Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
File: DbPDFk09jCZEzymzI2dhpXHuWLo.mft (raw, json)
Hash identifier: WPYQRxXYsdxVrLHVWgu8pmBD9OResJl9Fm9jE6H6348=
Subject key identifier: 6C:63:18:EF:0C:7C:1A:27:89:BD:FB:11:CA:9D:C1:F7:BC:03:F6:F2
Authority key identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
Certificate issuer: /CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Certificate serial: 01A0EA09198411447E2E9E8CB05A1B1865AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
Manifest number: 1080
Signing time: Mon 28 Sep 2026 22:00:59 +0000
Manifest this update: Mon 28 Sep 2026 22:00:59 +0000
Manifest next update: Tue 29 Sep 2026 22:00:59 +0000
Files and hashes: 1: AV8o_HRJCYQ0OsTpD-wRX5B7CZE.roa (hash: IbeU1AeOys6rseJf5ugRnLAWWP/7mZIxuUtqX7netkk=)
2: DbPDFk09jCZEzymzI2dhpXHuWLo.crl (hash: WpYKcpdpqxU4YYvhyfuWdJqv+VEeZk7XNzm2N0Q0ECI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:19:84:11:44:7e:2e:9e:8c:b0:5a:1b:18:65:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Validity
Not Before: Sep 28 22:00:59 2026 GMT
Not After : Sep 29 22:00:59 2026 GMT
Subject: CN=6c6318ef0c7c1a2789bdfb11ca9dc1f7bc03f6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:71:ce:6e:e3:f2:5e:45:75:ee:b2:a3:c8:
ff:9d:b6:5e:4f:ee:c5:8d:72:86:14:dd:a8:f0:b1:
63:d1:a1:98:5d:1b:10:5f:2a:28:fe:0b:87:df:fe:
5b:86:f8:64:ae:2f:8e:0d:31:49:b7:7e:fa:73:55:
4d:1b:f9:0f:a1:fe:27:fe:ae:5e:ac:be:bd:90:0b:
ff:fc:9e:c9:fa:b0:1a:31:ca:70:9c:8f:76:6c:9c:
82:dd:ca:ff:3e:a9:64:16:fc:ea:0e:50:8b:4a:1a:
e2:51:35:b6:fd:42:6e:9e:dc:51:19:d3:28:73:63:
18:23:c0:fe:25:5b:d0:b1:c8:89:13:80:38:76:6e:
cf:f6:ce:70:f2:bf:9b:88:a0:87:6b:a8:9b:a8:d3:
fa:37:86:d6:d1:21:01:dc:3a:d7:40:1b:54:8e:bb:
15:d7:dd:3c:5b:9d:97:49:08:26:4c:fd:3f:e2:63:
ec:17:44:9e:23:1f:3e:9e:2b:8f:01:be:60:a2:da:
4d:10:ef:a4:cb:e4:9b:66:7f:ad:a8:91:15:9b:21:
7e:bb:71:5d:ee:da:3e:cb:fd:bb:55:a9:24:46:00:
e7:12:cf:4f:d3:d7:b7:25:93:07:d5:b2:f8:09:22:
2e:0d:e4:af:89:6e:c2:54:92:72:0b:ea:02:78:82:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:63:18:EF:0C:7C:1A:27:89:BD:FB:11:CA:9D:C1:F7:BC:03:F6:F2
X509v3 Authority Key Identifier:
keyid:0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8f:e9:d6:9f:1d:84:28:5e:0b:3b:9a:0d:73:fc:2f:e8:46:
b3:ff:d3:0c:72:be:a1:46:b8:10:fd:b3:96:0f:8b:e9:ac:7e:
d9:d2:c2:99:66:3e:3e:31:09:df:b3:b4:a5:52:f4:81:41:92:
77:ad:8e:c1:28:82:08:f6:12:ad:87:88:21:9d:e5:c9:68:01:
e2:f6:50:bd:9b:00:97:b1:d1:58:ae:95:7b:55:c3:a2:1f:0a:
14:47:a8:be:c3:3c:8c:7f:09:81:bb:19:16:2b:ec:18:3d:c8:
52:63:09:3e:a0:6a:01:95:67:64:46:98:9f:12:87:87:64:6f:
77:0b:8a:3a:c1:10:dc:e3:ff:38:b0:46:8e:a6:0e:b7:8e:2c:
7b:a9:ce:8c:19:11:31:60:90:89:d7:b5:18:fb:34:fa:a7:25:
f3:18:33:e2:cc:aa:af:50:c2:4c:b4:fe:d0:3f:44:4e:71:b1:
7c:e3:59:1b:9d:8a:16:66:64:23:dd:50:b2:95:c7:78:6b:99:
1d:d1:c7:e8:f6:f0:45:57:76:37:47:61:1f:2a:02:bf:6b:e4:
3b:72:37:65:6e:74:89:2a:14:13:74:ff:d0:ca:cc:60:11:72:
75:f3:03:61:7a:df:af:c3:2c:6d:d9:7b:42:9d:ce:35:95:ac:
25:0f:f8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:33:29 2026 by rpki-client