Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: fWzsEyaDoWzgxDcjolSA5xi5fQxi/VPDfojO6H+/0es=
Subject key identifier: 3A:64:DC:02:12:97:3C:EE:C5:2C:AC:8D:AF:4F:13:4A:A8:DB:A6:5A
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 01A0D75FB0432ABB18A63BE1A53A24849E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 07:02:47 +0000
Manifest this update: Fri 25 Sep 2026 07:02:47 +0000
Manifest next update: Sat 26 Sep 2026 07:02:47 +0000
Files and hashes: 1: as_rlXqJ-9X5yyFioptlwk_3ywE.asa (hash: WOqxDpfG0009xOfBOkYF5jMYghhxHEkdiXrFFzH+iVs=)
2: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: ZwPIcM3l74dQJnv/0B7kZqPurUwcvEEvgfsWNEdvHws=)
3: mCi8IXM78zEe8k6a11x1wQYJJHk.roa (hash: XXRc/LdihJuiCQ6i4r0S3QErFt5j7/TSAtBg4nnm1BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:5f:b0:43:2a:bb:18:a6:3b:e1:a5:3a:24:84:9e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Sep 25 07:02:47 2026 GMT
Not After : Sep 26 07:02:47 2026 GMT
Subject: CN=3a64dc0212973ceec52cac8daf4f134aa8dba65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:07:87:77:c7:9e:22:e5:2a:96:11:ce:ce:
8b:ba:b9:c6:3a:11:5b:44:2f:f0:d1:bf:06:b0:73:
08:79:fb:70:da:9b:6e:8f:9d:a7:b5:1d:cd:7a:dc:
9a:70:20:01:88:76:a1:b1:48:08:b3:ff:1c:55:d2:
46:0d:64:9a:f0:95:68:ff:3c:a0:fb:49:64:17:61:
33:97:4a:f6:04:e4:a6:73:41:09:d9:85:d0:aa:62:
59:63:e8:50:96:d5:4f:a4:6b:3f:bd:9b:7e:71:b5:
23:92:15:a6:cc:84:7b:31:64:0d:0c:1f:1b:2a:a4:
8a:49:33:1b:9d:61:28:c9:d7:fe:a1:57:fd:02:f1:
b9:4a:4d:56:b3:e2:b6:61:fc:b3:fc:13:fb:b5:54:
17:f3:80:98:e9:2f:12:cb:99:a9:fb:b7:b5:ee:c5:
aa:af:78:7c:d0:4b:0b:cc:1b:64:a3:0c:c6:34:35:
a5:bd:2f:23:33:b9:d5:99:aa:42:06:d3:3b:3b:1c:
86:0e:94:4c:f6:ee:f7:de:11:ca:bc:6f:aa:49:89:
f7:1e:bc:f8:b3:82:c8:27:90:53:4f:56:8c:81:b2:
e6:e7:b1:42:d5:77:db:df:fb:ba:31:ea:50:87:15:
ad:01:41:07:a3:7c:d0:ce:c0:fd:a7:17:eb:45:d4:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:64:DC:02:12:97:3C:EE:C5:2C:AC:8D:AF:4F:13:4A:A8:DB:A6:5A
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6f:2c:35:75:0a:48:5a:94:f8:52:53:09:f5:50:77:ec:e8:
e8:5e:06:2e:7e:a5:f1:e9:ff:77:2d:d1:3e:e5:53:83:87:bb:
8e:88:4b:68:cc:42:72:a1:d7:87:f4:62:f8:4c:b7:72:86:16:
2f:75:a5:92:de:c6:78:c8:2c:83:c3:be:ce:9a:dd:4e:b6:a5:
88:9d:2f:83:83:53:29:5a:10:45:65:ea:fd:aa:23:b6:f0:f7:
a2:00:8b:00:f3:5e:94:11:32:66:03:a8:dc:2d:f5:55:1a:fb:
3c:58:32:d3:32:4b:74:1b:09:b6:0e:6f:b5:5b:ae:69:23:ae:
15:06:33:6b:8f:21:99:52:00:1c:bb:f3:d2:d2:df:55:65:41:
9e:d6:e1:1e:85:b0:86:7f:ab:33:06:73:11:11:b4:33:46:6d:
9e:e0:1b:4e:8c:0a:d3:99:3b:23:e7:42:25:d1:18:2b:0f:b9:
64:13:63:fe:44:f6:76:ec:3a:4d:82:8e:3e:55:2c:d6:f7:83:
cd:91:4e:d2:fa:9f:ff:26:5a:2b:d5:f9:1f:68:a4:79:ba:1d:
c7:6c:70:7a:b2:a3:46:9a:94:d4:f2:03:fc:84:d0:c9:b5:c0:
1f:ef:bd:db:26:9f:82:16:b7:39:24:48:0b:85:60:92:70:49:
4a:4c:48:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:48:46 2026 by rpki-client