Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json)
Hash identifier: D5JQTx4odt7GTMrH58y6FUCNE391Fi4Nr24GeQgmGcE=
Subject key identifier: BE:FB:CB:1F:89:7B:32:36:CB:23:86:8E:17:B9:E2:63:D5:AD:F4:37
Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Certificate issuer: /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Certificate serial: 01A0E99BCC40443F7094BB155FA99FE9B209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
Manifest number: 0D6F
Signing time: Mon 28 Sep 2026 20:01:36 +0000
Manifest this update: Mon 28 Sep 2026 20:01:36 +0000
Manifest next update: Tue 29 Sep 2026 20:01:36 +0000
Files and hashes: 1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: y7Yr6I6JPjjRa2DR7RQihxmmmslz5DgbEHzhqxGpnH4=)
2: urvvaO540p5lCG-661I_LYSazhQ.roa (hash: OYiQT7PXJGef2AODl6kFsbHiALBw8riu/71BAiKYr70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9b:cc:40:44:3f:70:94:bb:15:5f:a9:9f:e9:b2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Validity
Not Before: Sep 28 20:01:36 2026 GMT
Not After : Sep 29 20:01:36 2026 GMT
Subject: CN=befbcb1f897b3236cb23868e17b9e263d5adf437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:8d:d7:6a:94:b0:46:25:62:ab:e2:fe:6b:
ea:27:d4:6b:4f:e8:86:a7:ab:5c:e9:51:a9:8f:98:
47:43:b6:fb:8e:b5:bc:15:81:8e:58:47:ca:11:13:
f3:23:d9:7b:ec:a6:c2:fb:d7:ba:4c:fd:ba:c1:4b:
e2:4a:2a:39:25:e6:e4:8e:ff:55:d6:03:c0:b1:09:
1b:76:08:29:6e:a4:0c:ae:ac:4e:5d:a8:f0:2d:53:
12:fc:86:73:90:49:58:8a:05:79:0a:4d:5a:19:7d:
ee:08:d2:2a:10:bf:ea:88:ed:05:c2:f9:64:5d:a1:
2a:48:e3:9a:8a:f4:81:85:68:e2:44:ef:8a:89:c4:
5e:a6:68:fd:bd:1d:cf:18:14:cb:16:87:e1:33:cf:
73:c3:56:fa:fb:b5:bd:ca:bd:40:5c:03:d5:40:20:
5a:c0:e3:21:8c:ba:00:d1:82:07:c1:7f:0b:28:21:
07:02:c6:12:34:e3:ce:fe:43:30:66:17:f8:03:82:
de:07:2a:1c:65:f4:3a:17:4e:dd:63:e0:13:7d:f2:
0a:86:5f:b2:da:91:05:34:69:d4:8f:fc:7b:e7:7b:
7b:c7:58:30:05:5a:df:9e:c8:34:a4:54:e0:c9:3b:
29:5e:b3:9f:b8:90:a1:a9:41:12:60:d9:96:cb:8f:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FB:CB:1F:89:7B:32:36:CB:23:86:8E:17:B9:E2:63:D5:AD:F4:37
X509v3 Authority Key Identifier:
keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fd:4c:ab:b7:6f:d3:ed:8a:c4:de:0b:ab:ca:2c:cf:a6:e6:
cc:36:7a:60:2b:29:30:a8:8f:ea:2a:ea:67:61:f2:dd:c4:66:
09:66:97:73:4f:76:59:65:d8:58:e7:ee:42:dd:c8:41:dd:9f:
7a:53:1b:11:da:7b:35:ad:ee:32:3b:db:f1:d6:1c:f1:b9:ef:
10:d3:08:2a:4b:b7:2d:c7:1c:73:68:fa:f1:d0:b6:08:63:a2:
da:d1:62:16:85:30:55:f2:82:ad:aa:bf:99:df:16:61:6e:33:
0c:0f:6b:ae:8f:e9:ce:b7:80:ef:11:79:88:74:41:ae:ea:2c:
9c:63:e0:55:61:4e:a0:54:58:ba:a5:35:9c:35:ce:d9:53:c7:
9b:36:79:df:ec:fc:86:b4:3b:06:4b:40:10:44:03:16:05:fa:
49:c5:00:ad:b0:d9:00:87:27:33:62:a2:57:83:3c:af:5f:44:
9b:47:e5:de:ab:9c:09:2d:d6:9d:05:44:0b:52:4b:a3:db:a1:
2d:31:dc:ec:6c:7c:9d:d6:fa:87:87:b7:2a:29:83:1e:ab:87:
d0:ae:6a:7f:68:fa:b0:fe:d5:c3:0f:21:19:81:54:56:32:71:
a5:d5:7e:bb:eb:79:32:68:0a:1b:76:a5:5b:78:f5:4c:5d:59:
cf:9e:89:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:47:02 2026 by rpki-client