Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft
File: r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft (raw, json)
Hash identifier: 61k/vgMEVQcLdi6+Qg6hKqNOYb0bCYanQ+EMYklYo/Q=
Subject key identifier: 16:E3:09:58:40:C4:5F:C7:4C:D4:39:D1:FD:48:12:DF:4C:FA:D9:97
Authority key identifier: AF:DE:C6:E1:96:38:FE:AE:5C:24:BA:C3:39:2A:AD:D2:9D:09:A1:0B
Certificate issuer: /CN=afdec6e19638feae5c24bac3392aadd29d09a10b
Certificate serial: 01A0BEB0C4DDED9B4D3FBF0D136636271890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r97G4ZY4_q5cJLrDOSqt0p0JoQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:00:50 +0000
Manifest this update: Sun 20 Sep 2026 12:00:50 +0000
Manifest next update: Mon 21 Sep 2026 12:00:50 +0000
Files and hashes: 1: d0YkCPdnCyaNIksA2mKdrGoNCqk.asa (hash: zX6hSb7dbU0ZGqZxmFYD03Uuu0hUFOMksbh8I/RIpYE=)
2: r97G4ZY4_q5cJLrDOSqt0p0JoQs.crl (hash: 1Wz+hAei1jb6KFA0XpXdF3Ia/EoC/bal3F5wfnE76CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r97G4ZY4_q5cJLrDOSqt0p0JoQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:c4:dd:ed:9b:4d:3f:bf:0d:13:66:36:27:18:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdec6e19638feae5c24bac3392aadd29d09a10b
Validity
Not Before: Sep 20 12:00:50 2026 GMT
Not After : Sep 21 12:00:50 2026 GMT
Subject: CN=16e3095840c45fc74cd439d1fd4812df4cfad997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4c:0f:95:52:3b:73:47:4f:fd:cc:e8:45:db:
fd:f4:1c:b4:49:f4:38:b9:f8:3c:92:e9:be:03:08:
b7:b7:7f:67:9a:9b:bd:2a:52:75:e7:17:c7:db:4d:
37:97:37:4c:22:ed:7a:1f:e8:32:3f:1c:da:80:42:
2d:36:29:53:05:31:65:58:b0:90:5a:3a:a7:a5:a4:
da:fe:92:d1:27:50:47:3e:d7:d6:42:9e:1d:cf:ac:
0e:15:48:33:82:1a:d7:0a:ff:54:bc:bb:3c:fc:7e:
55:77:6b:80:80:14:90:79:55:5a:a2:1d:c2:21:0d:
87:c5:56:52:8c:0c:f0:8a:d1:8d:66:71:5b:08:16:
8d:b5:c0:ab:b0:e8:d7:22:c0:2f:09:d5:7a:99:87:
b0:8b:ca:8c:71:02:76:d1:96:69:d0:53:2c:f1:93:
ba:3d:c4:9c:92:fa:f8:f0:f4:6d:c7:52:8a:01:00:
46:57:41:f2:9a:65:3a:ea:26:75:02:e5:9f:be:42:
7a:ca:d0:bc:c1:83:97:2f:c3:8c:12:81:40:72:eb:
20:b1:91:87:5b:30:72:27:90:9a:4e:8a:82:f4:b5:
c5:b4:c6:e5:af:a9:35:41:e2:e4:0c:ca:f0:0e:51:
e7:91:16:88:91:eb:99:7a:0b:eb:89:47:11:88:65:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E3:09:58:40:C4:5F:C7:4C:D4:39:D1:FD:48:12:DF:4C:FA:D9:97
X509v3 Authority Key Identifier:
keyid:AF:DE:C6:E1:96:38:FE:AE:5C:24:BA:C3:39:2A:AD:D2:9D:09:A1:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r97G4ZY4_q5cJLrDOSqt0p0JoQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/r97G4ZY4_q5cJLrDOSqt0p0JoQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fb:3d:f9:7b:3e:1d:ef:5d:42:29:ce:99:15:5b:bb:10:1b:
f6:a4:ba:37:0f:92:92:d4:d3:b8:66:c2:ed:d3:cf:78:25:f2:
93:c8:4f:75:65:90:20:f9:0b:50:aa:7e:87:89:3a:b3:95:f4:
a0:2f:a3:ee:47:3d:68:bd:ec:68:6e:40:a9:17:de:61:2b:f8:
da:7f:e1:81:e7:34:a7:53:7b:50:5e:85:e0:4e:be:9b:c2:02:
79:f7:b2:fe:08:d2:11:0b:11:fa:6d:d4:e1:db:74:75:52:b0:
14:ad:2e:c3:3c:d2:1f:33:ec:05:d7:29:8a:66:87:bf:54:a5:
e5:8c:d2:42:45:8a:7b:ac:d2:ad:a3:4b:27:9d:af:14:86:03:
28:35:56:ce:f8:02:3f:7f:33:b6:e3:1b:18:00:c0:c5:75:13:
19:46:bd:85:2d:be:bf:68:70:c1:8a:2b:4f:ef:4a:8b:56:80:
3b:47:83:2b:3b:a2:61:af:4f:3a:a3:59:b1:26:64:58:c8:8b:
81:72:59:8c:65:e9:8f:85:81:e5:91:d6:ee:46:a2:5a:16:0f:
a6:bc:57:0c:72:b9:32:6f:8e:3e:10:69:ca:ba:27:2e:73:2c:
49:4e:00:8b:e1:ce:6a:a8:be:1a:db:bb:0f:a0:e2:8e:99:e0:
d3:30:54:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:48:36 2026 by rpki-client