Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json)
Hash identifier: +0twm0YQ+62hWjFV6FzonKFWpbluHrwjQ1Azjj/EmEQ=
Subject key identifier: 5D:78:77:85:26:83:51:6A:31:AF:FA:B5:37:39:D8:93:0E:DA:22:E6
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 01A10F27DE7DEAED0153FA99B49478B8F225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
Manifest number: 1A8D
Signing time: Tue 06 Oct 2026 03:00:33 +0000
Manifest this update: Tue 06 Oct 2026 03:00:33 +0000
Manifest next update: Wed 07 Oct 2026 03:00:33 +0000
Files and hashes: 1: B6KgFpwvViQTEk9Dmhs8MfS-w7s.roa (hash: OhVWCZDoCQizES2xkeCkzPUeD4jK/eG28KZNwsfJC3Y=)
2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: FtjHjehMj4efWCA2WPVIc8i3rFF/xAKD6gnY+r5shPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:27:de:7d:ea:ed:01:53:fa:99:b4:94:78:b8:f2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: Oct 6 03:00:33 2026 GMT
Not After : Oct 7 03:00:33 2026 GMT
Subject: CN=5d7877852683516a31affab53739d8930eda22e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:72:7f:2a:5d:1c:fd:a3:1f:c4:22:fe:a0:33:
9f:45:c0:26:f0:60:ab:09:a2:d8:39:1a:88:41:31:
ef:37:28:84:6d:88:c0:51:6e:f7:ea:fe:c5:d3:c1:
bd:21:68:18:7c:02:9b:e3:c5:f1:4f:73:6d:56:9f:
9a:8e:e1:00:dd:bd:b4:20:6d:7b:db:28:4d:a4:5e:
73:81:07:4b:82:98:ed:8a:0c:96:e5:3f:a4:29:66:
15:ca:00:3d:64:15:cd:02:be:1a:99:07:b7:a6:b8:
34:a6:92:d8:7b:eb:6d:09:e5:1e:26:3c:d5:2a:4e:
c1:f6:34:8f:b5:e3:44:9f:3a:35:3d:e1:a8:8e:e1:
22:da:8b:e8:86:41:5c:92:d5:c7:6d:28:66:87:74:
0a:0c:8c:b0:6f:bd:04:d9:56:6b:9b:b6:af:eb:b7:
9c:51:78:d4:6d:ec:86:7d:35:74:a2:79:6e:50:2f:
40:5f:42:1a:00:12:db:ac:d6:64:2a:60:64:9e:45:
ca:48:c9:ab:6b:ba:ed:f2:eb:5f:d1:ee:e3:9b:43:
78:bc:9e:f6:ae:5b:27:9b:72:4e:8a:9a:c7:01:6d:
28:80:a8:b3:09:ab:2f:f2:2e:26:7e:58:86:39:0d:
ca:c7:dd:4a:68:5d:38:01:96:e5:58:14:e5:b6:6a:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:78:77:85:26:83:51:6A:31:AF:FA:B5:37:39:D8:93:0E:DA:22:E6
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a5:e3:c9:b5:3d:b3:e8:e2:36:3a:87:48:73:37:0b:65:6a:
0c:6f:93:a6:62:0d:7e:b3:73:61:8c:b7:7f:62:58:1c:57:e4:
2e:c0:9a:d3:85:af:52:e2:45:8e:aa:00:8a:51:aa:02:4e:95:
c6:4e:d7:bd:f8:a9:f3:64:36:77:1c:64:b8:05:5d:8b:39:bd:
de:48:df:b8:38:fe:e0:75:81:e7:d1:33:e9:fb:ec:16:4e:72:
e3:6a:b3:95:fd:24:f5:ba:01:70:ff:2e:50:c2:9a:e2:e2:b5:
5e:c2:a5:6f:3e:c4:b6:b7:4b:49:e6:70:7b:51:57:fe:e4:a1:
e8:ec:8a:ef:7a:cb:15:6a:26:d9:5b:82:49:00:9a:e1:71:ff:
83:68:93:63:93:e4:5c:1d:51:8a:d4:b5:80:f0:82:82:e9:c6:
a8:fd:fd:3c:f8:35:93:c3:e7:e5:78:3b:ad:c5:36:4f:cb:d5:
e0:ee:cd:95:74:69:b8:0d:82:9d:4f:36:7a:79:72:72:c4:54:
b1:33:b6:c6:b8:bf:7b:98:ef:72:55:d9:b2:51:90:04:d0:4f:
8c:47:1f:28:16:c3:63:cd:e0:c6:4d:06:78:21:f6:c0:39:cb:
68:d0:e9:28:e1:ab:8a:ac:14:f4:41:95:ef:0b:a2:f6:73:9b:
70:52:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:22:57 2026 by rpki-client