Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: FHjzjBlcoUT0PiYCq6LZx1WUdAQqmuNptI+QDp+4RzE=
Subject key identifier: E2:B8:22:16:A0:5A:F3:32:8D:37:AF:BB:4B:31:C3:89:1D:64:80:65
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 01A0D8727CC25944A63797AE95DB7525B7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 0AFB
Signing time: Fri 25 Sep 2026 12:02:56 +0000
Manifest this update: Fri 25 Sep 2026 12:02:56 +0000
Manifest next update: Sat 26 Sep 2026 12:02:56 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: vfL9rIw1RKeepKmtU1EUN4bS+tuNJ1SWEqrxBELBMck=)
2: nlcpl9ulhW9UJP1m-NfebbvM-08.roa (hash: IBQWkMt/VVWxVDIuSxk0QRhZsHES5xi9v/NlOWNnx9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:7c:c2:59:44:a6:37:97:ae:95:db:75:25:b7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Sep 25 12:02:56 2026 GMT
Not After : Sep 26 12:02:56 2026 GMT
Subject: CN=e2b82216a05af3328d37afbb4b31c3891d648065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fd:af:a4:ec:82:20:e7:99:59:87:8e:3e:5f:
96:34:b3:1e:fe:3e:b0:cd:6b:1e:5f:7f:89:31:bb:
44:2b:49:08:8d:77:7a:f4:4a:c1:8c:8b:1d:00:df:
13:69:63:fc:7e:a9:a8:6f:63:15:59:a9:64:be:93:
4e:9c:54:17:68:3c:dd:6f:64:12:6b:79:2a:12:04:
b0:c4:f7:0e:9c:61:aa:a9:97:28:ac:e8:2f:1a:9c:
a3:d5:9e:e4:f4:4a:25:00:1c:5e:f8:b0:8b:24:91:
22:00:b5:4c:96:02:74:63:f3:a6:25:17:00:58:6d:
01:f6:94:2c:67:88:39:c9:bf:cd:fd:75:ba:66:51:
d9:6c:07:f2:ed:ab:c3:c2:66:26:7b:7f:4e:7e:eb:
ed:00:79:b1:4a:cd:a5:e8:e5:73:0d:85:f3:13:a3:
50:2d:c7:81:d8:54:9c:36:42:2d:6b:7b:c7:c4:b2:
7b:8b:3a:8d:5d:8b:01:c5:7c:c0:ff:3f:5e:ae:54:
3c:e3:a0:d9:e6:16:ea:26:37:22:e5:0d:c7:78:2d:
28:61:11:12:8f:ee:2a:51:27:2a:9c:b8:e3:f1:36:
73:8d:71:3e:38:9b:71:64:c6:1b:a7:e3:f7:89:1e:
33:e2:8d:14:8a:1d:90:63:10:4b:04:3c:c5:9b:80:
39:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B8:22:16:A0:5A:F3:32:8D:37:AF:BB:4B:31:C3:89:1D:64:80:65
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3b:4e:a7:af:43:7c:1e:ed:f2:2c:19:86:4d:0c:96:8c:a5:
ff:2f:59:e8:10:2d:b3:97:e1:c6:ed:86:8d:3d:be:c2:04:b1:
17:f9:f3:94:f5:77:30:55:e9:7b:7a:4a:e6:b3:3c:c0:91:c5:
a8:bd:ac:aa:3e:3d:eb:a0:b9:70:0b:39:61:d0:be:f7:cd:e8:
73:4e:41:01:7c:21:67:03:06:e8:05:79:ee:b0:8a:cb:ae:b2:
19:9a:82:ff:41:35:bb:71:cd:d0:60:9c:2f:87:3c:68:27:91:
89:aa:81:f5:fc:84:5e:f3:12:21:d7:7b:33:9a:a3:38:19:9c:
f5:dd:de:77:25:ab:ba:ab:2c:28:32:af:15:f7:b0:09:25:2c:
fc:46:a1:fe:7b:73:c8:c5:f4:19:1f:67:85:a3:8f:69:76:57:
9e:5b:4e:70:56:20:33:97:db:e0:f8:21:ab:3b:77:43:72:ca:
7e:8f:b0:47:a1:06:86:e3:94:ad:9b:ed:b5:c4:88:28:38:17:
c8:1c:3c:23:52:88:51:d0:b1:c0:68:a1:25:88:31:5d:06:12:
63:08:ee:48:8d:75:3f:33:6a:2e:d3:a9:64:c5:21:7e:34:74:
69:59:a2:16:d2:36:7a:ee:40:3f:47:36:33:96:32:bb:4e:c6:
85:a2:95:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:45:29 2026 by rpki-client