Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
File: D48Gw1SUYI2azOsHCkzRarlf9qY.mft (raw, json)
Hash identifier: O2f8AxIaC09FiDSEokpVdDShcD3z4pzImXEK0F1G7HI=
Subject key identifier: CA:2D:B9:CB:AD:05:D3:CE:54:E6:84:43:E7:14:62:54:A1:A1:33:C2
Authority key identifier: 0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
Certificate issuer: /CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Certificate serial: 01A0E13D850A7F989C8924CF98BA1464924D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
Manifest number: 067B
Signing time: Sun 27 Sep 2026 05:01:40 +0000
Manifest this update: Sun 27 Sep 2026 05:01:40 +0000
Manifest next update: Mon 28 Sep 2026 05:01:40 +0000
Files and hashes: 1: D48Gw1SUYI2azOsHCkzRarlf9qY.crl (hash: H/eBV7zsyLKn9mTU5z2gbdY/lpmgRuT462nj+21AC60=)
2: SCHRZY-CfI024Dm7CtHiKFlNshk.asa (hash: CoaKu2xsdb1vUBMm0shIAq9E8fWITwH9g7k1dI56T6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:85:0a:7f:98:9c:89:24:cf:98:ba:14:64:92:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Validity
Not Before: Sep 27 05:01:40 2026 GMT
Not After : Sep 28 05:01:40 2026 GMT
Subject: CN=ca2db9cbad05d3ce54e68443e7146254a1a133c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:3e:b5:6f:bf:55:05:13:82:35:4a:a6:9e:
07:4e:92:7c:68:9b:22:a0:d7:c8:6c:ce:8e:67:7f:
53:4d:d2:59:2c:b0:7e:61:de:9d:f8:4a:0f:f8:c8:
da:ef:9c:e4:a6:03:36:5d:51:cb:04:d3:31:a8:08:
8d:d2:35:75:ba:d4:5e:95:47:12:34:a5:65:39:fa:
54:b5:c5:fa:19:b1:cd:83:ed:f1:05:d2:ed:2e:55:
61:7d:20:2d:6c:b9:9e:8b:43:0b:13:93:d6:49:74:
a6:93:5b:1d:a8:f9:db:ce:80:78:f0:b4:4b:20:0b:
1a:96:11:f3:53:7c:64:86:4c:74:73:9c:30:15:a2:
aa:90:7b:c5:1d:c3:a7:87:a8:2f:23:c2:42:2e:2d:
51:cc:eb:bc:47:83:30:ce:3b:3c:59:0b:09:f2:b2:
53:c4:65:fa:a9:10:93:32:e2:06:54:f5:3e:3f:c1:
0c:9c:5f:8b:73:71:01:be:2a:8b:5c:41:78:87:0d:
6f:7d:37:31:9e:d6:ce:4c:8e:29:5f:8d:57:fa:e3:
d1:de:13:d8:c2:73:65:16:63:18:85:da:8f:67:76:
28:c1:ab:ff:c5:7e:8a:e8:d1:c6:ae:22:4f:f8:12:
06:bd:f6:cc:ad:a4:9a:61:63:ac:b2:19:ae:8c:7b:
bb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2D:B9:CB:AD:05:D3:CE:54:E6:84:43:E7:14:62:54:A1:A1:33:C2
X509v3 Authority Key Identifier:
keyid:0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ad:5b:ce:f8:0b:48:96:ef:ee:20:d1:bb:fa:ef:00:62:61:
76:b7:e5:87:ac:33:d5:3f:69:ff:8a:32:bf:08:e3:95:e3:e6:
58:77:e0:d3:90:fc:52:44:6a:c9:a2:66:89:04:02:18:8d:bd:
9d:30:d4:63:d1:ba:17:fb:a7:dc:29:76:97:83:39:af:3a:e7:
c4:05:a5:46:d7:b7:b5:24:15:2f:34:4e:e0:c9:0b:9b:b4:71:
85:e5:33:46:e5:c2:15:0b:78:72:fb:ec:3f:3b:97:24:b8:32:
44:8e:e8:80:d9:f7:a2:e2:c9:d4:3d:0d:da:2d:99:b6:1d:e0:
85:ba:a7:5a:92:7f:1c:03:ca:39:65:f1:24:c2:9f:6f:81:23:
bc:d7:fc:df:97:97:07:a3:14:4b:2c:8a:3c:11:18:f1:b6:57:
15:fe:60:76:e3:7f:1d:cf:bd:e8:44:f7:c9:1f:78:6f:17:e9:
ef:49:1d:40:bb:8e:82:0a:6d:22:e8:f8:c9:ae:45:c1:d9:a0:
e0:20:76:d9:cd:ee:fc:a6:58:ce:27:4d:63:09:9d:5c:e4:be:
5c:eb:eb:94:a6:b4:3e:cf:0e:68:f7:07:a5:f0:f0:03:15:7b:
7f:31:8c:63:fd:55:2c:b1:9e:b0:49:18:8e:2a:04:33:e0:08:
2f:25:06:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:26:11 2026 by rpki-client