Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: vv8ALw6UT89gDfSxOdd8pf+o7ZCvuIRs+pNhK2FOj8o=
Subject key identifier: A0:70:43:59:CD:67:0B:2D:AE:95:33:3C:21:BC:C2:F9:92:CC:3D:18
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 01A0CF36091E9E64C88AA2380833B079E32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 17:00:19 +0000
Manifest this update: Wed 23 Sep 2026 17:00:19 +0000
Manifest next update: Thu 24 Sep 2026 17:00:19 +0000
Files and hashes: 1: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: TqVmNI3/yLq6vXPp5QdBlbGSgpf/ubgeymh0XOtgk4M=)
2: vWKPs1EksdLNehXFmCXDKSULnXk.asa (hash: yNn9JtBbsWodt41KzrmjveQKUch9zXpyA0sczkLauf4=)
3: yV3n7Of-XfxujJs_oZpOk9T5zxc.roa (hash: RWU+lLoWMG+Uf+PGBYW1EPxQGP3cMIviVCgLyu7si9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:09:1e:9e:64:c8:8a:a2:38:08:33:b0:79:e3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Sep 23 17:00:19 2026 GMT
Not After : Sep 24 17:00:19 2026 GMT
Subject: CN=a0704359cd670b2dae95333c21bcc2f992cc3d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:b6:74:96:86:c6:37:4a:f7:cc:96:38:19:
02:48:c1:68:1c:2f:70:ca:3e:00:93:ca:10:7e:3c:
e5:7e:f2:e8:41:b2:4e:a9:0d:2c:99:08:6f:25:b1:
c2:56:da:9e:ab:57:0b:c7:83:a3:73:4c:4c:4d:2f:
7a:68:0a:a3:22:4b:de:de:86:2d:5d:c4:b7:10:78:
94:06:15:4d:0c:86:1e:fc:1e:76:9b:ae:57:a0:ac:
02:2a:5e:f8:b5:c8:a7:be:bd:c0:4b:25:bc:0b:a6:
f7:3a:cb:d5:35:a9:50:22:6d:27:e9:ba:d1:28:a0:
2b:73:84:1b:9f:3d:ed:06:ce:de:72:49:0f:f6:22:
6b:cb:2c:8c:c3:d1:cb:38:f3:67:a6:65:65:ea:b1:
36:53:d8:0e:11:b1:a9:1b:f0:fb:67:a9:71:87:35:
50:4e:7b:d6:f9:df:4d:53:fe:56:50:ad:be:13:36:
c1:55:d0:cd:51:05:37:fa:0f:4d:34:6d:81:74:67:
32:79:b6:d4:fa:1a:21:d0:6e:e5:37:31:d2:1d:24:
d5:64:74:82:68:c1:fc:2d:c0:83:4a:76:13:a8:dd:
f0:42:c2:e7:e0:ff:2f:7d:ab:5b:01:25:e6:6c:4a:
68:7a:a0:ae:2a:d0:55:8f:e1:7f:68:dd:83:f1:85:
e6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:70:43:59:CD:67:0B:2D:AE:95:33:3C:21:BC:C2:F9:92:CC:3D:18
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:63:9a:3a:f2:bc:00:4e:78:60:f8:f1:bb:d9:2e:da:cd:0d:
28:d4:d4:db:a4:3b:8e:04:35:2c:58:db:c7:9f:54:72:29:ff:
cb:cd:84:5c:af:74:3c:88:98:db:9c:50:b7:47:c5:e1:14:f1:
62:4b:d0:a1:b5:d6:6b:57:39:58:1f:e3:39:11:58:32:05:f2:
13:a7:52:2d:de:1f:c2:84:5b:10:a5:8d:8a:08:2f:39:a6:3a:
c3:5b:25:17:fc:63:d2:f0:b8:ed:f9:83:24:9f:58:c7:c4:0b:
fd:69:1a:ae:76:c7:16:0e:46:ca:8d:4a:91:e5:a0:d1:af:ff:
ae:f0:aa:5a:1b:75:d1:16:4d:da:21:b2:fa:c0:53:a1:5a:d4:
71:05:88:64:ad:2c:3a:21:9b:d0:55:45:94:6c:26:7e:95:12:
e4:61:74:4f:9b:a0:49:39:32:17:43:25:fd:d6:dd:11:0d:f2:
d6:57:4b:dd:77:c3:b8:0a:18:a7:5d:5e:b8:1e:d7:17:57:ee:
40:b9:b5:59:ec:51:be:59:f6:c0:1a:7d:00:e7:ea:c4:14:ad:
5d:bc:15:ab:01:0f:82:94:f6:2a:c7:ed:a4:4a:e6:a2:8f:91:
ce:48:40:85:9c:56:6d:8e:90:65:bd:66:1e:d8:e1:58:56:3d:
52:3a:24:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:47:44 2026 by rpki-client