Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.mft
File: P_1p8wXRvVnT_oiw4yQSiwna_Yg.mft (raw, json)
Hash identifier: 2NIw2WBzB79FZKMOepRdU5iADP1EcPUeYqxXtuIaqhA=
Subject key identifier: DB:8B:E4:C1:4E:FE:24:19:F7:7E:88:FF:50:12:C1:C9:E2:3E:D0:46
Authority key identifier: 3F:FD:69:F3:05:D1:BD:59:D3:FE:88:B0:E3:24:12:8B:09:DA:FD:88
Certificate issuer: /CN=3ffd69f305d1bd59d3fe88b0e324128b09dafd88
Certificate serial: 01A0D5706E0057A4AA7C5EDE61AC4F6F3251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_1p8wXRvVnT_oiw4yQSiwna_Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.mft
Manifest number: DC
Signing time: Thu 24 Sep 2026 22:01:49 +0000
Manifest this update: Thu 24 Sep 2026 22:01:49 +0000
Manifest next update: Fri 25 Sep 2026 22:01:49 +0000
Files and hashes: 1: P_1p8wXRvVnT_oiw4yQSiwna_Yg.crl (hash: /yJmbPBFhe5aqLAAKQQQC5qXuCMyP99lCZF28JY7G9A=)
2: ZHfipkhj4ZBR5NV1YEBpfVvZkAk.roa (hash: ZipHrq8iiEQt8O7cV6/RGetNUyLW5eIr9JBTahVOOBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_1p8wXRvVnT_oiw4yQSiwna_Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:6e:00:57:a4:aa:7c:5e:de:61:ac:4f:6f:32:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffd69f305d1bd59d3fe88b0e324128b09dafd88
Validity
Not Before: Sep 24 22:01:49 2026 GMT
Not After : Sep 25 22:01:49 2026 GMT
Subject: CN=db8be4c14efe2419f77e88ff5012c1c9e23ed046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ca:f5:18:24:e5:7e:28:87:0e:c4:60:18:c2:
6f:a3:87:53:2a:4d:37:fd:26:c1:2b:3a:27:f1:29:
c4:bd:93:68:92:44:80:ab:3d:25:c5:57:05:c6:9b:
4d:54:4f:3d:0d:42:08:5c:f2:b5:73:74:bd:0a:5e:
e8:c0:27:fd:34:7d:50:f7:92:95:c1:49:b3:a2:fe:
a9:56:a7:83:0a:aa:f8:82:63:8b:cc:bc:e1:b4:6b:
76:e7:47:8a:03:df:81:c5:3c:80:46:7d:9c:72:57:
0b:bd:5f:f6:db:a8:4b:47:c4:9b:71:0e:88:40:c2:
cc:fa:82:66:3f:d4:40:91:96:9d:97:7e:e9:8e:d3:
5b:31:24:ae:89:ae:e5:64:ae:eb:e6:2a:fc:a6:a0:
17:78:02:e1:2a:b0:3e:1b:cb:6c:09:c4:53:75:1c:
b8:82:35:13:88:5e:41:14:6c:9f:1f:d8:bb:86:df:
1a:28:40:92:37:49:37:d0:90:40:f5:dc:c7:46:b7:
f5:1e:fd:10:f4:ee:49:75:66:ad:4b:0d:ea:a8:49:
28:e8:cb:28:00:82:71:d4:e6:c5:f1:e4:11:c8:69:
37:ab:76:cc:5f:43:91:43:16:5a:6f:f1:8b:3c:b3:
52:91:7c:6f:0d:7d:6f:4a:99:ec:92:3d:3b:00:21:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8B:E4:C1:4E:FE:24:19:F7:7E:88:FF:50:12:C1:C9:E2:3E:D0:46
X509v3 Authority Key Identifier:
keyid:3F:FD:69:F3:05:D1:BD:59:D3:FE:88:B0:E3:24:12:8B:09:DA:FD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_1p8wXRvVnT_oiw4yQSiwna_Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/702eae-d633-41ad-8fa1-c803fcf21d99/1/P_1p8wXRvVnT_oiw4yQSiwna_Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:47:1c:68:6c:17:be:14:81:2f:65:26:64:ed:53:43:00:81:
d2:25:e6:0d:33:c7:95:24:9f:08:d7:30:e7:f2:90:25:ee:fa:
4c:b7:f0:f4:df:f4:55:06:e9:0b:d3:06:7f:27:9a:3b:a0:ec:
bd:00:8e:9c:a4:e8:ea:c7:2f:ef:7e:22:37:1c:d3:92:be:41:
06:12:d2:1e:38:33:3d:5d:4c:f6:ae:b6:ff:66:4f:de:92:57:
4f:a3:a8:65:6d:72:0f:3d:cd:8e:6c:a5:3c:87:5c:9d:e6:a5:
c9:1b:a5:a6:fc:14:11:a4:c8:a4:f0:be:ec:1d:2c:e2:87:39:
ea:85:80:de:d9:2b:12:ee:74:b4:06:05:f6:89:05:49:c0:26:
af:1a:68:a1:c0:36:2a:51:09:b9:e0:f3:cd:89:3c:7e:3a:d6:
2f:a8:6e:04:e4:c4:78:2d:5d:da:86:c0:18:f8:df:01:db:36:
f4:cb:d0:71:e5:1b:3f:69:0b:1e:df:24:c8:2e:34:c3:54:99:
52:43:6c:ad:17:58:cf:1b:11:5e:90:76:ba:9f:68:39:29:f2:
0e:59:0a:84:dd:d8:6a:ae:1e:5d:05:d5:db:b1:33:c2:14:b7:
89:c1:15:f9:0c:d9:0e:30:38:3e:61:66:33:c5:21:05:93:02:
4c:61:c3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:54:08 2026 by rpki-client