Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File: d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier: zE3yrf1+g2IUNIRKr8I9oIa5m+DUEkcLBoUbsx5yJzg=
Subject key identifier: 62:4B:45:97:CA:92:F0:31:79:65:17:6B:9C:69:76:50:E9:38:9B:F5
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial: 01A10D39ACDBC90DC95A6CA57F56F457FEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number: 1A8C
Signing time: Mon 05 Oct 2026 18:00:45 +0000
Manifest this update: Mon 05 Oct 2026 18:00:45 +0000
Manifest next update: Tue 06 Oct 2026 18:00:45 +0000
Files and hashes: 1: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: 8S4qZ55WUZXvlTo0jBShgAJnyXA6KD2UEsmeapBWEwM=)
2: r7X848yOsMLAWCps4RFGUNqeVps.roa (hash: xew4extflEyzwcFzFw7/R0LSDzXNfuSjZMgYv5CBRTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:39:ac:db:c9:0d:c9:5a:6c:a5:7f:56:f4:57:fe:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Validity
Not Before: Oct 5 18:00:45 2026 GMT
Not After : Oct 6 18:00:45 2026 GMT
Subject: CN=624b4597ca92f0317965176b9c697650e9389bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:86:bd:42:7a:79:da:77:34:e4:ba:63:4d:
ad:37:da:aa:bf:91:5a:cb:45:ee:51:fa:2f:fe:80:
49:93:df:91:7d:67:eb:a5:7a:f9:b2:4d:17:c1:da:
88:ac:03:65:cb:8c:fd:48:43:d1:76:10:cc:31:99:
0c:d9:62:e8:fc:a3:6a:30:92:3f:79:9f:39:ed:70:
60:7a:e2:d3:73:90:09:22:d1:97:a2:50:c6:a5:e8:
48:bc:c1:c5:12:78:f0:4d:5b:6b:19:49:ae:11:42:
b3:82:8b:45:9f:a2:56:39:19:f3:31:14:df:4a:27:
b3:24:50:d7:71:c5:40:7b:70:aa:1e:20:87:7f:d5:
82:08:66:66:73:6e:aa:08:9e:ee:f6:a8:a3:74:83:
41:0b:fa:5c:eb:63:d5:38:a2:30:40:6d:68:51:ff:
9a:ff:c6:3d:04:73:c9:65:1d:75:9b:e9:d2:7f:75:
3c:4e:55:eb:b5:3c:f1:53:10:b0:ed:f7:4e:5d:00:
43:cb:42:16:85:a0:da:a0:20:97:bc:95:0b:a6:70:
ce:73:dd:7f:37:8d:c4:66:8a:f9:58:b3:61:a3:6d:
8e:1a:d5:28:8b:c8:6c:a4:1e:d1:7b:4c:59:81:df:
bf:9c:49:dc:d0:38:ad:88:f1:05:c2:af:63:de:10:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4B:45:97:CA:92:F0:31:79:65:17:6B:9C:69:76:50:E9:38:9B:F5
X509v3 Authority Key Identifier:
keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e1:d7:b5:6f:a0:e8:24:77:8f:b6:2b:03:84:3b:b3:64:5f:
f6:2b:03:55:69:69:f6:cb:7e:cc:c0:6f:8b:b1:5a:c2:ba:3c:
87:8b:e1:08:97:e3:7a:52:34:20:b1:85:1b:7d:85:ad:a0:51:
0e:75:07:4d:00:ac:4c:28:b5:d6:ac:61:fc:f6:ff:63:d9:97:
06:b7:11:09:bd:ee:f4:c7:ba:61:1d:75:07:cb:da:f7:77:b8:
9b:4d:49:26:91:cd:c6:ca:85:55:39:f7:a3:1c:41:84:25:c1:
d0:7e:07:9a:a5:f2:67:54:85:68:f9:18:f0:ca:4a:48:b0:d9:
49:18:28:a4:1c:8f:1c:da:8f:d8:72:b4:50:b5:9a:9f:8c:33:
03:1c:41:b2:62:58:c7:63:54:cc:94:67:e3:3d:7b:f1:c6:e2:
16:bd:b4:eb:64:b7:00:ab:90:4b:cb:0e:75:ad:38:c0:0b:7f:
0b:d4:65:49:9e:d4:4b:b9:2c:50:00:d5:91:73:78:1e:32:e2:
c5:a7:1f:77:5a:1b:11:80:18:39:15:09:4f:5a:c1:79:d2:7f:
3e:53:99:c4:cb:6f:32:1e:d1:1d:69:48:75:c6:6d:5e:f6:75:
63:45:1f:8e:69:d7:5f:21:a6:6a:7a:43:1b:7f:bc:03:d3:a3:
a4:dc:60:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 23:18:51 2026 by rpki-client