Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File: dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier: miN5UOcM35xdD6cTDAh4370vhnZhhZS8rd1vG3beJG4=
Subject key identifier: ED:BC:D0:9D:29:C3:BD:45:21:9F:75:B6:58:96:08:3B:33:78:F7:01
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial: 01A0D80489185FBC285A2A7A436F870C4504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number: 1070
Signing time: Fri 25 Sep 2026 10:02:50 +0000
Manifest this update: Fri 25 Sep 2026 10:02:50 +0000
Manifest next update: Sat 26 Sep 2026 10:02:50 +0000
Files and hashes: 1: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: vfxoFiQPMQ41YYDsbxOKYzIU8BtcJd3X/1fq+xsfZYE=)
2: vj0F4FgcNslWI5L8V7Dw0mIMfn0.roa (hash: j/Kb2HDxy8LEtTBE0A03kW5/ZkhjPjh8YBluaGzICqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:89:18:5f:bc:28:5a:2a:7a:43:6f:87:0c:45:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Validity
Not Before: Sep 25 10:02:50 2026 GMT
Not After : Sep 26 10:02:50 2026 GMT
Subject: CN=edbcd09d29c3bd45219f75b65896083b3378f701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:2e:de:1b:ef:13:39:c2:dc:0a:7d:79:e8:
d6:66:49:78:5b:80:63:68:e6:54:4f:77:48:36:7c:
31:81:bc:02:37:18:06:5e:23:23:3a:8f:07:a6:ce:
6b:d5:96:b9:f1:a9:f9:1b:d1:71:70:f4:9c:3d:75:
fc:f1:49:f4:0a:2f:eb:c9:06:ba:83:ef:a2:29:27:
35:05:55:cd:27:f5:ca:13:ca:d4:3d:8d:4e:55:0b:
55:1d:46:32:77:e7:fc:04:b2:08:86:76:a6:4d:34:
42:85:9b:e4:6e:4a:03:69:f7:fa:ee:e0:56:71:de:
8d:62:3d:8d:c0:44:75:18:3a:aa:53:df:3f:72:46:
6d:c2:05:cd:60:2d:7d:dc:19:a0:a7:0c:96:e9:96:
00:b5:9b:25:4e:e7:7b:fa:49:48:3b:e1:58:4a:3f:
7b:34:c8:9e:6a:df:07:49:45:e0:5a:b5:58:54:aa:
73:e5:49:18:4e:22:93:10:34:5f:80:29:e3:e1:4e:
b1:c1:11:40:cc:3e:77:de:e7:04:c9:71:e3:c3:aa:
65:45:fa:3e:e6:98:1a:33:fa:06:3a:ed:68:16:4d:
8d:0c:67:16:8d:67:44:88:01:c7:9f:3e:8f:a4:f1:
2a:da:10:52:45:c6:9f:e0:dc:be:18:10:a4:69:39:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BC:D0:9D:29:C3:BD:45:21:9F:75:B6:58:96:08:3B:33:78:F7:01
X509v3 Authority Key Identifier:
keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:76:b4:07:07:69:75:c7:6c:84:c3:b4:4d:b1:62:0f:8b:45:
5e:06:b4:f9:7b:1c:3b:f9:5a:00:29:42:88:ef:37:f2:69:22:
de:4b:69:70:8c:4c:7c:ef:ed:6a:f7:0c:80:9a:6a:be:ab:85:
ff:e1:7f:3d:dd:6d:95:fd:ae:89:8e:4a:77:30:51:bb:11:93:
4d:2a:bf:62:17:c2:41:ee:37:dd:f9:5c:48:65:17:39:8c:ae:
0f:71:95:1c:5a:e5:38:16:34:29:bd:8f:fe:3d:df:a8:99:a5:
8a:dd:90:13:2e:c3:ee:b5:d0:8e:65:b7:2f:16:91:79:cc:a1:
f7:55:f4:17:7b:63:47:8e:54:f7:6f:fb:27:9e:34:ad:16:01:
cc:e5:6f:50:a9:55:cd:80:50:2e:2b:31:1d:2b:c3:da:50:0d:
23:39:4a:c4:e5:67:de:54:b2:9e:4d:4c:74:71:d8:7f:3a:07:
d7:bb:d2:6f:70:9f:c1:3d:9e:51:a8:40:ad:bb:05:c9:00:98:
07:20:8f:a3:36:fa:4d:71:41:b5:f2:7a:fe:5e:5f:90:4f:d4:
32:f4:73:72:af:42:44:09:fa:66:a0:31:d8:b2:16:6a:20:c3:
6a:a9:57:9f:3f:2c:d6:ac:ee:7f:1d:63:45:8b:ef:de:f1:a8:
52:d2:ab:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:33:12 2026 by rpki-client