Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
File: 23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json)
Hash identifier: cMHkzIz+CoHS0lpDIyk8cuvW8XfBF0KOK2Ta/eNmxAk=
Subject key identifier: DF:A2:AD:07:B7:97:03:41:1F:57:4B:AA:A2:8A:DE:56:70:CE:6C:E1
Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Certificate serial: 01A0D50207D82A854D5A1FD1C4737F3AF6D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
Manifest number: 1720
Signing time: Thu 24 Sep 2026 20:01:15 +0000
Manifest this update: Thu 24 Sep 2026 20:01:15 +0000
Manifest next update: Fri 25 Sep 2026 20:01:15 +0000
Files and hashes: 1: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: E6svDwCiMdDzVVV7IoK2Xt4uY9BNRDS4FX+V0fW5GD8=)
2: NRwgJUwXk3BWkcpGjCMp97lO_U4.roa (hash: cqI/kILVJcAeJ0Tz95y2zzvYBTUTuf7X5Zw7I2eBtl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:07:d8:2a:85:4d:5a:1f:d1:c4:73:7f:3a:f6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Validity
Not Before: Sep 24 20:01:15 2026 GMT
Not After : Sep 25 20:01:15 2026 GMT
Subject: CN=dfa2ad07b79703411f574baaa28ade5670ce6ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2b:56:4e:fd:e2:1e:c8:e5:95:6c:ab:c1:61:
0d:bf:f2:af:9e:72:41:8c:9a:c7:51:4b:e9:51:b1:
b9:35:a7:b7:f0:b7:cd:26:ca:24:3f:d2:18:c9:f7:
bc:eb:30:07:ce:bf:67:65:ac:54:0b:e5:cc:54:39:
93:89:03:2b:da:37:df:81:27:c1:bf:3a:66:b9:c3:
c0:77:74:57:1f:9f:46:01:61:ca:9a:5e:05:c4:94:
10:51:fb:01:e4:18:29:10:31:6f:7c:1f:30:b4:6a:
c1:5d:a4:9b:0f:63:67:73:f6:87:91:9c:20:80:2a:
29:17:c9:78:78:b5:33:22:7c:ae:20:24:8d:d2:72:
e3:7a:13:6d:d9:e2:17:05:8d:07:61:87:ca:84:c3:
53:ab:46:10:79:7d:75:06:40:4c:76:7e:b5:23:bf:
76:3a:a6:41:56:f5:10:3b:19:69:02:de:65:3d:6a:
36:e9:b3:7c:5c:40:9f:db:91:64:40:49:a1:43:c8:
ee:02:4f:98:fd:d7:e5:b7:14:bd:9f:90:3a:3f:5f:
34:82:f0:af:73:e9:c5:0e:4f:06:7f:04:35:9d:56:
4d:cc:f6:90:c0:8e:f0:a2:43:9a:c1:1b:d6:28:4a:
df:83:66:5e:6f:cb:31:99:0e:73:03:2a:72:bf:6f:
85:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A2:AD:07:B7:97:03:41:1F:57:4B:AA:A2:8A:DE:56:70:CE:6C:E1
X509v3 Authority Key Identifier:
keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:58:d8:f7:78:72:17:7d:d4:e9:2f:2e:93:bb:6f:4a:11:36:
86:e5:19:0d:70:6b:d7:7c:ec:3f:79:c2:b3:76:ff:90:28:3d:
a4:db:9b:c4:db:8d:2d:f5:b8:b0:b3:66:1c:bf:a2:1a:a2:91:
ec:29:0d:e4:73:01:65:5d:4b:54:50:31:a1:8f:2f:c7:48:17:
00:f0:c4:4c:64:13:24:93:67:e7:84:46:af:46:2f:0c:8c:30:
52:32:54:53:3e:dd:20:d6:f1:4b:30:90:67:6f:17:fd:93:a6:
16:bf:05:ec:9c:c0:bf:d9:3e:a2:15:87:39:29:ba:cd:73:3f:
ad:fe:0a:2b:13:17:69:49:b7:52:58:15:70:d4:ce:e7:cb:a2:
06:1f:43:8f:02:cc:2f:77:60:e1:94:33:a7:a4:68:ea:82:90:
36:dc:ac:f4:d7:bf:31:a3:bb:6f:55:36:e1:9c:08:65:2b:8b:
d5:e7:4c:3b:28:32:62:05:ea:17:da:fb:11:70:2c:41:58:a5:
94:ff:be:cb:ab:e2:89:ad:e3:f1:0d:ab:4e:83:c9:d7:b2:26:
12:18:de:6f:e4:e3:51:7f:9e:3d:cd:b0:e6:90:b0:8c:c7:a7:
72:84:0c:c9:a2:5f:42:ce:8d:8d:f1:d5:ce:43:d4:de:89:68:
47:da:3b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:36:44 2026 by rpki-client