Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File: d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier: ilx3EqWGWDhPg7R6NC3n6f0eLIatjUnt8YKgRh9KXVI=
Subject key identifier: 28:4A:0E:1C:9D:B9:A8:99:BC:1A:25:62:32:03:AB:51:C9:1E:0F:5B
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer: /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial: 01A10F95BFBFB7DE72532C18B3B829363CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number: 0F1D
Signing time: Tue 06 Oct 2026 05:00:34 +0000
Manifest this update: Tue 06 Oct 2026 05:00:34 +0000
Manifest next update: Wed 07 Oct 2026 05:00:34 +0000
Files and hashes: 1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: sapmGpVBrNpO/6yXxlzIpnG9PtgpRus2zc8A3XMpJCU=)
2: p6qsa6svPJ0422i3SiO1EzgoFFQ.roa (hash: TXPP91hJYndsd1QK98Dq8mZrdcp6BkkwS6MxLqiQzbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:95:bf:bf:b7:de:72:53:2c:18:b3:b8:29:36:3c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Validity
Not Before: Oct 6 05:00:34 2026 GMT
Not After : Oct 7 05:00:34 2026 GMT
Subject: CN=284a0e1c9db9a899bc1a25623203ab51c91e0f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:46:f9:5c:de:74:90:47:14:83:66:76:54:15:
3d:ce:fc:70:07:2e:2b:e9:39:63:a2:2d:a6:51:88:
67:1d:76:ed:27:d6:ca:36:4f:37:9d:f8:54:d8:f4:
f5:67:6e:71:d1:77:1e:8f:95:d7:5a:b2:75:0f:de:
83:7e:f0:f2:2b:fa:9f:56:a7:bf:ae:34:93:8d:94:
95:4b:19:52:c7:e3:2d:14:32:78:ea:dd:e8:57:91:
ea:3c:c7:84:99:a7:5e:c8:09:3e:3b:86:0f:eb:55:
32:99:ac:0d:21:a1:e2:5e:e6:fa:a4:bb:1b:7a:05:
67:32:a5:08:d3:b1:33:ae:4b:40:83:37:de:9e:3b:
9e:d1:a9:cd:e3:d4:e6:ad:38:1e:b7:80:35:92:e4:
91:9c:42:64:a5:36:6c:a6:c9:67:80:58:5d:5f:83:
a0:7d:37:82:87:aa:ac:f9:3d:ea:98:73:7d:91:09:
32:ae:c0:e1:e6:7e:36:d4:39:ea:de:e9:2a:a9:bc:
f3:fe:e8:9e:ed:49:0d:a1:98:cb:8e:08:5d:2c:8e:
12:36:03:09:f1:ea:cc:51:4a:ec:b2:fb:72:d2:e9:
75:e5:eb:a2:5c:61:8b:b8:60:ee:d8:47:75:3e:32:
68:3b:3c:d6:d0:ea:8d:c4:95:c8:2f:38:06:9d:ab:
4a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4A:0E:1C:9D:B9:A8:99:BC:1A:25:62:32:03:AB:51:C9:1E:0F:5B
X509v3 Authority Key Identifier:
keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:59:b7:c3:0e:cb:33:8c:c8:06:e0:a4:7e:17:d3:6d:3b:59:
65:3e:4f:06:9f:7f:a1:87:cd:76:79:c0:81:d6:9a:02:96:cf:
93:6f:11:22:31:28:1b:9b:8f:7c:37:9e:0c:a6:a1:13:15:ec:
17:69:4a:14:9e:b4:e3:c9:ee:49:16:f2:c8:9f:e9:14:97:e1:
ff:b0:be:9f:a5:04:21:85:0d:d8:8b:fc:16:19:26:a4:61:8f:
e2:ee:01:74:14:ee:4f:65:9a:8c:8e:da:80:5a:8b:44:2a:00:
9d:60:ce:17:99:a5:98:7f:c9:96:72:cb:d9:f8:58:03:4d:78:
17:47:54:29:3b:27:01:9f:29:a7:eb:f6:24:43:d2:c0:e7:3a:
a8:de:38:01:83:c3:04:46:07:26:e1:cb:06:57:5b:e4:aa:3f:
08:ed:b2:68:87:a4:29:e3:27:46:aa:f9:68:9d:8b:35:c9:54:
c2:17:46:1f:da:b1:00:8b:71:38:f8:25:21:52:9a:0c:d0:58:
31:eb:d6:12:40:6d:0b:fb:ba:f4:8c:51:9f:52:c0:ad:5e:e3:
c3:75:8a:6a:29:aa:0c:83:e8:0d:52:04:a1:56:7d:18:26:26:
cd:c9:1c:9e:6f:bd:d2:f9:27:4e:7c:14:33:72:57:a8:0d:0e:
ef:59:1e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 09:26:50 2026 by rpki-client