5:88:c4:47:dc:eb:71:15:33:8f:a6:
dc:ac:74:5d:28:84:a9:cf:0e:ed:1e:7e:e5:95:22:19:c3:62:
52:cb:f2:5f:60:52:ba:54:f8:c6:92:c9:46:e4:2f:a2:41:9a:
06:4c:08:32:52:47:be:16:1d:10:13:1c:ac:ea:22:7e:54:7e:
3b:26:dc:7a:29:70:68:0b:80:cf:80:bb:78:cb:2e:a0:d1:d0:
d9:6e:82:e2:be:e9:ca:40:e2:73:67:b0:07:27:00:4a:f0:f1:
d6:15:8c:37:83:ed:69:94:73:3b:6b:69:c7:39:87:52:50:af:
65:f4:84:fb:3f:1b:cc:d6:12:c5:44:9a:85:7e:5c:3b:11:39:
a3:29:d5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:08:19 2026 by rpki-client