Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
File: d0972iMD4D6ANP52MfUEi5mF9n4.mft (raw, json)
Hash identifier: Xlo2iNex0HqRWgUk3TmLR4pgIosjPcc1E6aZVzEpMp0=
Subject key identifier: 32:C8:46:DB:B9:4A:E9:E4:05:E0:D0:08:10:F2:44:4B:F5:70:2C:CC
Authority key identifier: 77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
Certificate issuer: /CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Certificate serial: 01A0E7AF61FCF3CDFBF6B12F11DC931BACCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
Manifest number: 03D2
Signing time: Mon 28 Sep 2026 11:03:45 +0000
Manifest this update: Mon 28 Sep 2026 11:03:45 +0000
Manifest next update: Tue 29 Sep 2026 11:03:45 +0000
Files and hashes: 1: d0972iMD4D6ANP52MfUEi5mF9n4.crl (hash: +O/yD//SXJ2wKTKkB5GGrbT6XmRfF4hFx7GRPbmsiZI=)
2: vr-KcEvzFupIdELOEs6eVsczP7A.roa (hash: sVJX8b77ReEC5s9osN7ZZ4vvNkbfeOM17MUXGpuCdfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:61:fc:f3:cd:fb:f6:b1:2f:11:dc:93:1b:ac:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=774f7bda2303e03e8034fe7631f5048b9985f67e
Validity
Not Before: Sep 28 11:03:45 2026 GMT
Not After : Sep 29 11:03:45 2026 GMT
Subject: CN=32c846dbb94ae9e405e0d00810f2444bf5702ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:93:69:ee:49:7c:8f:3d:51:d1:f6:2c:f9:f5:
c2:6e:0f:25:75:bf:d5:c3:93:f3:1c:79:68:22:7e:
04:6f:9a:98:58:bc:06:9c:90:c6:6b:97:9c:6a:08:
7b:06:a8:d8:e1:9c:87:dc:64:20:88:f8:ce:bf:74:
00:98:06:36:3b:d8:ef:7d:59:53:cb:e5:ea:6e:b2:
49:b0:70:0e:79:8c:7c:f8:60:ba:17:9c:49:f9:80:
ed:00:d4:c8:91:13:af:8a:33:8d:51:8b:ed:54:8b:
7a:5a:dd:82:85:87:a6:b9:87:88:bd:97:60:c5:aa:
f1:7f:d9:02:76:1b:eb:8b:94:a2:c0:88:17:dc:cf:
8a:3a:f4:50:2b:b3:10:45:bd:8f:f2:8d:f7:b5:e3:
03:a0:51:28:18:e1:35:46:7d:bf:0e:7c:8c:50:24:
ff:c4:da:d1:09:7b:0d:97:65:c4:32:b3:e7:e9:09:
29:ba:36:61:1b:73:95:4c:1a:df:68:58:cc:3c:f3:
06:51:dd:0c:95:90:c1:1a:02:8d:56:a8:7c:63:b4:
58:70:ba:a2:cb:12:5a:18:72:ce:a6:f6:7f:98:c2:
c6:d9:7e:bc:de:6f:54:c5:ed:e9:35:c9:56:23:22:
74:5f:4e:29:61:a0:7c:72:75:a7:fe:49:e2:5f:e7:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C8:46:DB:B9:4A:E9:E4:05:E0:D0:08:10:F2:44:4B:F5:70:2C:CC
X509v3 Authority Key Identifier:
keyid:77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1e:ec:45:54:1f:dd:ff:b4:8d:24:8c:5c:41:77:80:55:a8:
b0:e0:26:75:0a:4d:2a:e4:12:9d:62:fe:c0:d7:27:42:ed:1f:
53:84:88:72:c1:af:91:b2:27:e3:5a:a3:d8:db:b2:5b:5f:c8:
94:6c:d2:e7:ed:fc:8c:fb:a2:97:a1:df:b3:45:ef:fa:95:d6:
6f:8c:31:73:7a:00:96:28:2e:14:6d:90:a0:c0:2d:06:c0:30:
7a:c4:69:5c:f9:60:3e:4e:29:2e:e9:fc:65:76:85:fc:c4:b0:
4a:65:b8:86:50:77:d3:05:11:70:aa:38:94:ff:86:f3:39:74:
1c:51:61:c9:4c:66:2d:0a:33:ea:7b:75:fb:42:1e:7e:2d:e3:
57:b9:1b:4e:85:d3:31:64:58:32:1b:fb:9b:68:91:3f:62:e4:
6f:d4:3d:bf:ad:bd:ab:85:62:56:46:8d:b3:15:82:2d:55:34:
57:99:1c:63:bd:e6:71:a8:b9:55:3f:dd:d6:19:e7:c2:48:14:
4c:5d:0e:0b:96:8a:5e:ea:da:80:a0:fe:64:c2:e8:90:42:dd:
22:b8:4c:c7:9f:80:0a:35:d0:dc:d9:0a:0d:19:52:24:b9:54:
12:23:5e:20:1c:78:70:fe:05:9a:f5:da:9e:0a:22:c3:06:12:
36:be:49:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:48:20 2026 by rpki-client