Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier: fL+PbDDUPqEiiQ1PFECzO290N1aaoEbldYllwTpgWy8=
Subject key identifier: DE:E3:C4:66:18:25:D5:AE:0B:B5:B4:B8:F3:E8:AC:57:73:C8:B3:19
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 01A0E173C349A0484C31DF1439E0BA56C287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number: 0F1A
Signing time: Sun 27 Sep 2026 06:00:55 +0000
Manifest this update: Sun 27 Sep 2026 06:00:55 +0000
Manifest next update: Mon 28 Sep 2026 06:00:55 +0000
Files and hashes: 1: CEtSnynucMTXjmsVQI2XO0Vay7g.roa (hash: 2YbIxKxSxNLbUsVeSSXam6c2lBbX/6A1TDycN6DbUfg=)
2: KfM_Z_Z-SNR188s2cAL37I8urEE.roa (hash: UID52aiMOKJSN+qhsE3djfMdcKj7BbWtDHOsP/vEFqQ=)
3: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: 2ZD1O+uZyL5Rfy8xCXBCjvBV8vS7ji+aKUa5vyMmXBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:73:c3:49:a0:48:4c:31:df:14:39:e0:ba:56:c2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Sep 27 06:00:55 2026 GMT
Not After : Sep 28 06:00:55 2026 GMT
Subject: CN=dee3c4661825d5ae0bb5b4b8f3e8ac5773c8b319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:81:b9:2d:ea:8e:37:d5:5a:f1:4c:5c:fe:bb:
c3:28:bb:e7:04:da:26:35:d3:5b:63:f8:48:62:2d:
08:41:40:91:8b:4f:99:32:b0:14:6d:88:3c:d3:a7:
f6:fd:62:e3:45:b9:b2:df:51:dc:4f:60:20:2e:60:
9a:61:e4:fc:ed:40:4d:10:a4:41:a4:c2:2d:52:1b:
7a:21:cd:5d:ce:ab:15:b3:96:fc:4c:22:ae:bb:9a:
e5:b7:02:44:53:34:d7:ee:bf:23:87:98:bd:c0:80:
20:66:cd:1a:30:c9:d9:32:f3:31:a0:90:fc:36:87:
64:b3:e7:0e:05:f7:e0:99:51:22:f6:65:c4:45:22:
33:7e:ca:83:14:81:79:60:e5:15:ee:1f:ba:97:90:
1d:d7:c8:30:41:78:06:60:a0:3f:1b:6c:a4:9d:24:
34:7b:87:a7:a0:70:09:a7:66:ff:5e:05:00:cd:1d:
b1:34:41:72:89:51:91:57:e7:07:20:89:82:09:e6:
d8:6f:d2:a0:a4:6b:32:86:6f:0b:aa:dd:38:41:a3:
44:10:15:86:a1:84:3d:9e:d7:67:92:f4:55:61:b0:
31:1b:31:d3:d4:7f:7d:be:22:4a:5b:76:5d:f3:e2:
74:20:4a:43:d3:69:db:f3:a8:1d:89:ce:6c:40:6b:
9f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E3:C4:66:18:25:D5:AE:0B:B5:B4:B8:F3:E8:AC:57:73:C8:B3:19
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7d:1f:48:c4:7d:48:c5:14:03:bf:bb:c2:91:90:0a:c6:f8:
84:63:59:12:ef:cd:d9:c5:8f:a8:17:6c:bc:7e:cc:5b:17:f3:
1c:04:f1:f5:ae:83:80:6e:bb:1f:d4:8d:e2:1b:b6:4c:e8:d4:
88:5a:ee:b3:65:b4:17:09:31:87:d7:d5:cf:a5:c0:d4:f2:7c:
8c:37:93:87:de:e0:5c:3d:73:cd:c9:eb:f2:4a:05:a5:eb:02:
4b:c4:0b:4f:df:1b:ee:10:0e:7e:87:a0:e2:a2:be:c8:3a:6b:
1f:ac:25:69:cc:ae:f7:e6:a7:de:c9:7c:ee:74:f0:fd:07:38:
34:e1:b9:b2:fc:ba:28:83:49:99:24:1b:c7:ba:f3:64:59:4e:
2e:99:f3:9b:42:3c:c8:3e:33:25:96:82:d8:2a:47:94:ed:b9:
83:b7:58:c7:66:d3:44:1f:21:d6:6a:70:31:9a:ad:4d:ea:4b:
4a:33:2d:82:d2:bb:fc:87:cc:23:42:92:d9:9d:24:85:99:05:
4b:b0:3f:0e:3b:01:9b:fb:fb:e2:29:0b:39:48:4b:f7:ee:9b:
c9:92:90:8c:2c:6a:29:11:31:14:8b:d3:88:e8:e5:34:1e:8b:
43:40:e8:39:14:12:c4:d8:af:e4:86:8d:4b:57:53:3e:88:2d:
09:15:40:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:44:43 2026 by rpki-client