Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File: d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier: jAGu2DHy4s9dR7aFC79B7BDu9FozLcYCvP6q7+k8hv4=
Subject key identifier: 6B:1C:8E:FA:E5:77:18:AB:EB:C2:EA:F6:E2:FC:E3:A7:27:C1:C0:5D
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer: /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial: 01A0EEC1E273587C9F5798B4189B3AE5BB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number: 0F0C
Signing time: Tue 29 Sep 2026 20:01:18 +0000
Manifest this update: Tue 29 Sep 2026 20:01:18 +0000
Manifest next update: Wed 30 Sep 2026 20:01:18 +0000
Files and hashes: 1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: RyL23y5zMyXe5Bj7Wtq9Sl/LNEcPJmrmF6/VLHMZmKU=)
2: p6qsa6svPJ0422i3SiO1EzgoFFQ.roa (hash: TXPP91hJYndsd1QK98Dq8mZrdcp6BkkwS6MxLqiQzbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:c1:e2:73:58:7c:9f:57:98:b4:18:9b:3a:e5:bb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Validity
Not Before: Sep 29 20:01:18 2026 GMT
Not After : Sep 30 20:01:18 2026 GMT
Subject: CN=6b1c8efae57718abebc2eaf6e2fce3a727c1c05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:9b:f3:c5:a7:9b:cc:2c:f5:98:73:b1:ba:
ae:8a:ee:bc:30:09:b6:3c:a5:52:8b:08:69:14:22:
36:1f:5d:6b:c8:86:ea:23:d9:77:ac:43:cf:95:fd:
ed:d7:00:9a:31:8a:48:f1:0a:5f:67:da:13:fb:05:
36:16:c1:cc:a2:7c:04:0d:d5:99:13:7a:60:d6:2d:
12:da:17:01:3c:f9:be:08:aa:55:b0:f0:88:a0:a8:
05:28:d4:10:c4:41:b1:a1:dd:c1:7f:36:6a:81:3c:
b6:87:26:74:07:0a:94:ec:e7:e1:f0:34:e0:a5:0d:
10:e8:53:38:a4:01:4f:25:3e:ca:86:e9:13:e5:af:
3c:95:50:a6:8e:e6:c3:35:f9:2e:af:00:46:06:27:
6c:81:39:12:60:9d:e8:29:3b:e0:74:77:b4:18:f3:
a8:92:94:98:66:e8:87:93:0c:2f:af:8a:fa:5f:04:
d9:55:24:43:7d:c0:48:97:16:3e:f9:4e:7b:a2:c3:
72:36:10:74:06:5f:54:48:ae:d1:73:4a:5f:f1:c2:
80:1e:78:68:49:89:56:43:b3:b3:fe:be:91:ee:55:
d6:d6:1d:33:90:5f:17:9c:03:60:2d:1b:9c:7e:6f:
dd:fa:cb:40:3a:a7:9b:01:3f:8e:a2:d2:b6:bd:43:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1C:8E:FA:E5:77:18:AB:EB:C2:EA:F6:E2:FC:E3:A7:27:C1:C0:5D
X509v3 Authority Key Identifier:
keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:be:6d:cb:08:6b:21:51:78:55:9b:ed:28:ab:f4:d6:e6:ba:
90:e2:62:18:d0:cd:9e:c6:2b:31:20:a7:ad:38:6c:4d:b9:00:
cf:4d:b8:a0:8f:2e:11:42:c3:9d:bd:39:1d:f3:ec:19:31:83:
c3:fc:6b:72:3a:e1:36:f6:e6:cc:7d:f7:2d:f3:a2:8c:45:9e:
39:c1:be:bf:c0:ad:c3:63:53:f9:0f:a3:1a:2c:c9:2e:b5:45:
33:04:89:10:ae:c3:3c:0c:0e:24:d1:57:03:ea:e9:c9:de:8a:
13:be:ac:2e:f6:48:f5:fe:68:47:27:f8:6f:28:5f:12:ab:80:
97:71:45:9c:0a:78:fd:6c:2a:03:02:57:43:27:17:c9:22:23:
0d:13:e4:32:e7:55:1a:b7:7c:25:f0:ba:62:f7:53:73:24:3f:
0a:6a:ba:8b:ad:bd:1b:92:9a:d2:63:b1:d5:95:0e:f3:4b:f0:
68:c1:19:92:38:85:7b:72:fe:39:1d:cb:50:93:b6:92:e1:93:
38:1b:06:ba:bd:97:60:cc:4d:65:1b:b4:ba:a0:68:e9:a3:f7:
40:46:de:0f:5b:e3:d5:94:97:f3:a5:30:80:62:11:4d:80:35:
5c:87:43:6f:75:f0:a6:94:d8:d5:b2:2e:31:95:5f:79:da:40:
89:6b:7e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:19:08 2026 by rpki-client