Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File: DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier: WrYReYwXZc2/8vi4PVgHKrXjylxxF7Qk5cQEpmoEGkQ=
Subject key identifier: 2E:6A:EE:8F:03:89:92:53:AE:41:A8:7A:C9:1F:1F:2A:1E:02:55:26
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer: /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial: 01A11A87A9E42341D731EEC0533586B8103A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number: 1A93
Signing time: Thu 08 Oct 2026 08:01:00 +0000
Manifest this update: Thu 08 Oct 2026 08:01:00 +0000
Manifest next update: Fri 09 Oct 2026 08:01:00 +0000
Files and hashes: 1: 4qZtNptb8ER3904DdA6MFe8pZsU.roa (hash: Lxa0NTdMnJxLEjdaVFMPjQXrKW0qd4O0NLrjMIPI/ME=)
2: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: 48M1q5mrp3O/O16mbjVb7W0i5aa87Ee0AILGhvfdMVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:87:a9:e4:23:41:d7:31:ee:c0:53:35:86:b8:10:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Validity
Not Before: Oct 8 08:01:00 2026 GMT
Not After : Oct 9 08:01:00 2026 GMT
Subject: CN=2e6aee8f03899253ae41a87ac91f1f2a1e025526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:52:58:b1:fc:7b:da:78:d9:da:fe:17:a7:57:
8c:83:ef:e2:ad:ac:a7:ac:82:2f:5b:44:14:42:ed:
1d:db:26:ed:5e:7f:cf:88:04:90:4a:79:62:b5:05:
c1:59:d8:9b:5f:24:8f:77:bd:62:cf:81:1f:88:fd:
80:6b:1f:23:7c:bd:20:6d:7a:46:cd:3b:38:2b:33:
4f:2f:dc:fd:16:48:9c:71:8e:42:97:7b:4c:e0:7f:
a4:65:ea:ec:70:ce:68:2e:2e:f2:a4:29:48:81:b2:
a7:f6:1c:cb:7b:e8:dd:51:83:0d:5a:30:38:07:d8:
b9:99:91:07:64:fe:8b:9b:8b:03:78:f7:0b:b5:5f:
41:da:04:35:45:5a:0a:41:83:fb:72:6e:64:29:54:
83:05:d2:dd:0e:19:87:8d:f3:da:48:4a:53:6a:91:
24:61:f4:42:11:12:55:57:60:21:10:d4:e2:98:83:
b5:03:5b:e3:1f:df:1f:7a:93:19:39:e5:bb:18:0b:
d4:02:3a:a0:e3:05:72:3a:82:8a:93:e3:c4:20:00:
19:bc:f4:28:f4:8b:52:60:ad:70:99:35:dd:d5:36:
5c:3d:d7:0e:77:06:28:78:71:bf:1e:b6:e6:2d:25:
1c:4c:3e:2b:76:56:6f:6d:b9:19:f5:ec:a4:00:d5:
45:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6A:EE:8F:03:89:92:53:AE:41:A8:7A:C9:1F:1F:2A:1E:02:55:26
X509v3 Authority Key Identifier:
keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:40:ed:03:1a:e1:35:2c:6c:b0:e8:1b:fe:a9:b1:11:68:15:
f4:9a:b2:f1:22:68:fd:50:9c:2e:d5:dc:1d:db:a0:f0:83:e0:
79:00:7a:27:a9:b4:1f:7e:49:e6:23:20:12:69:2e:c4:fb:9c:
34:f9:db:b6:92:bf:8a:a3:5f:6e:86:f6:68:36:f9:4d:02:9e:
2e:17:04:e9:59:6c:33:74:28:50:bc:36:26:70:d0:5f:1f:ec:
97:d7:56:4a:34:c1:e8:1f:23:ca:29:50:8b:90:a4:9d:a5:e2:
d8:c7:f9:71:96:e2:63:ca:c4:90:fc:b8:98:6e:27:66:b8:4e:
bf:c4:7b:23:b2:d9:cb:86:cd:a5:04:74:d6:96:73:42:a2:2d:
b2:ca:86:2e:b4:f6:f5:6a:c6:13:c1:f0:b6:17:0d:ec:b5:b8:
3a:74:33:ba:3e:4a:4a:dd:08:34:fb:a1:54:ff:8d:d0:9d:61:
e9:4e:ea:b3:a2:83:8d:01:04:d7:cd:ec:69:72:22:de:70:f8:
e5:0c:13:dc:68:27:7e:99:51:41:14:47:e1:6f:a9:b5:e0:31:
40:aa:6b:24:e3:69:a4:ce:9b:92:d1:8f:46:52:a0:d9:c3:3a:
fe:34:03:f9:67:84:2c:15:cc:11:14:d3:10:c0:3d:88:b1:d4:
18:c6:bc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:51:30 2026 by rpki-client