Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: +M0f6ZompfqKjRYDhYockXSDCZ1+fmfTuiy/5MUz+qE=
Subject key identifier: 51:48:E6:AA:55:3D:51:72:99:C4:EB:58:AE:25:0A:26:7C:B8:2D:5D
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 01A0D94DB6A67453ADC2C0C54D9BE4C2DB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 1A74
Signing time: Fri 25 Sep 2026 16:02:23 +0000
Manifest this update: Fri 25 Sep 2026 16:02:23 +0000
Manifest next update: Sat 26 Sep 2026 16:02:23 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: BH4BACorgMFdkxxHBKiUNtdM98iAFNhpa2XHJ1b71Ss=)
2: _L8W4pQYN95d_ru9437-S9YHe24.roa (hash: 7Vq9DgyAlsbGrBriOiUBAAmu/kBfnz1j1W0Ug2fBKPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:b6:a6:74:53:ad:c2:c0:c5:4d:9b:e4:c2:db:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Sep 25 16:02:23 2026 GMT
Not After : Sep 26 16:02:23 2026 GMT
Subject: CN=5148e6aa553d517299c4eb58ae250a267cb82d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:27:3b:82:d3:24:4b:ff:5c:7c:1a:69:d1:
bd:8e:40:12:fa:a0:bc:cd:36:09:d6:83:95:c3:c5:
4d:1a:47:e7:37:1e:6a:e3:48:0f:d9:36:24:ee:d7:
2f:9c:eb:f8:fa:42:2a:cd:29:23:f2:8b:b5:23:57:
28:d7:02:4e:46:2b:f2:a7:4d:aa:46:00:cc:10:a5:
b4:fb:27:e2:17:26:49:7f:f1:e2:26:75:16:38:7e:
e1:27:3d:0c:4b:3c:de:40:6f:6d:8e:50:d2:af:36:
99:cd:bc:10:b0:fc:ba:47:c1:7e:15:4f:09:9c:de:
f4:c5:ba:80:a5:49:e1:ba:fd:07:c2:cb:fa:6e:07:
15:84:38:83:cc:20:72:9f:de:56:94:e3:92:9c:cf:
2b:29:bd:55:cc:e6:22:30:ec:c8:c8:57:e2:be:c1:
02:d6:7d:fc:11:57:21:fb:d3:cd:27:3f:29:cc:bc:
51:71:25:6a:7d:a5:82:2d:b3:82:0e:d0:92:41:ec:
a4:3e:29:55:ea:3b:37:b4:d3:eb:b4:65:8f:4e:d6:
32:b1:61:76:03:0f:f2:19:c2:a2:e4:77:18:bc:4f:
cd:f9:53:aa:07:9c:55:fd:1b:bb:06:dd:23:32:62:
7b:09:8c:c7:82:f4:bf:d4:24:be:60:0f:e4:a9:5b:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:48:E6:AA:55:3D:51:72:99:C4:EB:58:AE:25:0A:26:7C:B8:2D:5D
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b2:f6:87:ca:52:8c:72:37:5d:c2:01:fc:a2:00:cd:e7:ce:
ac:55:ef:8f:f4:eb:c3:be:ef:f5:0b:c8:be:0e:ac:92:8e:eb:
0a:3f:64:65:95:0d:a8:c4:be:4c:4a:4a:b4:eb:eb:61:15:c3:
30:8f:c2:52:73:f3:a6:d7:6e:73:ee:bb:c7:e5:67:a0:56:70:
85:42:35:01:70:6f:86:75:f9:33:7f:72:c2:bb:c7:28:77:76:
d0:0f:6e:0e:85:7f:1d:d9:d8:b6:6e:52:57:e9:3f:a3:b1:09:
90:c4:fb:c2:ad:e6:09:17:b6:3f:e0:e9:4f:b4:7f:13:cb:20:
eb:23:48:6c:61:ab:d1:5e:58:15:4b:70:0f:8b:4f:2b:9c:85:
71:3d:7d:ab:d6:08:9e:84:5e:74:fc:a8:87:d3:c3:e8:34:da:
b7:6c:74:c3:5c:a9:fb:cb:53:be:fd:ac:27:e6:b4:f9:fe:f8:
00:11:90:66:cd:57:a5:bc:0e:57:68:3d:f0:15:d7:b2:9b:95:
20:35:77:ce:61:80:24:88:5f:d5:f2:91:49:bd:84:2e:d3:19:
9e:b8:f3:a7:2a:7f:f2:03:f1:80:41:af:07:f8:55:8d:f8:2d:
bc:45:a9:57:aa:86:5e:7f:e2:a8:aa:9b:be:1c:b7:71:75:1f:
88:7e:9f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:22:48 2026 by rpki-client