Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
File: _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json)
Hash identifier: 7TcKxy07H3Vfb65zut/VFPTQoziUX7ezlMrGXRKrpbU=
Subject key identifier: 79:8A:E3:12:C2:46:0A:A4:5C:20:7A:0F:7C:39:FC:BB:22:B6:96:C1
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial: 01A0D49421D6441551B73B5EB9B8C9D5B823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 18:01:12 +0000
Manifest this update: Thu 24 Sep 2026 18:01:12 +0000
Manifest next update: Fri 25 Sep 2026 18:01:12 +0000
Files and hashes: 1: 1-ijVMFl6GCcC6GGP7jpRptAbkME.roa (hash: 6WwqDb4fLLuH7fqrOWTiw7oz+ZLJGp2PJoPRlWydUCs=)
2: 41PdyGaqWfuZrGCiI7A6Pe8er08.roa (hash: fqabz9d9YrXMSNvuc4clJBMP1zUaniqoWE3YHtZWSoc=)
3: RpRW9hgIjPMfAZ842QdrIrNI7fk.roa (hash: 3sOUZl0+LvcVI79+33YVuGWAx3JxO70FfZgzplNUMc0=)
4: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: 5jSsSsi13AGCaAAPYpYrzLUD2IIz0rHp+bPUYrbVQOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:21:d6:44:15:51:b7:3b:5e:b9:b8:c9:d5:b8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Validity
Not Before: Sep 24 18:01:12 2026 GMT
Not After : Sep 25 18:01:12 2026 GMT
Subject: CN=798ae312c2460aa45c207a0f7c39fcbb22b696c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:08:a7:69:31:4d:38:e4:f2:27:ac:99:a0:
6f:51:9f:86:95:ed:57:d4:b0:c6:ef:d8:2a:3b:42:
1a:4c:d3:34:05:99:d6:a3:e0:1f:71:9d:99:31:72:
36:1e:d5:1d:57:31:cf:48:d9:9c:b4:1a:01:f6:04:
8a:0a:8a:be:2c:d4:7b:77:d8:c4:84:76:15:e8:d9:
2d:f7:e9:19:da:50:fe:df:ec:a9:22:e4:d1:8f:1d:
ae:89:e5:9e:b7:8b:ae:ad:db:77:f6:d7:9d:dd:d0:
3d:9a:50:59:1a:a2:25:8c:96:02:86:77:25:ca:64:
75:00:67:d7:55:99:35:84:97:bb:c4:14:f3:eb:8e:
65:e5:7a:ed:d6:9d:b0:e9:ba:c1:c9:9e:3e:69:17:
c3:9f:4b:c7:2f:cd:3e:06:3f:d6:c7:c3:ba:25:04:
0c:ce:35:29:8f:48:dc:92:dd:0c:22:31:7b:ed:87:
74:c6:cb:07:28:88:82:51:bc:7b:59:27:a1:77:ae:
29:f9:d4:b0:63:13:80:96:56:4c:3b:09:9c:39:0d:
01:ce:f9:85:1b:fd:ef:85:f9:d8:32:b9:05:13:3b:
ca:da:11:b8:32:69:91:37:bd:51:40:f7:e2:25:2b:
1c:dd:9a:c9:8a:38:64:e2:7b:e5:89:2f:9f:bc:2c:
96:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8A:E3:12:C2:46:0A:A4:5C:20:7A:0F:7C:39:FC:BB:22:B6:96:C1
X509v3 Authority Key Identifier:
keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7f:79:ab:66:a7:db:22:c6:e6:ca:a9:ab:2e:d6:99:87:bb:
90:61:14:43:72:21:2c:ae:ab:da:be:b9:30:ef:ec:3d:17:57:
d4:98:8f:6a:ff:0c:b1:e3:a3:5d:63:d3:a9:61:c9:14:3c:3f:
87:3b:3c:31:9b:ef:0e:be:f7:4e:89:fc:95:dc:e7:a7:6e:c2:
de:64:20:0a:df:7c:6d:fe:84:2b:fe:b0:74:ca:ab:3f:d6:e4:
e0:d4:51:14:1c:4d:48:30:66:58:36:5d:e7:94:f6:ef:82:13:
00:1a:1d:49:f2:0a:6f:9f:82:60:7b:42:14:5b:cb:5c:43:87:
da:63:9a:0f:d6:7a:06:a3:8e:3f:49:09:d1:ad:96:f4:3b:a8:
31:33:2b:2b:09:ed:08:43:35:57:39:40:0b:af:30:6e:91:61:
57:d6:ac:cf:1a:7c:d6:41:0a:e5:9c:d9:b3:32:89:4c:31:8a:
11:17:dd:a9:95:53:2c:80:de:47:3d:22:5d:1c:37:85:21:e2:
7e:90:e5:a2:32:6f:7f:c3:89:b2:1e:21:9b:79:1e:a8:5c:89:
54:d7:7f:85:84:4f:8c:b1:21:94:a6:d4:5e:bd:94:c6:ee:23:
fe:a2:f2:cb:9e:4f:07:25:85:47:92:e6:95:a2:05:87:69:0d:
b3:93:4e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:48:12 2026 by rpki-client