Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.mft
File: 206iqo001DtLZBo68wZChJv0qP4.mft (raw, json)
Hash identifier: I9z8GEkwYfvKZBF+q1cfAXZhkzQCRnCfl9YezqzmH1g=
Subject key identifier: F1:D2:FC:99:75:5E:E0:68:D8:00:16:D5:68:B6:CB:0D:FF:D6:78:E9
Authority key identifier: DB:4E:A2:AA:8D:34:D4:3B:4B:64:1A:3A:F3:06:42:84:9B:F4:A8:FE
Certificate issuer: /CN=db4ea2aa8d34d43b4b641a3af30642849bf4a8fe
Certificate serial: 01A128E87C7AA9C8A9D28A9D904FA192CE01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.mft
Manifest number: 0161
Signing time: Sun 11 Oct 2026 03:01:27 +0000
Manifest this update: Sun 11 Oct 2026 03:01:27 +0000
Manifest next update: Mon 12 Oct 2026 03:01:27 +0000
Files and hashes: 1: 206iqo001DtLZBo68wZChJv0qP4.crl (hash: eLXHRYlZ1AhdDh+dyYr4fQ1KwDBcmZdA7e24DsJUSVA=)
2: 91e9yF9Tf7PVgXnUQvheAdf-6Us.roa (hash: 98Ii+uAjQhKWebR7PAPkmqEpVcWs6e6h4lYnAI9zFHo=)
3: pLjHrcvcNBFAlqR4zJOOhU_NC-c.roa (hash: i1jQeihj8pFQh1bbrfH4V97DkpUqCZyj8dwZ2mijp1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:7c:7a:a9:c8:a9:d2:8a:9d:90:4f:a1:92:ce:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4ea2aa8d34d43b4b641a3af30642849bf4a8fe
Validity
Not Before: Oct 11 03:01:27 2026 GMT
Not After : Oct 12 03:01:27 2026 GMT
Subject: CN=f1d2fc99755ee068d80016d568b6cb0dffd678e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:df:32:46:96:ad:66:5f:84:92:5b:22:e7:
29:7a:e7:d2:9a:d9:03:f2:d7:44:f4:2c:2d:a9:2d:
f3:f3:0a:8f:e9:13:1c:ba:33:77:00:67:59:30:30:
4d:e4:46:f0:aa:e0:15:c4:2f:2b:86:d4:01:a2:35:
c8:58:74:df:a5:a5:fc:b2:f9:75:39:da:4a:da:19:
45:b1:77:d0:4d:6a:ea:40:03:d5:50:68:ba:1d:b7:
0f:dd:81:32:77:6e:d8:6d:0e:b4:2c:97:69:7e:c8:
ce:82:b8:f6:c0:5f:d7:e0:6f:44:47:88:d1:8e:48:
ce:8c:f9:7f:5f:64:74:e5:fd:44:75:32:c9:43:c5:
7a:c0:61:00:8e:59:8a:53:7f:38:36:85:89:14:24:
7b:5b:6f:4f:ed:a4:ad:36:71:d8:b0:fe:26:77:7d:
0d:f7:3f:16:30:2c:33:ee:a1:c9:f2:27:53:67:4c:
79:ff:74:b2:b4:32:d1:f1:07:af:d0:8b:58:cf:7d:
a3:3c:13:1f:50:f1:de:9f:c3:fa:8e:79:28:2a:a2:
0b:de:89:bb:7a:7b:cf:13:65:8e:4e:12:ac:3b:d1:
a0:79:e7:76:29:be:e9:b9:e4:75:1f:f4:41:a1:28:
8a:ff:4f:f7:65:c4:45:05:38:78:23:72:fe:06:5b:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D2:FC:99:75:5E:E0:68:D8:00:16:D5:68:B6:CB:0D:FF:D6:78:E9
X509v3 Authority Key Identifier:
keyid:DB:4E:A2:AA:8D:34:D4:3B:4B:64:1A:3A:F3:06:42:84:9B:F4:A8:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c1:96:68:08:7a:6e:2a:cd:5a:58:8a:2b:08:34:42:c0:76:
39:65:44:db:46:e3:e9:95:a2:8b:2a:84:0a:35:f9:c0:1c:29:
97:75:6d:6f:ab:01:bf:3c:c9:32:41:6d:37:ad:86:d3:2c:2e:
f2:ec:c0:63:9d:40:63:16:88:28:7c:a9:20:bb:6e:e1:63:24:
44:85:92:59:53:af:fc:60:a7:08:3e:6a:1b:7e:e0:c9:4f:3c:
95:6b:22:85:93:04:f8:46:5f:01:8b:ed:12:63:ea:cf:03:53:
00:fa:d7:dc:24:7d:e9:6c:3e:20:a0:cf:00:65:5e:ac:a5:cf:
7c:06:c3:62:d1:f3:b1:54:74:ef:6b:7f:dd:10:6a:68:0a:c7:
8e:e2:02:3f:09:51:e6:1f:d2:bc:ee:4e:7f:fe:1e:77:b5:9f:
af:08:ec:b0:e0:31:8f:af:1d:c2:fd:97:32:aa:cb:62:4c:3d:
17:57:33:0d:79:d7:d9:2b:8c:05:68:0d:cf:f8:12:01:46:f7:
fb:7b:f3:89:56:d6:f0:4b:ac:a4:9b:06:f9:8f:61:58:1b:60:
62:5d:68:5e:48:fc:a9:44:5e:96:52:77:8d:8b:26:b1:51:4e:
36:83:39:df:9b:74:e8:a5:db:32:2a:80:be:c2:38:e8:53:6f:
80:b1:63:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:56:34 2026 by rpki-client