Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File: RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier: yCJNQbANK1lfg9NBLAyOnyUTr5EIrghR2jpamkyCYfc=
Subject key identifier: 67:A3:03:81:C7:AA:C8:82:70:C0:36:25:1B:B8:A5:C8:BD:B8:40:A5
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial: 01A12F217BED6758193922D7D0208E71030D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number: 1412
Signing time: Mon 12 Oct 2026 08:01:25 +0000
Manifest this update: Mon 12 Oct 2026 08:01:25 +0000
Manifest next update: Tue 13 Oct 2026 08:01:25 +0000
Files and hashes: 1: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: +aBVkZt2F9e6nQMyXSqZGEWC8YQUWrEbp9zboP4tQLs=)
2: xbkHK9BjxqqWppD29--gfkSmovk.roa (hash: hkkQkmlB4qFZaOaawyBYcXjPEkqDqcjHyvxZakCPMVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:21:7b:ed:67:58:19:39:22:d7:d0:20:8e:71:03:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Validity
Not Before: Oct 12 08:01:25 2026 GMT
Not After : Oct 13 08:01:25 2026 GMT
Subject: CN=67a30381c7aac88270c036251bb8a5c8bdb840a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7f:be:2b:3b:c7:b7:da:cb:c5:8a:3f:d5:e8:
ee:fb:ce:70:32:c0:eb:37:ed:ac:44:64:b7:4b:30:
46:a1:d6:a7:31:64:e5:d2:af:21:2f:88:82:df:38:
40:78:7a:ce:83:89:c4:80:00:c1:bc:6b:fb:69:e5:
1d:0b:bc:4b:f1:26:b8:71:fb:c7:eb:2c:93:9d:b0:
87:f8:b8:d7:32:bf:48:62:08:35:6e:2e:64:c2:5b:
7c:8b:cf:39:63:d2:25:19:20:50:69:b9:6a:87:20:
b3:8e:a7:96:49:48:55:97:7e:66:3b:e0:8e:1f:5b:
cb:64:d5:13:5f:cc:5f:57:31:5e:7a:d1:b0:cc:e3:
c4:bd:05:aa:aa:63:12:f0:37:de:ff:2d:49:62:9c:
3c:99:b6:fa:d4:7f:f7:4f:71:62:a2:72:a1:dc:66:
d1:f1:04:e9:95:51:10:43:a8:eb:a6:2a:7f:f8:63:
27:b1:04:1b:9a:2a:49:a1:84:a5:84:4e:a9:71:9d:
fe:26:98:01:bb:13:90:e3:9a:f0:03:ce:44:66:91:
a7:fe:90:93:e7:15:97:c3:81:88:39:21:9f:08:d3:
0b:09:14:a1:31:47:73:bc:79:b5:13:87:e1:de:b0:
d0:60:12:3b:f3:ed:59:1a:16:e7:67:44:b5:15:fe:
c1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A3:03:81:C7:AA:C8:82:70:C0:36:25:1B:B8:A5:C8:BD:B8:40:A5
X509v3 Authority Key Identifier:
keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e6:bf:5b:96:c8:29:23:dd:b4:29:51:94:08:46:d0:32:7f:
c5:5b:0a:cc:c6:c0:70:71:da:c8:12:2f:8d:03:c7:ef:d3:e4:
2e:26:e3:68:d7:c4:e0:be:72:06:fe:58:e1:2e:da:bc:30:6b:
38:63:01:7f:37:c5:43:d6:69:76:62:26:c6:f0:1c:c9:13:e3:
9b:d2:c4:73:ff:d2:17:32:6c:08:65:f8:2c:18:a8:2c:f6:3c:
cb:5e:6c:67:80:0e:a5:7e:58:41:43:e4:3d:ad:6d:8b:c2:0d:
a9:c1:c8:bf:cf:da:d8:dd:10:af:9b:d9:4d:f8:ea:9f:77:72:
91:47:ca:f3:49:9a:73:22:20:b5:d1:18:80:86:c1:29:d8:83:
bd:33:f9:26:45:a5:7e:dc:a9:a6:c1:61:a7:e1:f6:74:d8:9d:
7c:d0:b3:a7:04:a4:6d:c4:42:8b:e5:b2:80:dd:c6:75:96:c6:
04:03:1f:13:5c:c1:0a:7a:e2:77:a8:45:a8:e5:0d:03:29:e9:
3c:51:62:5e:c8:83:8b:ec:5a:a3:fb:c7:0f:2c:8b:91:b9:cc:
07:58:26:1f:25:10:d5:8e:ac:5c:72:47:4e:f4:06:8d:10:61:
21:96:9d:70:e5:89:70:21:98:2d:11:cb:e2:4d:70:5e:ce:da:
33:cd:f1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:42:54 2026 by rpki-client