Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: YAELthvICoGP+WCBth5SRHiQU+HYBUeQoeFd1jzVO2w=
Subject key identifier: 8D:52:51:7B:C2:8C:AF:6D:77:DD:C9:A1:21:46:86:E1:DE:67:3C:91
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 01A12FFD080A60B7D32C09691D283E4D64C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 1628
Signing time: Mon 12 Oct 2026 12:01:14 +0000
Manifest this update: Mon 12 Oct 2026 12:01:14 +0000
Manifest next update: Tue 13 Oct 2026 12:01:14 +0000
Files and hashes: 1: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: GrO8Q1lrXYVLTOWRpdH9AKsilmdQHUmVJmjrFjJj5bo=)
2: ebNjr6wF8ptJZsxCF_H1FATel2Q.roa (hash: T9p3ve877mC/eqYiFHAqylDZAjZLIpC4U6yL58ZPYIU=)
3: nFTF0VkjXRKqCPY796T1GnzkqjY.roa (hash: WVddRHUkGr3zZHWqGX5a7FnpsfkXVaD8LmCGuvGSXrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:fd:08:0a:60:b7:d3:2c:09:69:1d:28:3e:4d:64:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Oct 12 12:01:14 2026 GMT
Not After : Oct 13 12:01:14 2026 GMT
Subject: CN=8d52517bc28caf6d77ddc9a1214686e1de673c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:80:43:35:65:b9:7a:4a:54:ec:9b:bb:7c:64:
6c:86:09:09:05:7a:0b:55:60:35:98:02:13:98:03:
2f:33:e7:83:43:60:f4:3e:1c:8c:25:70:79:e4:8f:
ee:6a:4d:bd:2a:96:a8:47:4e:87:56:35:ad:d7:2f:
f8:86:7a:c4:59:8d:ee:c8:30:30:59:9b:72:86:b3:
78:49:07:a8:95:fe:a9:ef:eb:2c:c1:c4:23:34:bc:
88:37:96:09:70:43:20:c2:f2:bf:ac:4a:66:1b:dc:
54:b3:53:ec:99:62:d2:43:f6:bd:f0:df:25:07:07:
de:82:55:62:f9:b5:ec:02:7d:30:43:48:14:3f:79:
da:7e:d1:37:db:b6:b7:ab:9d:22:d8:3b:16:e4:40:
1a:5d:90:83:19:b4:96:1e:67:af:99:21:59:0d:f6:
36:41:50:50:02:99:22:41:fd:0b:26:a8:33:2d:81:
95:50:d5:6b:bc:1e:fe:d8:f6:b8:2a:aa:56:80:55:
74:af:42:07:68:4d:87:ef:31:1b:a9:d6:f7:e0:4f:
1f:2d:01:00:a1:c5:2b:93:6f:e3:bb:b1:76:fd:b1:
88:c1:f3:7d:4e:3f:ab:46:f8:49:e6:ff:e7:d8:af:
7a:a3:de:13:ee:ca:86:9c:1e:43:4b:e1:46:9c:fa:
4a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:52:51:7B:C2:8C:AF:6D:77:DD:C9:A1:21:46:86:E1:DE:67:3C:91
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:31:8b:3e:8d:55:df:fd:b2:c0:ab:da:f3:37:7e:32:27:53:
2b:96:ee:0d:90:0f:07:66:f7:9e:fd:ca:7f:e5:ec:b7:68:e5:
b8:45:e0:70:07:b2:89:f1:67:f0:54:61:e3:5e:f7:a5:d0:c1:
8f:4b:2f:4a:a5:cd:e5:85:90:b2:f2:11:9a:33:12:2d:da:c2:
a3:a6:5f:bd:5d:0b:b1:de:46:2c:80:c0:d6:2a:ef:85:e6:f6:
29:b5:dd:07:f8:eb:f5:f6:90:ea:d0:cb:72:60:7b:c8:ac:dd:
5c:e3:0f:cc:46:e2:26:54:08:0d:2f:e6:8f:67:b8:ae:b2:a6:
27:98:b0:3e:1d:c1:5e:f1:dc:1c:dc:14:c4:8e:5b:68:17:21:
7e:d5:53:4f:0d:8c:1c:a4:5c:a8:ea:fa:18:fc:19:f3:3c:0c:
94:99:8b:6b:87:b7:a4:7a:54:cf:45:90:9d:f9:da:c7:22:f8:
5b:8d:a0:68:34:93:c3:45:7d:ff:09:be:b1:75:a1:cc:c0:0f:
81:84:4f:1d:34:af:e9:c4:fc:aa:76:70:53:23:79:fc:ad:b5:
3c:d4:71:41:04:3e:ac:58:c0:6d:50:91:eb:48:51:ae:d9:9a:
d9:4d:23:ab:05:78:a2:70:77:2a:61:fa:5c:bd:ae:ef:01:b9:
dd:ef:98:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:23:17 2026 by rpki-client