Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
File: 8457gT6aM4MKE7jBiDhMLcTHXJc.mft (raw, json)
Hash identifier: f9y4xqCqddDQ6mDZ/eIB92ee67ethR7eNnqsZhd4jhU=
Subject key identifier: D2:0A:05:F3:DB:53:82:25:70:20:65:1D:DE:84:09:2E:8E:EF:8B:E5
Authority key identifier: F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
Certificate issuer: /CN=f38e7b813e9a33830a13b8c188384c2dc4c75c97
Certificate serial: 01A0C09F906478664AC80C4C9816E50393FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
Manifest number: DD
Signing time: Sun 20 Sep 2026 21:01:17 +0000
Manifest this update: Sun 20 Sep 2026 21:01:17 +0000
Manifest next update: Mon 21 Sep 2026 21:01:17 +0000
Files and hashes: 1: 1lHC3eEb4JgrWUhgQdZGe237xNE.roa (hash: tiibMI6HO4qP8jmiKq9SAdjkuilfWtaVHKPxHUTz4wg=)
2: 8457gT6aM4MKE7jBiDhMLcTHXJc.crl (hash: 500B9nmwrRKdipa2BS/g7UkvJL6BBvE+/m4FdocNyIM=)
3: PYTmdV0F9SG-733WM6hd2UxmEKQ.roa (hash: C/kjeN97nB1/VJQ7m/rVNOnzP/hxeC+2PpOB/KvRfaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9f:90:64:78:66:4a:c8:0c:4c:98:16:e5:03:93:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38e7b813e9a33830a13b8c188384c2dc4c75c97
Validity
Not Before: Sep 20 21:01:17 2026 GMT
Not After : Sep 21 21:01:17 2026 GMT
Subject: CN=d20a05f3db5382257020651dde84092e8eef8be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:87:de:d6:bd:ef:88:4e:64:a3:dc:9b:06:
92:15:3b:79:73:b5:4e:f5:a3:1f:81:81:79:90:8d:
cd:c5:1e:bf:1b:bd:bf:e3:96:a6:a5:3c:f5:18:18:
66:70:fc:f7:3c:c2:0e:22:bf:56:ce:c8:a2:8c:96:
cf:f5:5a:18:cb:83:21:38:e1:62:88:01:bc:19:3f:
38:48:ab:dc:76:93:26:c8:f4:db:ac:24:6d:2a:44:
18:cc:38:12:0d:66:d0:54:76:63:00:bc:15:a0:1e:
d8:9e:88:1c:74:96:34:8c:5e:37:20:83:f8:c1:52:
95:57:9f:18:1e:1d:fb:dc:ad:3f:82:86:1c:1b:88:
06:02:91:49:43:39:3b:65:9e:fd:c0:60:a7:e9:2e:
97:d9:ad:98:aa:e9:3f:a1:8c:90:70:6d:5f:58:d5:
46:85:c7:80:05:07:84:7c:33:fc:44:75:df:49:63:
ae:93:97:3a:fa:56:03:5a:12:d6:b5:bf:c6:d7:a7:
02:70:91:62:a5:3b:48:1b:62:07:5d:e3:30:65:52:
e3:ea:65:4d:9d:d6:7b:f4:04:23:e8:37:92:bc:cd:
69:3a:aa:45:97:ba:f6:f2:9f:ff:64:e7:e5:ce:dd:
b8:d7:3c:1a:93:e3:ff:41:18:ba:ef:7f:44:17:41:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0A:05:F3:DB:53:82:25:70:20:65:1D:DE:84:09:2E:8E:EF:8B:E5
X509v3 Authority Key Identifier:
keyid:F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d9:4e:43:e3:3b:4a:98:a2:ba:b1:e4:b4:6d:f1:25:3b:b0:
5d:20:68:77:35:d4:b9:78:31:d2:36:f1:f1:95:c5:46:8a:b5:
1e:bf:51:50:4c:fd:10:44:04:8b:a8:09:c5:98:d1:2a:44:58:
c9:6d:44:04:a7:f4:49:c9:42:0f:14:e3:18:bc:7d:02:aa:a6:
d6:09:68:bf:e3:a2:64:29:07:eb:00:64:84:29:e5:3f:07:4c:
9e:69:56:79:92:26:bf:7e:ef:2a:2a:dc:23:d8:36:dc:cb:58:
8f:9d:10:46:58:e1:ba:e3:b0:fc:37:8b:57:eb:d8:da:d9:8b:
af:61:6a:fd:da:16:06:a7:5d:1b:c4:8c:99:b4:87:b0:9c:c1:
00:77:3e:e2:83:05:20:a5:a2:3a:c1:49:14:7f:49:bf:85:84:
17:1c:88:ad:0f:4e:7a:1d:be:38:9f:0e:f9:61:9b:d2:7b:6e:
11:e4:37:12:7b:31:e4:f6:58:95:4a:00:48:89:05:73:8f:b8:
b1:45:64:5e:92:73:35:b6:d9:a7:98:72:8d:d5:75:60:dc:59:
0f:1e:22:39:30:6a:58:b5:86:81:50:fb:1e:d1:69:bb:d2:cb:
4d:ec:12:aa:30:96:96:55:ba:5e:ab:d6:8b:20:20:d0:14:53:
1b:de:40:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:16:27 2026 by rpki-client