Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/072bvUeZC8zDmqI0Q8sHOUBR9xE.mft
File: 072bvUeZC8zDmqI0Q8sHOUBR9xE.mft (raw, json)
Hash identifier: WZuFObiteAXs80rpoZdJ3Hymmo5UzJoAQRh6s4OFmJA=
Subject key identifier: 45:A7:2B:00:25:5E:56:0F:2D:0F:DA:F8:74:3B:1F:3D:5C:D1:8D:5A
Authority key identifier: D3:BD:9B:BD:47:99:0B:CC:C3:9A:A2:34:43:CB:07:39:40:51:F7:11
Certificate issuer: /CN=d3bd9bbd47990bccc39aa23443cb07394051f711
Certificate serial: 01A0DA962EBCC8C2CBBA2CEA85DAAA47FCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/072bvUeZC8zDmqI0Q8sHOUBR9xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/072bvUeZC8zDmqI0Q8sHOUBR9xE.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 22:01:10 +0000
Manifest this update: Fri 25 Sep 2026 22:01:10 +0000
Manifest next update: Sat 26 Sep 2026 22:01:10 +0000
Files and hashes: 1: 072bvUeZC8zDmqI0Q8sHOUBR9xE.crl (hash: VWEh05hoCh8/a/RiPzofhzfi9VlGZLjBm4lDmrYEqXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/072bvUeZC8zDmqI0Q8sHOUBR9xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/072bvUeZC8zDmqI0Q8sHOUBR9xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/072bvUeZC8zDmqI0Q8sHOUBR9xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:2e:bc:c8:c2:cb:ba:2c:ea:85:da:aa:47:fc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3bd9bbd47990bccc39aa23443cb07394051f711
Validity
Not Before: Sep 25 22:01:10 2026 GMT
Not After : Sep 26 22:01:10 2026 GMT
Subject: CN=45a72b00255e560f2d0fdaf8743b1f3d5cd18d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f0:3e:83:aa:ea:b1:6c:5a:78:4d:fc:62:42:
fd:e3:a7:73:63:7b:4f:27:13:6d:15:99:78:c5:18:
03:59:94:0a:cc:4e:66:99:ca:d3:3f:45:8f:7f:c2:
cc:2e:a0:0f:06:95:26:54:78:49:4a:c3:ac:53:c5:
99:b2:e7:78:40:4c:8a:b9:35:59:35:07:88:2e:f5:
fb:12:7e:86:e9:ae:ac:da:79:d4:3d:91:a7:af:a5:
f9:ce:20:81:56:88:1f:6c:e8:8e:ea:34:f0:42:3d:
af:29:a4:e0:bd:4b:c1:81:7f:21:c5:79:e5:06:4c:
e2:6c:0e:1c:37:32:64:7b:5b:0a:1b:de:9b:91:a2:
19:1f:17:32:a8:40:6c:2d:af:8a:72:c2:fb:56:9e:
84:76:7e:2d:88:0d:48:f1:95:31:4b:5b:19:53:3c:
e4:ad:f9:22:77:a2:c3:fe:ce:d1:36:c8:6d:bf:47:
ca:1c:5c:6e:10:24:2e:8c:4a:e6:7e:1c:66:ff:b4:
c8:ea:9b:b8:37:cc:87:b5:bd:44:eb:ec:5d:4f:1d:
b2:94:77:e6:f7:29:59:63:e0:ca:53:c0:03:78:04:
a2:16:39:23:ed:7b:d9:0e:48:96:d8:85:62:56:22:
a1:03:0f:6d:7d:54:15:86:58:57:76:00:5e:e4:90:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A7:2B:00:25:5E:56:0F:2D:0F:DA:F8:74:3B:1F:3D:5C:D1:8D:5A
X509v3 Authority Key Identifier:
keyid:D3:BD:9B:BD:47:99:0B:CC:C3:9A:A2:34:43:CB:07:39:40:51:F7:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/072bvUeZC8zDmqI0Q8sHOUBR9xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/072bvUeZC8zDmqI0Q8sHOUBR9xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/072bvUeZC8zDmqI0Q8sHOUBR9xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:07:dd:53:65:b6:f5:e5:ec:e2:76:3a:04:f9:ac:d8:73:4c:
27:43:91:dd:26:c5:46:37:d9:b8:66:83:a9:93:4b:46:01:a4:
5d:da:a7:14:23:f8:e3:4c:1c:d9:ec:11:8c:f5:49:c2:40:7b:
4a:9d:7f:e5:80:11:02:67:6f:1c:5a:ab:01:a4:57:27:f3:af:
4b:df:a8:d3:ef:c5:8b:52:e7:47:2b:b6:1b:93:c9:d1:15:c3:
33:33:ce:7f:9b:23:bc:4d:af:8c:27:f6:3d:87:0d:aa:4a:6c:
48:76:23:1f:c8:a5:b8:30:24:cf:a5:47:50:e7:c8:f2:8b:1d:
28:ab:12:86:e4:ee:3f:00:fd:5b:7b:16:19:87:6c:38:fb:37:
1c:a7:75:d9:2b:2d:b8:44:24:c8:3f:c4:ca:89:fc:df:31:3b:
f6:72:69:39:91:48:9a:1b:99:62:da:79:e2:37:2c:aa:7a:0a:
44:5a:e0:f8:28:05:db:21:37:7f:e4:10:00:e9:f6:ad:2c:be:
4a:39:98:5f:8e:43:92:b5:1a:81:62:60:09:d1:f7:5a:68:dc:
5b:01:0d:d3:4c:09:29:94:84:d8:e0:47:b4:d5:8f:37:ca:8b:
91:b8:84:20:ce:85:c4:14:5e:fc:11:cf:e2:c3:3e:15:b9:b2:
90:ce:43:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:41:39 2026 by rpki-client