Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
File: R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft (raw, json)
Hash identifier: FlMSVP06FgWWw7pfv3c9Pzo3YezSiJivKbp0q2w5afA=
Subject key identifier: DE:80:FD:A4:AC:6C:49:A2:8D:C6:81:95:D7:52:BF:1E:1B:2F:08:80
Authority key identifier: 47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
Certificate issuer: /CN=47e5d333dad9d62d5328d12578a31def42af8f34
Certificate serial: 01A1065CC5FE3A35AD247D5D57AC0E19E7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
Manifest number: 0D08
Signing time: Sun 04 Oct 2026 10:01:45 +0000
Manifest this update: Sun 04 Oct 2026 10:01:45 +0000
Manifest next update: Mon 05 Oct 2026 10:01:45 +0000
Files and hashes: 1: R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl (hash: hFME077kd0ekTAX8yXRZ8DYEIT01gGvpy4zrAnIph1s=)
2: lDMKh21Wt4FbbKS1OgeKAWJLOUA.roa (hash: 3L7WTrIU7aPDIrcLzqUSb6E2nzrLgIJ/FaZM9uhhyxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:c5:fe:3a:35:ad:24:7d:5d:57:ac:0e:19:e7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e5d333dad9d62d5328d12578a31def42af8f34
Validity
Not Before: Oct 4 10:01:45 2026 GMT
Not After : Oct 5 10:01:45 2026 GMT
Subject: CN=de80fda4ac6c49a28dc68195d752bf1e1b2f0880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:a9:92:ed:38:2b:8e:d9:24:8e:26:eb:71:
04:5d:34:98:e0:5b:69:87:90:dc:18:ae:c8:dc:20:
63:ac:0e:2f:c5:e9:5f:54:df:10:ea:e0:df:02:dc:
74:4d:5c:c2:55:91:7f:58:0b:88:53:ab:39:d8:d5:
d1:fb:91:2f:8d:8e:e9:bc:f0:50:16:3c:ad:78:22:
06:9f:a5:5a:88:cc:6d:09:ee:1c:51:61:81:8c:5f:
d1:01:38:bf:be:1a:0b:9e:e6:09:7c:9d:c7:13:2a:
90:78:91:89:5a:0e:30:2e:29:08:f3:3c:f9:fb:2d:
d7:a3:62:be:fc:ce:ef:4a:f3:6a:0a:fa:1d:9b:75:
ed:96:45:cd:dd:3c:f5:0b:9a:87:bd:76:8d:9c:37:
67:76:e9:17:57:84:5c:c8:23:dd:90:25:c8:c0:c6:
c1:3c:fe:fd:45:21:3b:71:dc:96:65:46:06:2f:96:
f3:5e:d1:14:f6:28:79:ec:b1:cb:2a:30:c3:89:6e:
48:9d:f6:21:79:e3:81:21:ec:65:70:3a:c9:77:69:
3e:8f:ef:d3:8a:88:bd:5e:94:c2:07:ea:18:c4:e8:
c6:d4:03:70:55:c1:3a:2e:fc:51:83:05:15:d0:64:
5d:fc:bd:c0:8a:f3:26:40:82:d7:4f:ac:f5:10:9a:
92:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:80:FD:A4:AC:6C:49:A2:8D:C6:81:95:D7:52:BF:1E:1B:2F:08:80
X509v3 Authority Key Identifier:
keyid:47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:45:8a:eb:d2:56:b8:bb:43:02:71:13:c5:7d:91:0a:c5:ae:
ed:7c:35:6f:e9:f3:9e:4a:e4:94:fc:cc:5b:8a:03:ef:7f:4e:
b1:8d:05:2a:7b:c2:d0:ab:a8:1a:53:5f:ce:08:f5:b5:07:9d:
d9:46:ef:7c:d7:77:26:5e:68:4c:a0:af:e0:96:80:5d:30:a1:
33:65:f0:fc:e6:a3:16:b2:c7:86:1e:e9:7d:7d:92:c8:4c:fd:
b7:8a:82:00:a0:ef:9b:fe:9c:bb:c4:01:7d:2b:9d:1f:6c:a0:
a1:b2:2e:56:05:45:bc:42:71:91:89:59:db:0c:20:73:30:3c:
7b:4b:61:2a:75:68:8e:ea:d1:25:0e:62:66:6d:2b:6f:2e:ff:
61:f3:99:07:52:41:50:eb:d2:b9:63:b9:11:41:28:6d:14:e4:
c3:fd:42:66:c6:06:3e:a4:34:7d:c3:f9:cc:be:09:db:50:c1:
f3:29:aa:d1:0c:b3:93:ab:87:40:5a:46:f5:27:31:8f:5b:89:
36:bc:18:f0:62:02:07:6f:a5:c9:63:4c:58:a8:93:63:f3:0b:
72:ab:1a:0b:30:75:fd:7f:18:80:f6:6e:61:1a:23:45:2c:45:
e2:bd:6e:99:a5:34:b9:55:3b:71:e6:79:98:0b:50:7f:87:66:
82:b9:96:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:40:00 2026 by rpki-client