Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft
File: DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft (raw, json)
Hash identifier: laMWA/wR/ga2X7+UHR5CQMR5eyzqPZrH1nbDmCXiCR8=
Subject key identifier: 16:08:B8:FA:37:9E:56:12:1A:44:21:C3:C2:F8:71:0D:81:99:33:6D
Authority key identifier: 0E:85:FD:3C:9F:95:58:B2:18:02:2F:F4:09:FC:55:4F:AE:E7:90:90
Certificate issuer: /CN=0e85fd3c9f9558b218022ff409fc554faee79090
Certificate serial: 01A0C88FCDEA5286DF22A53DC467ED1A46C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoX9PJ-VWLIYAi_0CfxVT67nkJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft
Manifest number: 1A64
Signing time: Tue 22 Sep 2026 10:01:02 +0000
Manifest this update: Tue 22 Sep 2026 10:01:02 +0000
Manifest next update: Wed 23 Sep 2026 10:01:02 +0000
Files and hashes: 1: DoX9PJ-VWLIYAi_0CfxVT67nkJA.crl (hash: igbqIOkhSVVe5Qd0VJ7RsZHMB+XjMyVAci1Hn/1UAMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoX9PJ-VWLIYAi_0CfxVT67nkJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:cd:ea:52:86:df:22:a5:3d:c4:67:ed:1a:46:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e85fd3c9f9558b218022ff409fc554faee79090
Validity
Not Before: Sep 22 10:01:02 2026 GMT
Not After : Sep 23 10:01:02 2026 GMT
Subject: CN=1608b8fa379e56121a4421c3c2f8710d8199336d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:39:d5:80:fd:92:20:49:68:61:da:ca:e4:64:
05:84:30:e5:11:3c:f6:e7:ba:e3:be:2f:6d:6e:58:
f7:5b:a2:af:dc:0b:01:f6:e6:fa:82:a5:ec:42:6e:
fe:c3:3b:45:9c:2e:8b:30:6c:c3:20:5b:3b:be:b4:
6c:b0:23:4b:96:54:2b:57:3c:ae:97:47:d1:70:13:
01:72:5e:50:e6:e0:92:1c:6a:26:81:a0:fa:dd:14:
f2:41:e1:49:87:49:ad:51:dd:21:16:c6:0f:b8:92:
d6:ed:80:5e:c2:eb:97:cd:32:bc:2e:b9:f2:b6:4a:
41:d1:57:29:5c:95:92:10:ab:1b:7d:97:43:dd:2a:
9d:05:e6:26:fb:4a:b8:44:53:e2:22:6f:98:c5:2f:
08:df:29:a7:33:fc:af:41:81:16:6a:00:0b:35:85:
fd:0d:1e:dc:3c:90:db:7f:e7:b5:9c:6b:22:5a:ed:
97:59:70:f1:ae:50:6e:24:8f:6f:16:c2:16:84:a4:
8f:92:58:6e:35:b9:f0:a5:f7:fd:30:d9:23:29:a7:
e3:f9:7c:b4:44:58:08:db:f8:80:c3:11:3c:fa:32:
86:a4:b4:5d:7b:80:b3:88:e6:0a:0e:23:48:74:a2:
56:8d:27:4b:28:53:2c:e2:d4:74:44:36:ab:b9:14:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:08:B8:FA:37:9E:56:12:1A:44:21:C3:C2:F8:71:0D:81:99:33:6D
X509v3 Authority Key Identifier:
keyid:0E:85:FD:3C:9F:95:58:B2:18:02:2F:F4:09:FC:55:4F:AE:E7:90:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoX9PJ-VWLIYAi_0CfxVT67nkJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:79:be:76:f7:01:93:d3:fd:13:2b:18:52:68:97:f4:bb:66:
88:42:85:8c:0d:05:98:5c:97:fc:ce:84:ff:ea:1e:70:a6:2a:
6b:99:da:b4:f4:06:87:bd:ea:4b:22:f6:c8:f5:7e:bb:fd:de:
cf:08:bd:f2:ea:fd:f2:4f:d0:cb:4a:29:45:90:33:d8:f9:54:
19:d8:18:e5:85:0a:48:38:7d:33:7f:51:56:02:01:fc:8e:a8:
bd:5a:34:4e:95:c6:cc:64:9b:67:25:6b:96:08:66:1a:6f:71:
03:b4:03:f3:03:29:82:e4:15:f6:e2:3d:75:1b:a9:3b:cd:c5:
c8:ec:97:c0:73:f2:91:60:f2:e3:8c:20:9f:43:75:7d:a3:89:
43:d8:52:5d:cb:0f:c6:0e:f7:55:7d:34:e2:3a:bf:00:77:24:
ee:0a:2a:4d:c3:62:3a:b0:63:7f:72:d5:7b:5e:fb:09:8b:1d:
b1:70:76:66:66:bd:0a:b6:5f:2e:2e:37:10:59:8d:15:4a:33:
51:34:3f:e4:29:8b:63:a7:e6:b8:21:c7:50:c4:a1:b0:45:d5:
8f:de:91:cf:60:b7:2a:36:f1:45:1a:9b:8c:7e:f6:e6:f3:23:
f7:29:71:06:dc:03:a7:06:44:0b:b0:7a:9b:fc:58:38:01:0d:
2c:76:f2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:16:39 2026 by rpki-client