Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.mft
File: D-iOP9BlXUyaV3sxYiDe-DF3VbE.mft (raw, json)
Hash identifier: gPqO+OwPICUZO+KcZ8aM2zkunglQieOGaUZ7tQ+SSo0=
Subject key identifier: D4:F4:C5:32:C9:63:59:43:1A:CE:AB:E7:1F:51:4B:30:6D:0F:88:CE
Authority key identifier: 0F:E8:8E:3F:D0:65:5D:4C:9A:57:7B:31:62:20:DE:F8:31:77:55:B1
Certificate issuer: /CN=0fe88e3fd0655d4c9a577b316220def8317755b1
Certificate serial: 01A0F23119381FA12546E6E631F44AF1B2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-iOP9BlXUyaV3sxYiDe-DF3VbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.mft
Manifest number: 013F
Signing time: Wed 30 Sep 2026 12:01:38 +0000
Manifest this update: Wed 30 Sep 2026 12:01:38 +0000
Manifest next update: Thu 01 Oct 2026 12:01:38 +0000
Files and hashes: 1: D-iOP9BlXUyaV3sxYiDe-DF3VbE.crl (hash: 6/IpG4Psqj0R0bqjjW0wM+w54weR/JjyTCreaSxwxYQ=)
2: VRhw_fRM9jAzC_jp7EXs7OxLil0.roa (hash: AB9hVmBjo6ZhGYEOgtx/yX50Or9Lly3jgJBDfkouOC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-iOP9BlXUyaV3sxYiDe-DF3VbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:31:19:38:1f:a1:25:46:e6:e6:31:f4:4a:f1:b2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe88e3fd0655d4c9a577b316220def8317755b1
Validity
Not Before: Sep 30 12:01:38 2026 GMT
Not After : Oct 1 12:01:38 2026 GMT
Subject: CN=d4f4c532c96359431aceabe71f514b306d0f88ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:59:6d:8a:30:95:55:97:71:95:0e:95:9f:
5e:4a:e6:be:4a:e1:93:d6:fe:c5:f1:60:73:20:e0:
87:63:61:b1:c1:17:a1:1a:56:7e:03:5f:44:d0:74:
1c:a0:f1:b3:1e:16:3f:ad:e6:d7:10:49:1f:ee:9a:
0a:f4:8c:cd:e3:71:c0:fd:f9:a1:8c:44:eb:3d:25:
89:4f:de:53:62:47:7c:a1:96:24:61:44:02:d2:b8:
52:0e:9d:5e:96:18:83:19:a8:19:3f:bd:a6:41:eb:
61:b4:38:f5:17:3a:dc:b3:1e:65:13:3e:3b:b5:87:
72:cd:cc:18:65:57:0b:16:e3:cf:30:76:a7:ba:d3:
33:c0:f6:28:23:27:c9:ec:92:fc:0c:d4:88:97:7a:
da:d3:52:7e:c0:bc:f9:ab:da:9e:4e:40:88:8a:66:
47:f8:85:f9:ca:7f:be:ac:94:2d:92:37:29:55:34:
25:a3:05:08:50:a6:01:62:c7:0d:b3:d0:64:85:65:
65:22:7d:d3:9b:33:c8:37:f6:19:14:da:9d:ca:03:
a0:5a:a5:9d:06:0c:36:5b:cc:81:61:ab:e5:1b:80:
61:53:23:0c:2f:4f:ac:f3:08:48:10:7f:05:01:80:
22:8f:af:67:8f:a7:08:3f:e1:80:11:f0:91:0c:70:
76:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F4:C5:32:C9:63:59:43:1A:CE:AB:E7:1F:51:4B:30:6D:0F:88:CE
X509v3 Authority Key Identifier:
keyid:0F:E8:8E:3F:D0:65:5D:4C:9A:57:7B:31:62:20:DE:F8:31:77:55:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-iOP9BlXUyaV3sxYiDe-DF3VbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:17:0a:6d:1e:2a:c6:f0:4a:29:44:fd:d7:a5:c5:92:97:07:
62:b1:66:6a:f9:e3:63:53:d5:73:16:7f:ba:d6:ea:f7:e5:1b:
fc:c9:dc:dc:6b:c0:f9:74:41:8a:97:a8:6f:a8:72:17:0c:ec:
ed:ba:e3:c2:0c:96:cd:05:2a:d0:07:45:bc:b1:8b:ef:21:6c:
77:8a:4e:69:a5:ce:4b:e9:14:b8:fe:8c:6b:b0:27:3a:d2:f0:
59:bf:2c:83:21:aa:0e:15:a2:17:a1:ff:d5:6b:be:a8:2b:59:
ef:d9:d1:d1:41:8a:a3:93:8e:33:67:16:ac:95:58:c9:93:15:
c9:fb:eb:d8:32:83:8f:b2:6e:9c:7d:8d:dd:8e:e8:3c:66:b7:
a9:01:c8:77:e1:9e:8b:d4:68:37:37:c0:58:9b:7b:c6:8d:bd:
cf:35:77:46:7c:95:da:07:1c:4a:01:6f:9d:ad:35:f8:87:fb:
80:82:00:63:35:4c:af:cc:45:6c:cd:af:0c:e9:85:09:88:a4:
a4:d5:57:93:92:78:e4:a6:31:28:b3:f7:05:8f:a0:3b:26:71:
c9:3e:6a:ac:f2:77:18:cc:87:c7:a8:34:81:80:ef:02:ec:64:
dd:66:90:f4:94:bf:38:61:bb:ed:23:81:9f:e6:c1:a3:88:35:
f9:e1:68:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:10:53 2026 by rpki-client