Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json)
Hash identifier: pIZGE6760YJMRaOVEvoP39aMYoVM3DrsH38m1jyKzqI=
Subject key identifier: 71:9C:C2:DA:08:B8:97:BA:71:F3:96:AE:53:53:48:58:53:DF:70:F5
Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
Certificate issuer: /CN=740f65f302335baa90ed81c05384d53f2332391a
Certificate serial: 01A0CBC79EA541333EF18BCE2C7E08422C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
Manifest number: 0B80
Signing time: Wed 23 Sep 2026 01:00:52 +0000
Manifest this update: Wed 23 Sep 2026 01:00:52 +0000
Manifest next update: Thu 24 Sep 2026 01:00:52 +0000
Files and hashes: 1: 60AgYXI0MVWEVUOzuDwIpQcFWrE.roa (hash: 1Lj/1bPCIRRdQ0zsLEkl5mAqw0n7NxUgu4JklwVrAAs=)
2: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: NPUSk9+eRmrOjUniI9uSEnxcwBUem7YKJcedvsVnL0Q=)
3: dhhgDn01VBGU33txgYz8NBfOFn0.asa (hash: LohB167OFmIaspaV8SsKY8hSV57AJZzngteLMm6LIZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:9e:a5:41:33:3e:f1:8b:ce:2c:7e:08:42:2c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a
Validity
Not Before: Sep 23 01:00:52 2026 GMT
Not After : Sep 24 01:00:52 2026 GMT
Subject: CN=719cc2da08b897ba71f396ae5353485853df70f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:0e:27:ca:9a:a6:2e:b4:77:fd:35:fa:6e:
c6:d2:2a:0f:c7:39:61:6b:55:ee:85:49:a8:22:98:
38:6c:52:2e:6c:c9:f0:d0:75:4b:c5:41:f7:3d:f6:
36:24:6f:e0:60:06:00:8a:35:3a:d2:89:4c:f7:3d:
ce:1f:8e:41:11:d4:4c:4f:48:5e:f8:51:50:f9:7f:
63:7c:2c:33:5d:bb:62:64:2f:77:60:08:ff:b4:fc:
24:b2:5d:8e:b2:74:88:8f:af:e4:bf:8e:e0:9d:7d:
23:65:1c:c8:0b:d9:6f:a5:39:fb:82:8f:5d:d1:4a:
fc:f3:92:4e:51:8f:c3:66:33:86:df:5a:49:0f:6d:
34:8e:43:13:3f:49:c8:ea:3c:79:4a:79:44:a8:17:
5f:d7:ec:6c:f8:9d:bf:a6:48:0e:2e:5f:9f:8c:60:
c3:72:22:7c:ab:3d:8f:9e:e0:1f:a8:5b:d0:f4:3d:
f0:2d:49:7c:cb:fc:35:d1:27:9e:71:e3:07:13:b5:
da:00:06:10:2e:88:53:41:09:95:57:bd:74:0b:59:
91:ca:48:9a:39:0a:e3:c3:69:be:28:6b:ee:d4:71:
3b:8a:83:6f:72:1e:5a:5a:1f:a7:d7:97:78:cf:37:
74:9d:ad:35:ea:ae:09:83:48:fc:82:4a:b4:ed:ad:
41:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9C:C2:DA:08:B8:97:BA:71:F3:96:AE:53:53:48:58:53:DF:70:F5
X509v3 Authority Key Identifier:
keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a2:ef:d9:4a:92:9a:d2:d0:2b:ef:02:17:14:8b:bf:47:b0:
a4:d0:5d:26:1e:2a:75:cc:d2:61:ee:7f:f1:35:52:2c:0f:e8:
cd:cb:51:9c:87:45:ca:50:40:06:c7:6a:6b:e5:90:87:35:4d:
b5:6c:a1:a7:8f:b4:01:02:fa:e2:58:a9:a5:77:32:6a:ed:9d:
76:db:33:8d:27:78:05:9a:a4:ac:a5:e5:35:d5:7b:bd:f4:fc:
60:f8:f7:b0:e6:dc:fb:e0:01:6a:e0:4c:e0:b0:b8:15:9f:37:
bd:aa:03:e2:a9:66:51:40:96:de:5d:b7:ac:b4:25:25:5e:9d:
0b:0e:4e:64:46:c1:3b:e1:a4:37:e2:87:4c:78:92:3f:07:84:
bc:d2:23:23:c1:4b:f3:a3:ca:dc:4e:ac:76:66:20:4d:7c:36:
1c:be:40:36:59:5e:a9:c6:f1:35:2e:35:51:8a:d8:54:2d:7e:
b0:40:fc:53:71:e6:2f:ff:14:ac:eb:dc:e3:55:93:36:ba:79:
32:59:c6:83:a8:b5:cd:23:37:bc:05:43:50:7c:8c:d9:08:02:
f3:3a:50:c4:8f:82:0f:1b:27:5e:b9:00:7e:85:c2:9a:0d:41:
74:84:9e:d6:c5:d0:a7:d6:a9:2a:2d:4e:4d:64:eb:be:38:84:
1d:b4:62:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:24:51 2026 by rpki-client