Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier: v6fYscd20kxgZzR5tiIaFNKyhfF7GhEAjOQZYPGXv8w=
Subject key identifier: 47:F3:31:01:66:F0:59:23:7F:69:79:47:03:FB:C9:DE:36:10:9C:39
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial: 01A0DF86B3E0FCD9CB77F3D1C6B070CA7FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 21:02:21 +0000
Manifest this update: Sat 26 Sep 2026 21:02:21 +0000
Manifest next update: Sun 27 Sep 2026 21:02:21 +0000
Files and hashes: 1: Ra_O1tJPqxceyq_rAhiwFMOrKjw.roa (hash: Rmyhdy6TeiiXlYpWyq2MVfXDcJgMeLMhA0axqCrhBSg=)
2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: xsJVbODibdc0udnFfJOqfNCTZCM1Mw1hS+PRQVLi2CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:b3:e0:fc:d9:cb:77:f3:d1:c6:b0:70:ca:7f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
Validity
Not Before: Sep 26 21:02:21 2026 GMT
Not After : Sep 27 21:02:21 2026 GMT
Subject: CN=47f3310166f059237f69794703fbc9de36109c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9e:3b:ba:bd:76:ca:28:ac:f9:ec:ad:c3:65:
b0:8f:1d:ca:21:d2:b1:d1:e3:8e:ad:f7:58:c6:81:
91:44:27:0f:0c:1e:d0:e3:00:d0:ec:03:a0:6e:75:
f8:e6:b6:3d:4b:8e:80:f9:2f:4d:7a:85:b3:42:ea:
01:58:65:f9:4b:09:d0:4e:83:7e:a0:1d:f8:5a:1c:
0e:69:f4:ec:d2:de:7c:86:15:a1:83:f4:e8:e5:c8:
e5:ec:e9:06:b0:2f:8a:47:bb:02:15:0e:fd:9b:f2:
31:0e:b2:7f:0b:6b:03:c8:ff:a4:f8:aa:99:88:6d:
a8:b7:03:96:95:f1:55:2c:ac:7f:ea:9d:e9:29:43:
6b:9a:34:b4:41:08:2f:5f:db:a2:6c:a1:d1:b8:06:
92:69:5d:bf:e5:9f:13:3e:3b:c3:82:66:56:b6:99:
40:bf:4b:f3:d7:9b:ca:9d:27:f7:bb:a5:20:ed:29:
9f:fb:ba:aa:56:9c:c9:1f:57:b0:f3:9d:fc:cb:7b:
b7:06:ce:9e:86:27:54:dc:2b:79:bc:db:ba:45:d2:
0e:f9:d0:6c:22:6c:f2:44:02:98:f8:ca:b0:ae:82:
68:4b:25:76:78:fe:8a:e3:30:c9:20:d8:3c:48:aa:
0b:3d:a8:fa:bb:00:ff:a2:d9:9b:59:b0:a6:82:dd:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F3:31:01:66:F0:59:23:7F:69:79:47:03:FB:C9:DE:36:10:9C:39
X509v3 Authority Key Identifier:
keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:da:7b:b0:44:3f:4d:da:52:86:3b:23:ec:d9:d1:bb:03:40:
50:0f:61:df:44:17:a7:e9:20:f6:3e:be:1d:ac:bd:1a:a3:b1:
18:3c:1a:59:a7:91:26:2d:e5:ff:17:da:1e:be:3d:9e:dc:66:
ba:dc:93:74:94:77:32:05:4d:91:50:bd:56:3c:d6:f1:70:c0:
c7:41:43:99:fd:19:26:ba:b2:41:59:a6:d1:b0:70:1b:de:75:
ba:f0:55:f8:d8:98:8e:90:68:fa:8d:c8:f7:1a:10:ac:e2:69:
ce:e6:d1:a2:20:3b:73:63:bd:ab:e1:dc:64:10:a7:1e:b8:6f:
1a:83:89:a2:b0:e0:bc:65:fc:1f:10:67:b6:15:4a:69:a3:3f:
5b:57:5a:b0:73:09:97:02:9e:60:28:4f:e1:43:49:12:e6:6b:
9c:ee:70:90:f1:3e:7c:46:76:e9:f2:97:5a:17:69:03:bf:5b:
79:c7:1d:e7:13:08:40:b1:32:c7:60:d8:95:2f:fc:87:a1:36:
d5:4e:88:d6:8c:0d:e7:f9:0d:ce:aa:c1:6c:d9:32:1e:54:06:
ee:b6:9b:82:4a:fd:f9:e0:c5:ec:05:54:c0:c6:37:4c:0a:b5:
6a:e9:5f:4b:2b:42:31:a2:b3:60:71:38:5f:8f:11:11:f9:95:
fe:cf:37:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:21:55 2026 by rpki-client