Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
File: d27ATX5nmIYhbQe8cijbUo88hv0.mft (raw, json)
Hash identifier: Ddix3JZq/WMWQYAwaeA5uLBUdeK45lR9lUhMEakWfUI=
Subject key identifier: B5:D8:B6:60:71:42:53:A8:E1:82:23:4B:80:28:C9:30:EC:98:56:E4
Authority key identifier: 77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
Certificate issuer: /CN=776ec04d7e679886216d07bc7228db528f3c86fd
Certificate serial: 01A13937033BF3C10F274AB5DF18C7B6AEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
Manifest number: 01D2
Signing time: Wed 14 Oct 2026 07:01:08 +0000
Manifest this update: Wed 14 Oct 2026 07:01:08 +0000
Manifest next update: Thu 15 Oct 2026 07:01:08 +0000
Files and hashes: 1: Gesfsa1mPZDnaCG5I-S24-ylDHM.roa (hash: 2IV3q7ceTfOxNOfoF+NvFTTxBpL0Fe+G/gUYs6fQZiU=)
2: d27ATX5nmIYhbQe8cijbUo88hv0.crl (hash: FqJU9FnIvLoe0BdUB+2louYrQkrVrBoQUVWg8vB0l2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:37:03:3b:f3:c1:0f:27:4a:b5:df:18:c7:b6:ae:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776ec04d7e679886216d07bc7228db528f3c86fd
Validity
Not Before: Oct 14 07:01:08 2026 GMT
Not After : Oct 15 07:01:08 2026 GMT
Subject: CN=b5d8b660714253a8e182234b8028c930ec9856e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:da:25:a1:e7:11:64:e2:9e:23:0e:67:73:
fd:38:27:e8:14:88:47:c1:cd:b3:31:ee:73:0c:a9:
c6:60:5b:cf:0e:4a:bc:ef:9e:0d:f0:09:cb:cc:83:
3a:b1:d6:2d:f7:64:b6:64:5c:63:ee:63:7d:41:27:
78:88:bf:f0:4c:5e:a8:2a:75:8b:bf:ad:c7:ae:c4:
5b:38:81:06:f4:dc:4c:e0:51:90:c9:56:c2:fd:5f:
89:b4:71:35:8c:90:2f:8b:f7:b8:99:f7:a1:66:d7:
36:23:68:29:2e:be:78:39:5c:02:c8:68:1c:24:1a:
f7:8b:61:3b:53:66:03:c2:af:bb:f1:6b:32:bf:4f:
86:8e:1a:62:9d:bf:21:c5:e8:9e:ce:02:c1:b1:47:
97:03:b2:98:72:2a:49:56:dc:03:6c:14:61:98:af:
99:6c:56:92:c2:33:2e:9c:62:0c:df:2e:94:40:21:
32:d4:87:99:a2:75:d1:24:7a:9c:7d:b2:c5:cd:96:
c1:e6:f2:b2:19:60:c4:30:b3:b3:33:d7:af:f9:65:
82:c9:e4:66:77:5a:7b:c3:45:a5:c4:b1:a3:20:a4:
c5:bc:19:a6:5d:17:a5:fb:16:c6:52:13:03:ad:6e:
26:02:35:15:39:bb:b1:fe:95:c2:cf:b1:ad:51:93:
70:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D8:B6:60:71:42:53:A8:E1:82:23:4B:80:28:C9:30:EC:98:56:E4
X509v3 Authority Key Identifier:
keyid:77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ae:c5:c4:6c:cc:a7:7c:dd:79:a5:17:5e:38:70:03:fe:f3:
58:24:15:0e:0e:58:d6:d3:8f:fc:ff:72:ce:5f:ce:c3:e8:ed:
b6:18:23:04:2e:d7:6b:4d:d0:95:d3:58:c0:a0:32:81:0e:07:
ea:00:03:b0:72:75:03:bf:b3:02:64:0d:2e:dd:38:c8:da:b9:
f4:bd:48:43:d5:93:6e:0e:02:93:d6:da:5c:52:ca:e4:cd:e3:
3a:85:44:3c:bd:06:40:03:63:58:99:e6:d3:e9:16:75:b1:d5:
89:97:85:b8:e4:ca:81:23:55:da:12:e0:65:c8:0d:8c:09:9a:
68:f0:06:34:d9:55:ca:0f:e2:21:fb:87:94:c5:dd:68:73:bb:
ab:f9:a8:66:4d:0c:4a:9f:fa:62:b9:89:16:54:0f:2b:38:57:
11:98:c7:39:6e:fb:d8:14:9b:5c:4d:18:34:26:a3:c7:16:3b:
f7:96:b5:97:41:cc:b2:41:29:9d:5f:d2:66:bc:28:94:7c:54:
85:03:83:80:dc:92:ae:9f:fe:dc:ef:2b:5c:53:eb:a2:f0:68:
c0:24:bd:29:8b:7a:36:51:bd:6e:df:00:10:a6:e9:37:f7:68:
38:ed:26:3d:cb:41:d6:9f:87:71:b5:d0:86:87:61:f7:d1:06:
ba:34:d3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:35:15 2026 by rpki-client