Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
File: 0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json)
Hash identifier: 8Fq+BngHBp3KeMLzJaIDMyYzaO0dUO7PD83sWFJq2zk=
Subject key identifier: 93:2C:D8:22:4A:96:B8:F5:63:57:AD:D2:E8:CF:B9:5F:3E:75:5A:19
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial: 01A0CD1195E6723A7DE357616A64AF6FF59B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 07:01:16 +0000
Manifest this update: Wed 23 Sep 2026 07:01:16 +0000
Manifest next update: Thu 24 Sep 2026 07:01:16 +0000
Files and hashes: 1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: l/W5/44/Rl0oGhjdSJ6XA5TuuLqYD848+oPhxPh3wRg=)
2: uVyWlFLKciqrsAXXjZQjx39QcNU.roa (hash: jEDtg9ux39nelJUaz7u7+ZJxoa/PnUqwfRMuyqZC6j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:95:e6:72:3a:7d:e3:57:61:6a:64:af:6f:f5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Validity
Not Before: Sep 23 07:01:16 2026 GMT
Not After : Sep 24 07:01:16 2026 GMT
Subject: CN=932cd8224a96b8f56357add2e8cfb95f3e755a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:44:32:d3:d4:9b:7a:86:e1:33:e9:66:34:
7f:68:e2:e6:18:88:cb:b5:80:53:cb:fe:a4:94:e8:
6a:11:b5:cb:e8:37:ff:58:53:13:a5:d0:ef:33:c6:
a4:45:00:64:a3:ed:fc:ad:35:34:36:48:ea:6c:49:
f9:c1:90:fd:84:a6:5d:3c:5d:8d:1d:63:e9:6a:37:
9a:5c:33:71:de:10:87:90:2c:9d:59:c5:d1:b1:de:
fa:8a:d8:24:c8:65:e0:2d:dc:70:92:69:66:ec:58:
b1:3f:76:20:b7:cb:a4:c4:04:56:ac:31:75:47:1d:
10:60:29:9e:12:f5:c4:53:51:ac:58:bc:ab:e8:33:
3c:9a:f7:0d:3e:ac:8a:2f:c1:6b:9a:75:e8:d7:9c:
49:26:67:9a:70:f4:5d:59:7c:1d:c1:e8:19:9f:a4:
10:0f:76:e6:a2:ed:c1:69:39:25:dc:b9:75:8c:18:
84:0a:3d:a4:79:3e:cd:c7:bb:71:0f:d4:e2:d3:d0:
0d:15:05:35:62:52:0f:7e:5b:12:8b:dc:9a:11:7f:
0d:86:ab:39:86:6c:a4:53:0b:d7:18:68:99:91:a3:
9a:32:5c:5b:61:4e:40:eb:6e:74:10:35:f5:8d:39:
4a:27:97:1b:40:a5:12:03:71:be:89:31:6d:fd:e5:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2C:D8:22:4A:96:B8:F5:63:57:AD:D2:E8:CF:B9:5F:3E:75:5A:19
X509v3 Authority Key Identifier:
keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c7:e8:74:a6:ab:b6:db:73:7f:21:ce:2e:3c:0b:c7:5d:0c:
28:6d:6e:42:63:97:16:8b:73:d5:d7:b2:5f:31:d5:e7:10:36:
d9:75:84:39:6e:b8:8e:aa:28:54:41:19:39:7f:bc:85:a0:f4:
e7:91:9f:d7:a0:8d:ba:a1:a2:1f:f9:0c:de:47:40:a3:af:ad:
cf:d3:1b:bb:75:01:97:ae:ff:4d:87:99:72:d8:fd:cb:54:da:
76:4a:3a:5c:81:14:12:5a:ab:65:49:f0:af:61:df:70:c4:e4:
46:f4:56:81:d8:25:24:9c:43:5d:bb:91:12:51:7f:85:52:48:
d5:be:31:0c:b2:9e:74:98:03:96:73:b3:20:91:c1:ce:f6:7c:
c0:95:f9:c0:40:3c:be:63:73:f6:24:b7:fd:85:ce:d2:be:91:
ea:25:5a:5d:45:3b:f4:ed:05:b8:78:74:4f:1e:c0:49:46:90:
99:f0:25:9e:39:3a:90:04:bb:79:40:a1:a5:25:c5:f3:34:6c:
e2:c2:a9:29:53:72:23:82:a0:9c:54:f5:5e:1f:d8:77:40:71:
1e:20:40:be:0d:0c:57:ba:ab:e1:17:32:ed:d0:c1:f8:4c:24:
86:92:5a:77:96:ea:1a:be:3f:9a:20:1f:d6:6d:eb:44:c9:8e:
7f:75:a5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:57:45 2026 by rpki-client