Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File: dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier: /9EmEp8JhUH+tADUOYtMlcZgic98UbTDqc/qFIFCApA=
Subject key identifier: CF:CE:69:92:17:05:28:1C:84:90:A4:33:FA:A4:ED:2B:C6:82:9F:B1
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer: /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial: 01A0DB71C9E128DA3E25F553E6C15ACC5EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number: 08BD
Signing time: Sat 26 Sep 2026 02:01:02 +0000
Manifest this update: Sat 26 Sep 2026 02:01:02 +0000
Manifest next update: Sun 27 Sep 2026 02:01:02 +0000
Files and hashes: 1: 2VmhrnY1R-y6rxXotPMotrQDcR8.asa (hash: Ap3BdSC63YcAczUKkEzGKumr15/KgLHB6Jp/DYCbOq4=)
2: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: mCN0d8I4roMB3qZOcS/be1IIOu09TB6GkWz6h8xE4J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:71:c9:e1:28:da:3e:25:f5:53:e6:c1:5a:cc:5e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
Validity
Not Before: Sep 26 02:01:02 2026 GMT
Not After : Sep 27 02:01:02 2026 GMT
Subject: CN=cfce69921705281c8490a433faa4ed2bc6829fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:b6:3e:b3:1f:47:d7:89:f4:1a:35:3c:86:
57:bb:f2:57:35:bc:f5:fd:dd:c5:0f:83:fa:22:09:
47:aa:d0:06:85:c8:a2:cf:1b:ca:b0:2c:a0:92:d6:
ec:a6:54:15:9f:c7:d3:79:e1:f6:6b:59:40:2d:29:
b4:8a:e8:84:a0:f2:0c:e5:98:1d:d5:83:e9:a2:6f:
2c:07:ca:10:f9:21:e3:27:63:7e:4c:cb:fd:b5:d3:
69:d9:4f:95:f8:e9:6f:d5:e6:32:61:c2:d8:13:78:
8d:83:a0:a4:5b:98:44:c8:d9:6e:60:5b:c8:58:13:
26:c7:1b:d4:73:2e:6c:22:a9:13:12:b6:4b:5b:be:
cf:28:9a:05:df:2f:59:9a:e3:d2:a9:c7:24:8d:1d:
50:84:06:35:39:19:17:f1:33:91:d6:9a:ac:7e:7a:
22:e4:fb:8e:a0:13:0c:da:0a:91:56:bd:b7:82:61:
7e:6b:4e:ae:5e:82:f6:b7:3f:8c:98:8f:9c:0e:05:
85:27:84:38:a9:41:61:e5:90:15:cd:cc:b4:3f:ab:
76:3e:20:27:f0:ab:80:8f:b8:ea:02:6d:65:26:4e:
52:88:cf:e8:93:d5:e5:22:98:39:25:7d:e0:72:65:
8f:66:96:7a:12:3b:e4:14:68:18:f0:4a:9f:9d:f0:
15:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CE:69:92:17:05:28:1C:84:90:A4:33:FA:A4:ED:2B:C6:82:9F:B1
X509v3 Authority Key Identifier:
keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ca:04:87:a0:fd:40:c9:ec:26:a8:24:09:51:f0:57:3a:88:
6e:af:44:6b:50:f4:e3:4b:99:33:1a:2d:71:7d:49:13:d9:33:
31:0c:6d:c4:f5:23:2d:4b:01:55:4e:be:0e:f8:bd:a9:0a:0b:
b6:a7:cf:ba:9c:17:35:d1:c6:f3:96:2d:14:98:3c:9e:6b:4b:
5d:59:a1:b1:3e:78:25:6d:ad:71:22:5c:7c:87:1c:85:09:20:
c0:a3:e0:ca:29:63:b6:d5:82:66:1f:9d:06:42:cd:9a:80:ef:
0a:30:ac:7c:6d:d0:e3:45:09:c8:23:63:2e:d2:1e:1a:9e:10:
02:bf:c9:c0:3d:93:0a:47:eb:84:fa:68:af:2a:56:95:0a:6b:
f3:a9:11:bc:9c:4a:97:df:1b:55:bc:b5:50:4b:65:e8:aa:a9:
7f:5a:53:88:5f:11:94:5c:ca:8c:90:10:10:47:28:f7:36:5e:
29:d4:c6:ce:ce:fc:e5:68:1e:50:a3:8c:4a:52:f1:32:ef:f3:
41:16:49:83:ff:bf:30:f1:be:85:84:a1:e9:74:2a:cd:eb:85:
57:4e:d0:24:71:e6:82:31:75:a8:0a:9a:71:03:f1:3b:0a:e2:
ab:ae:a9:84:1d:52:30:f3:9b:6e:85:52:66:ba:1a:93:5e:8e:
8f:d2:46:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:37:00 2026 by rpki-client