Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: SwQa/14FCN/VKwm+lj7eNagWXDO85qJX8iVCljCQFUo=
Subject key identifier: 0D:2A:31:32:7C:AB:C2:7C:75:D4:8F:C1:86:90:10:CC:2D:12:19:8A
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 01A0D07F965FD61754812661898ED9431196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 1535
Signing time: Wed 23 Sep 2026 23:00:17 +0000
Manifest this update: Wed 23 Sep 2026 23:00:17 +0000
Manifest next update: Thu 24 Sep 2026 23:00:17 +0000
Files and hashes: 1: PeJEMtupept21vf-rfjqUX1mldY.roa (hash: L3Vq59CQQkeuB9Tb5q+mJV+IQYi3JZHbF6U8aJ9gFYU=)
2: aD0lsDcoNGKfxZpDG-OdR_bzMnU.roa (hash: bvoZBbd9QoLZ+N5I+xfKDL3PeYR6CygFLOwHX1oAOxI=)
3: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: jA9S31fZIBg02dELNdvTFqlnTxY3wPlCpc0K0Ov17/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:96:5f:d6:17:54:81:26:61:89:8e:d9:43:11:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Sep 23 23:00:17 2026 GMT
Not After : Sep 24 23:00:17 2026 GMT
Subject: CN=0d2a31327cabc27c75d48fc1869010cc2d12198a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:0d:57:40:fc:93:d1:5f:13:37:e9:c1:75:
88:b7:96:09:4a:6a:0a:90:71:1e:09:94:8a:f0:0d:
63:ae:02:55:35:94:f4:0b:9c:8f:fe:9c:9d:e5:37:
80:0d:82:e1:15:8b:0a:98:90:e3:f1:5d:22:5f:06:
76:42:10:7c:17:39:17:6e:f1:44:8e:c1:09:f9:e1:
19:3e:fe:7c:e1:29:c5:86:81:80:e9:be:e7:d5:56:
c5:12:f4:db:84:f4:34:3d:27:dd:2e:53:05:18:c5:
3c:ae:d8:98:93:c7:24:78:d6:07:c7:27:1f:ef:2b:
73:fd:12:b6:63:0b:98:22:d8:df:4e:5d:28:e6:e1:
74:da:04:1f:3b:8b:be:9c:84:8a:9c:ce:b1:96:bb:
cd:86:b4:b6:32:6d:b5:d2:e5:c9:70:89:5e:5a:94:
2b:5e:97:98:7a:7a:5e:c2:eb:c4:3c:e3:be:70:ec:
0c:d1:93:08:a1:53:97:73:80:eb:86:28:3d:ae:69:
95:4e:e1:d3:39:b0:54:02:6a:51:1d:8d:e3:7b:38:
95:d1:b4:46:74:50:44:c2:cc:77:20:2e:8e:da:c0:
4d:d3:46:7f:94:23:a5:83:03:ad:8e:ad:37:3c:1b:
f8:db:3d:7a:d3:8b:ae:6c:15:8e:ff:69:c0:41:ce:
98:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2A:31:32:7C:AB:C2:7C:75:D4:8F:C1:86:90:10:CC:2D:12:19:8A
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fb:82:f3:51:11:bf:69:8a:52:ce:ad:81:17:30:55:98:b9:
85:1b:1d:12:1a:cf:d3:6c:dc:7e:39:d9:9c:6f:59:8b:b6:4a:
cd:48:86:aa:5c:1e:b0:ca:7a:a9:03:cf:4b:9a:18:d8:fc:76:
38:7b:f5:ca:cf:0e:5d:fa:e7:b0:6a:84:57:d5:0c:73:04:c7:
9f:86:93:c4:6a:31:bc:ee:2f:71:6b:b6:7b:75:04:43:85:23:
46:e7:cd:72:bf:36:4e:08:97:a7:f9:e2:87:e5:5f:d8:a8:b9:
15:fa:e5:6a:b2:75:98:ef:72:cc:fc:a1:20:18:a8:0d:74:3a:
0a:98:ed:fe:65:8c:8f:67:d7:7b:80:91:7a:bf:30:2a:a4:0f:
61:3f:45:c6:06:ad:5c:18:0c:ae:2f:32:08:44:b6:81:c5:4b:
bf:ad:55:ca:3c:84:fb:f9:86:89:e3:db:14:8b:6c:a1:26:b3:
6c:f6:6d:0f:4f:77:ce:da:a8:28:a7:02:54:b1:8e:9d:2b:7c:
f1:f7:f5:80:ed:3e:b8:c9:35:79:de:8e:4d:67:d3:b3:54:b8:
e7:53:49:b4:b9:66:45:ea:cf:d8:71:d0:7d:f6:a4:1b:ef:73:
51:8b:1b:8a:73:20:1f:75:bb:57:c0:c2:18:ee:39:b1:15:9a:
10:03:10:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:33:55 2026 by rpki-client