Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File: DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier: vAOe+nnEi5w3zgzt5zNUCgJFVoKYvBZEQcZiLS3tMI0=
Subject key identifier: 85:BF:BD:D2:5A:D1:28:F5:4B:A6:48:8E:B9:28:5B:CE:99:24:65:0B
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 01A0D8A7DD3838E64FB60EFFBE7BC87AD4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 13:01:14 +0000
Manifest this update: Fri 25 Sep 2026 13:01:14 +0000
Manifest next update: Sat 26 Sep 2026 13:01:14 +0000
Files and hashes: 1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: opVrX0v5IH8YqVQDTYLVSq0FAqBfYakPwBOIYT+jYHI=)
2: bml28OP4KoXNao7A2GMBGmYqamQ.roa (hash: 0pR6vIDA6MRs37zqStEVFf7/l/MWTnFFDP3/gQtqi2o=)
3: ycbQTRWdjL9Qvr33IrnbqXH0Bqs.roa (hash: nglQg5MmKlEjssrWx8wngl2AAIBCB6KoQKV4TEUoUr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a7:dd:38:38:e6:4f:b6:0e:ff:be:7b:c8:7a:d4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Sep 25 13:01:14 2026 GMT
Not After : Sep 26 13:01:14 2026 GMT
Subject: CN=85bfbdd25ad128f54ba6488eb9285bce9924650b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:b4:54:37:14:55:fa:0b:d3:a9:3a:02:ca:
e3:b5:ff:c9:39:f7:00:72:3d:ec:99:0a:40:f6:8d:
d8:10:ac:c3:73:ee:cf:f6:9a:96:89:4b:73:38:65:
df:d2:fb:dd:ea:f1:15:af:36:39:64:d2:eb:a1:49:
0d:a7:55:84:ea:eb:0e:9a:a1:a8:c5:c6:26:33:bb:
47:67:22:d9:33:7b:ec:e2:7f:5f:63:f2:3e:50:fe:
81:1c:41:4f:d4:29:3c:11:1a:83:7d:73:37:a2:51:
52:68:fe:c0:9a:a0:fb:16:9b:4c:0f:f2:6c:6b:48:
2a:10:93:b0:22:05:ab:96:4c:e2:87:03:48:62:24:
07:e7:a7:8c:af:c3:98:7c:81:8a:09:86:61:2c:00:
6f:3b:85:b5:47:09:54:51:58:7b:8b:ff:f6:ee:86:
61:b2:f1:3c:f8:d3:cb:f5:d7:20:0d:5d:5b:b9:73:
0e:69:b3:e8:bb:a3:ec:c9:8e:89:29:7a:e9:c5:d9:
83:dd:0d:59:2f:f5:85:ab:37:6f:a7:b5:fa:5b:d4:
22:79:9d:0f:4d:57:88:c3:07:8d:e2:5c:e4:17:17:
6b:c1:aa:fc:33:c7:44:4f:80:ab:07:84:9e:18:d6:
d6:fc:63:f1:f5:61:92:66:8f:93:15:45:b8:79:ad:
cd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BF:BD:D2:5A:D1:28:F5:4B:A6:48:8E:B9:28:5B:CE:99:24:65:0B
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:21:2e:59:32:d2:b1:06:2b:27:41:02:b8:b1:d2:72:1c:f2:
04:98:23:46:26:b4:9d:5a:a0:2a:dd:49:73:6c:39:2c:cd:93:
f7:10:a6:aa:86:4b:7c:81:ce:7b:aa:bb:50:d6:53:bc:97:e8:
33:2e:6b:16:1b:75:f7:8a:5c:5e:82:cc:0d:6c:31:30:ae:bf:
4c:6d:b7:68:b1:5a:fc:d2:c2:9b:ea:fd:6d:1a:bd:1b:e6:e8:
05:3a:b0:2b:93:b5:c6:71:21:86:37:a8:40:8f:8e:b9:d2:35:
54:e5:b9:e3:c6:de:5e:e0:55:0d:3d:17:29:55:bf:0b:8a:20:
41:45:c6:69:1e:e3:47:b6:3c:78:ea:f6:02:c1:da:46:47:eb:
48:26:db:e2:aa:cd:86:93:d8:03:1c:fb:34:c1:d4:a1:9c:e1:
da:7a:80:83:60:4d:f1:ea:83:13:0c:2c:ea:ac:5e:8a:e3:02:
f7:b6:7d:66:84:24:89:7b:47:7f:ea:e3:2c:57:30:ae:ad:52:
64:d8:f3:c1:ed:dd:8d:b3:5c:5b:32:88:97:59:6e:25:af:dc:
61:0f:46:12:5d:16:16:48:b2:a1:4c:b4:51:89:76:4b:59:c9:
5f:a2:9d:3d:6e:a8:b4:b2:a7:84:1f:ff:60:e9:0f:87:ff:c0:
3d:a4:93:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:04:43 2026 by rpki-client