Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier: daKyEH3ykaP0EKu4Cz80OC2CAAIvoK08B8Dr8ECsG/s=
Subject key identifier: 39:07:86:E7:8D:55:A9:C8:D6:55:44:70:58:C4:AA:52:8C:F2:D2:CE
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 01A0CA10370F67D4FD2FC9561180F66244EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number: 091B
Signing time: Tue 22 Sep 2026 17:00:55 +0000
Manifest this update: Tue 22 Sep 2026 17:00:55 +0000
Manifest next update: Wed 23 Sep 2026 17:00:55 +0000
Files and hashes: 1: 1ULsjrhU_Mgs_8Mvd-oE1b7ANaE.roa (hash: BPqaZcuEdD+lQrMI+iPU/GW6APEbwg38yW1mZjGwXr8=)
2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: uHuUEmdQqz/qEYWPKP7t6E9RJgVwQddHQIG5rs5YUTU=)
3: pXo0ZUaV-y6EDCcUoSCUhqpPURU.roa (hash: EuVKLvC6yGpoLeqj+M0pu9788Rfc943eOWrQgVLBCHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:10:37:0f:67:d4:fd:2f:c9:56:11:80:f6:62:44:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: Sep 22 17:00:55 2026 GMT
Not After : Sep 23 17:00:55 2026 GMT
Subject: CN=390786e78d55a9c8d655447058c4aa528cf2d2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4a:c1:aa:dc:24:22:cb:51:4d:43:34:3c:52:
75:77:7b:9d:67:e7:d0:69:59:09:44:c6:8d:6b:ee:
d8:13:99:48:ed:4b:8a:a7:35:2e:92:9c:f7:c2:36:
65:25:ea:4e:52:8f:07:88:9c:72:bc:9a:0d:7d:74:
49:fa:30:64:8a:bb:ff:27:bb:47:38:68:08:55:bb:
b4:ff:d0:3a:7b:84:13:38:12:d6:1b:53:d6:e5:99:
dd:56:5e:32:df:9c:9c:3b:62:d9:74:cf:63:8d:67:
8b:39:80:9f:9a:cb:f7:30:d1:80:da:84:19:24:12:
b7:1e:52:58:25:2a:61:93:20:be:92:81:61:15:92:
fe:56:85:81:d4:eb:55:94:8d:6d:9a:1d:11:08:8a:
72:88:09:83:34:76:b4:d5:d1:66:f4:b8:91:47:07:
4a:50:17:88:01:9a:d4:8f:3d:e2:78:41:c0:a3:98:
4c:50:cc:c9:79:23:58:ce:b5:23:61:df:81:69:91:
95:27:68:59:88:c7:ed:69:7a:4e:a3:81:76:a9:66:
ac:29:54:f1:88:2a:21:c7:ac:8c:5b:f8:58:ff:69:
fc:c9:22:cd:0b:e6:76:c0:5d:86:05:0b:0c:76:9b:
3c:e3:33:b6:5e:8f:e0:0b:df:84:ce:4d:0f:42:f5:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:07:86:E7:8D:55:A9:C8:D6:55:44:70:58:C4:AA:52:8C:F2:D2:CE
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2b:d5:68:a3:78:17:57:05:f6:4a:41:4f:1d:63:32:b0:0c:
8f:f7:10:fa:7c:7e:f3:00:0a:d0:1a:65:ae:3d:2e:f8:fb:10:
85:f0:10:49:55:b1:cd:4c:07:38:9e:69:ac:00:02:b7:4e:ee:
d4:b5:7d:99:fd:9f:3b:2d:8d:28:80:54:7c:1e:16:95:66:b1:
95:6a:0e:55:d0:03:7e:0f:5c:1c:21:5a:0b:1d:03:f4:99:01:
dd:1f:f6:bc:e8:15:8a:19:1e:cb:6c:8c:f4:21:cd:a9:3e:b8:
c5:5a:77:80:cf:21:34:e2:66:24:a7:87:46:68:ec:21:80:a8:
e5:0e:3c:c2:58:93:27:65:55:bf:f2:01:56:44:63:90:2e:38:
81:b8:9d:b8:81:05:ec:80:b4:62:24:bc:f1:09:c9:85:01:d5:
04:9b:b9:3b:67:c9:47:19:e6:ee:c0:f6:9d:b5:63:85:b3:cd:
f9:38:07:6d:6b:3a:fe:d4:7c:23:f8:f8:f9:ad:97:20:39:13:
4a:c4:1b:4c:26:c7:52:55:61:a5:9b:bd:79:47:df:ff:55:97:
85:c9:1d:18:7f:37:6e:df:73:46:f0:a7:0e:8f:a0:b0:1f:0a:
f8:68:22:05:94:e2:bd:22:9b:dd:aa:96:d5:3d:93:fb:4e:92:
b0:c7:a7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:59:00 2026 by rpki-client