Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
File: bd1AUuD8dlNjYcu9x3UId93zYK0.mft (raw, json)
Hash identifier: 826VHS44FaSmJlLsVP45tJ6IHgqA+8yjui7rq0d31ds=
Subject key identifier: C9:33:EB:82:1E:A0:96:EE:A9:8D:D8:67:09:51:D5:07:38:6D:78:71
Authority key identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
Certificate issuer: /CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Certificate serial: 01A12277F8B2CF6A4F66C916CD2A5998F7F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
Manifest number: 13A6
Signing time: Fri 09 Oct 2026 21:00:49 +0000
Manifest this update: Fri 09 Oct 2026 21:00:49 +0000
Manifest next update: Sat 10 Oct 2026 21:00:49 +0000
Files and hashes: 1: bd1AUuD8dlNjYcu9x3UId93zYK0.crl (hash: J4JcETaIJWEq9llFwpLfKbW8BPDaQQIropOwNQUu4+s=)
2: v-QuOOYMf4HsWM21RDZIDik1F8Y.roa (hash: tkB5JnPvXNK8KkYHS1hN95y7jCOIV01txTm1VSy3JoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:77:f8:b2:cf:6a:4f:66:c9:16:cd:2a:59:98:f7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Validity
Not Before: Oct 9 21:00:49 2026 GMT
Not After : Oct 10 21:00:49 2026 GMT
Subject: CN=c933eb821ea096eea98dd8670951d507386d7871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:65:95:f5:72:0a:61:d8:9a:15:39:63:78:
2e:30:1b:aa:95:29:04:c5:e4:56:63:77:f2:14:ca:
02:dd:ed:52:0e:2c:3f:32:3c:27:11:e3:85:dc:94:
62:42:1d:11:7d:21:16:7d:56:3a:d5:25:46:27:4f:
1c:aa:2e:06:c8:96:15:88:ca:41:f3:30:5f:00:de:
b1:10:68:e9:46:10:39:d3:4d:4b:51:8a:05:a3:5e:
90:e4:2a:a7:d5:03:0e:34:76:48:6c:3d:78:56:39:
b4:6f:c8:66:7b:35:47:0c:d9:5c:01:f1:30:09:26:
2e:c6:fb:e7:5b:a3:6a:71:1e:92:8e:d4:cf:14:ef:
10:61:ee:19:12:b7:cf:57:c6:ab:72:fb:6c:8a:91:
91:72:94:b2:a4:ff:47:a9:df:58:71:f3:93:62:4a:
63:00:b8:f1:26:bd:6a:28:1a:31:41:cd:cd:e2:67:
74:ae:2f:9a:a6:ea:a2:28:1a:98:a1:e4:aa:05:85:
e7:14:91:f7:5c:04:2d:81:ce:9e:27:b9:63:9b:61:
a3:d3:68:9f:08:b0:fb:5a:18:18:5b:e8:b5:ca:fe:
35:a5:5e:f5:a1:cf:f1:db:0a:68:00:6c:49:39:13:
d7:3a:91:b7:33:07:a8:81:45:5b:d0:c3:6d:46:13:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:33:EB:82:1E:A0:96:EE:A9:8D:D8:67:09:51:D5:07:38:6D:78:71
X509v3 Authority Key Identifier:
keyid:6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:54:cb:32:5e:f1:ed:65:35:89:f4:97:f5:09:5b:69:d9:ef:
5e:a9:c0:f4:dc:19:86:7d:21:ef:0d:d0:44:a7:a4:a4:cc:63:
d3:eb:37:38:56:d3:ae:7c:db:b9:60:65:22:d3:12:05:86:1e:
87:f1:ba:1d:cf:2b:89:76:27:13:38:c8:bc:c2:2b:d9:67:ab:
98:c4:4d:f2:63:4d:5b:32:40:3c:ed:b9:c3:bc:89:23:3a:0c:
8c:2a:df:19:da:9b:80:aa:08:80:33:0c:b0:56:83:98:2a:36:
99:cd:c1:e0:31:49:93:17:10:5c:69:bc:cf:f1:d2:98:10:56:
84:36:6b:4f:23:49:28:e7:af:22:d9:0f:09:93:8d:45:83:fd:
ac:3f:0a:53:58:87:18:aa:ea:93:86:20:72:20:e8:0e:d3:e1:
61:69:1a:aa:ba:c4:96:59:6e:96:e5:e7:e5:36:13:9a:ab:e0:
43:3a:43:8d:86:4b:6d:67:9f:5f:c7:1f:d6:0b:94:5d:16:5e:
7a:d7:5b:4f:1d:31:86:55:6f:7f:78:87:f6:2a:f3:23:d4:7a:
30:ec:a5:da:de:01:e7:b0:21:9d:74:94:d0:e5:d3:1f:26:4c:
97:1c:71:ac:1d:54:d2:36:a3:4f:28:43:e0:d3:b5:78:ed:2a:
16:cf:1e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:29:43 2026 by rpki-client