Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier: /LE6Rx+NDlMZ9ingCL0O/T7AHAhMqWQjbwIXCpnFyFY=
Subject key identifier: BC:5C:16:26:91:FD:73:F8:DF:5B:D9:AE:EE:3E:08:63:1A:63:AC:50
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 01A0ED41900A2E54D3957DBD7D9D11ABBAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number: 1A7D
Signing time: Tue 29 Sep 2026 13:01:31 +0000
Manifest this update: Tue 29 Sep 2026 13:01:31 +0000
Manifest next update: Wed 30 Sep 2026 13:01:31 +0000
Files and hashes: 1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: k/D406wzAeNVg/6POMkHcNWNKFB3k6+zqw3Ge+IwyDo=)
2: mQsjU1zOjVRO_u3D1WDC_GA_q4U.roa (hash: 4af//0/sTljaocW55fj5PkOIaVuuWa8S7DrXdP1GzbU=)
3: oFwZbtA1lxypnx_w-x5XCq34vRQ.roa (hash: i/Rl9TaZZIbdRkmJK6JnEtSg149s52oPIfIzhWvJ8BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:41:90:0a:2e:54:d3:95:7d:bd:7d:9d:11:ab:ba:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Sep 29 13:01:31 2026 GMT
Not After : Sep 30 13:01:31 2026 GMT
Subject: CN=bc5c162691fd73f8df5bd9aeee3e08631a63ac50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:c0:d2:2d:db:f0:0d:23:c7:35:c2:fe:d9:
8a:35:82:72:3f:6c:a2:8a:99:cc:3e:0f:5c:34:ea:
e9:17:94:f3:db:14:5a:46:35:fe:76:88:ba:bb:d8:
99:d1:6f:2d:11:35:3b:0b:cb:43:95:d3:2e:ab:4b:
77:c0:9f:d6:30:33:06:8d:9b:0c:53:c7:48:23:16:
33:a0:2b:64:05:d8:61:12:f1:c5:d5:a4:5c:13:89:
7d:37:8a:25:14:32:56:03:52:aa:1f:5d:c9:bd:f6:
11:82:91:5e:03:33:09:f7:9c:ff:d3:39:da:9b:e0:
83:3d:83:1e:c5:dd:26:f0:e3:63:b7:35:b2:34:94:
65:3a:02:a5:2d:52:5d:ec:27:67:78:42:43:74:13:
a8:09:35:ea:2a:89:27:86:e4:3e:19:00:f2:15:63:
5b:4a:5e:a5:0f:7e:cb:0b:10:c8:6a:52:22:d7:5b:
fe:6d:18:fd:40:34:32:97:61:20:e6:6d:2f:61:25:
3a:1b:46:d0:a8:06:06:50:44:fe:20:01:fc:bc:5a:
e5:f0:6d:62:1a:90:a0:b5:c9:8a:dd:ec:8f:60:44:
75:4a:38:4f:02:f6:13:eb:8c:5c:4c:7c:80:f4:51:
05:04:aa:29:a5:f4:b8:84:49:e2:6f:15:a3:19:a3:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:16:26:91:FD:73:F8:DF:5B:D9:AE:EE:3E:08:63:1A:63:AC:50
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e5:22:4b:55:45:cd:2b:7a:36:65:07:10:8b:3b:11:d3:90:
29:76:85:de:24:79:76:34:08:d6:5f:eb:58:46:08:ca:33:39:
65:21:35:ac:18:78:1b:48:8c:39:ff:a1:77:b1:6e:bd:a2:f6:
9b:85:7a:f8:db:cf:09:c2:22:24:fa:0f:07:a3:c0:a8:e1:36:
da:a0:33:a0:0a:80:b6:70:8b:f0:b8:2f:bd:da:af:77:e7:9e:
6e:49:f2:bf:66:1b:59:22:6d:8e:a4:e0:94:53:66:53:86:85:
d6:43:39:99:52:18:4d:43:13:45:31:82:1c:fd:60:a0:0c:cd:
09:db:30:0e:f4:99:9f:91:8b:f3:5c:60:6e:d2:07:8a:f2:09:
d5:e2:6f:48:41:96:31:b0:0b:4f:52:61:4d:ef:07:d5:33:a8:
da:8b:f5:14:81:a7:4f:08:9a:31:96:92:a3:cd:09:7b:ce:4a:
5f:e1:c7:c7:cc:a8:50:dc:36:fc:0e:a6:a6:a0:a1:98:d2:6f:
af:3c:69:21:1f:af:b0:86:34:71:ef:b4:b1:e2:3d:3e:24:52:
77:7a:77:04:66:8e:b2:95:9a:9a:f4:00:fb:b4:94:37:23:56:
cc:d2:18:2e:c1:e1:18:f9:90:6e:7c:b7:c6:ba:97:fc:16:2a:
e9:c9:07:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:44:00 2026 by rpki-client