Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: 36jyJFohwwTJ/sgfKgjlAATR7pkq1Q+d4SSq+eS8bXg=
Subject key identifier: FD:FE:02:2E:E5:2D:D3:06:62:E5:3F:62:9D:7C:09:50:23:8E:39:D7
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 01A0DD297DA8BE258697CBDCA61AA32779B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 15FD
Signing time: Sat 26 Sep 2026 10:01:18 +0000
Manifest this update: Sat 26 Sep 2026 10:01:18 +0000
Manifest next update: Sun 27 Sep 2026 10:01:18 +0000
Files and hashes: 1: 0XRZXCUKM7qgvDzFYQSCAcIRDQA.roa (hash: MqBSGznS108FLh8ZEENPN2UXa6W8GAC2T4ZmIpHkguc=)
2: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: An16o9FqUt+HAJ86GpcOmsaAd1r9mihmH/eiPqcOdV8=)
3: nFTF0VkjXRKqCPY796T1GnzkqjY.roa (hash: WVddRHUkGr3zZHWqGX5a7FnpsfkXVaD8LmCGuvGSXrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:7d:a8:be:25:86:97:cb:dc:a6:1a:a3:27:79:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Sep 26 10:01:18 2026 GMT
Not After : Sep 27 10:01:18 2026 GMT
Subject: CN=fdfe022ee52dd30662e53f629d7c0950238e39d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4f:22:d3:87:ca:49:60:5c:17:ad:0e:1f:94:
5c:f3:3c:d6:ce:c5:49:9f:95:b7:9f:87:f6:e2:23:
10:3f:c5:04:b2:29:74:2e:52:5d:1e:8a:b9:02:98:
1c:46:72:c5:ec:1c:0e:a2:d6:f5:5e:71:f4:36:0d:
d7:3c:ab:c8:35:dd:cb:ca:25:95:d4:1e:31:8c:82:
a3:1e:ab:26:aa:05:ca:99:7a:13:61:3b:05:8f:80:
47:78:6c:ce:88:54:0e:ca:bd:ac:32:32:19:77:fc:
43:a4:d0:91:df:49:f2:e9:d2:92:58:3d:36:0b:34:
32:26:5d:b2:1d:36:0c:48:c2:73:21:88:df:84:db:
52:1a:6a:cb:6a:08:5e:ea:f2:34:5b:68:12:88:a4:
28:6f:d3:31:48:2f:81:28:72:eb:48:13:1f:82:27:
7e:29:b5:17:27:0b:63:72:4b:e7:ea:a5:53:28:e9:
e4:82:df:4c:59:8f:84:7f:44:4e:69:3c:4b:f4:97:
cf:b6:bf:26:3d:0e:c2:62:e5:5f:3e:b8:53:7a:10:
4a:41:21:3e:07:26:f7:46:3f:67:a2:39:f1:82:00:
cf:b5:6c:37:82:4b:18:4f:56:7c:e0:5e:4f:ff:f6:
f6:91:75:e4:b5:9b:b0:f0:59:44:2e:72:c0:b4:22:
c0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FE:02:2E:E5:2D:D3:06:62:E5:3F:62:9D:7C:09:50:23:8E:39:D7
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:68:01:4f:73:a1:c4:15:7c:93:b7:9a:d9:b1:16:2b:f0:3b:
84:f6:e4:52:23:94:37:cb:2c:84:44:c4:28:d7:12:af:b0:6d:
c2:54:8e:3b:b5:f0:1b:63:e3:a2:ea:33:c7:d6:2c:54:2e:90:
b3:27:5a:83:bf:12:05:3c:e4:79:fb:76:06:3e:18:38:dc:47:
50:cc:a7:69:57:5a:5e:40:06:48:fd:b1:8f:b1:7c:d1:f4:2d:
25:22:86:41:b5:3a:d4:d3:a0:ee:83:3a:95:7d:70:be:84:35:
2c:df:37:b1:66:9d:c3:f7:5d:5b:4f:13:00:d0:a2:5f:83:a8:
cd:5d:0a:9a:39:4b:91:b8:9a:d2:b3:ca:62:86:5b:18:17:34:
4e:7b:b6:d6:54:cf:c6:af:f9:7c:db:49:d1:62:91:71:83:e4:
20:73:a1:03:ea:02:1a:39:15:4f:4a:12:81:3f:25:fc:8f:7e:
70:2a:1e:f3:a7:f4:3e:f5:67:09:6a:76:d8:89:d4:d1:83:81:
f1:a8:c4:39:35:81:61:85:ed:e4:b7:34:8a:4d:f1:b0:97:74:
86:8f:d5:b2:6d:92:61:42:14:37:98:5d:ff:12:a2:da:a6:fb:
79:c6:9e:e6:d8:3e:fd:80:df:7f:26:75:e4:57:03:fe:04:45:
f7:0c:9e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:22:57 2026 by rpki-client