Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
File: 20bM9fil_kT0v9m6ZrpRJG2osYQ.mft (raw, json)
Hash identifier: hQYnZYGDjA2y8LjTl8BvJa6fuTsQBJLbfeqVqVqaHqg=
Subject key identifier: 44:F8:3F:4A:7F:2D:00:59:5D:FB:4C:9D:27:5F:37:4A:3B:14:2D:5B
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 01A0C8598CD1C1F195DD81349D5A434842BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
Manifest number: 182C
Signing time: Tue 22 Sep 2026 09:01:46 +0000
Manifest this update: Tue 22 Sep 2026 09:01:46 +0000
Manifest next update: Wed 23 Sep 2026 09:01:46 +0000
Files and hashes: 1: 20bM9fil_kT0v9m6ZrpRJG2osYQ.crl (hash: dm3/jwFcgnl0hteQDYkyG8o+zJRF2Nt65X7fPoMZOoI=)
2: 7kzK7-E42Pa8w63nDviF_cLjzRw.roa (hash: UZPrhRmZER1+q3579qQlJmn/mR5/oV526WWY7+wNVgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:8c:d1:c1:f1:95:dd:81:34:9d:5a:43:48:42:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: Sep 22 09:01:46 2026 GMT
Not After : Sep 23 09:01:46 2026 GMT
Subject: CN=44f83f4a7f2d00595dfb4c9d275f374a3b142d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:d5:ad:e9:8c:f4:37:9e:b9:ae:42:25:c1:
9f:ca:cd:ee:d0:4f:5e:8a:d2:8e:6b:9d:fb:3a:ef:
44:d7:8d:86:60:ce:e5:59:39:12:8a:a8:ef:89:f2:
bb:84:7d:2e:d4:4b:93:63:ed:2c:4e:61:ee:fe:cc:
95:bc:3e:96:78:66:70:38:38:78:a1:5d:6e:1b:cf:
39:b2:43:e7:9b:5b:25:1a:cd:ed:57:bc:1e:0f:81:
f7:8b:c7:05:4c:3d:c3:53:be:37:ad:8b:92:53:ee:
1e:60:ce:ca:60:cd:e8:63:ba:25:a2:c9:29:6e:d7:
32:df:ad:a6:e9:6c:d0:b0:1f:5a:00:a2:8c:46:97:
a0:84:c7:40:40:52:2a:df:cb:73:a3:e3:a3:81:dd:
7b:93:c1:c2:e4:8f:43:da:c3:56:98:04:84:d2:74:
e9:30:80:c6:00:a9:fa:ff:2b:94:83:35:43:99:06:
68:3b:28:79:82:d6:2d:4a:20:e6:b8:f8:70:2b:86:
2b:b3:fa:b2:6d:ef:7e:91:46:e8:17:a1:86:fe:5e:
23:2a:59:f4:47:4e:f1:2f:03:5b:0f:f6:6f:98:b3:
14:55:2c:2e:27:56:e7:3d:6f:1a:4b:9b:45:8d:ab:
22:26:52:7a:f4:64:1c:02:ed:b5:ee:8a:c4:a7:2c:
ed:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F8:3F:4A:7F:2D:00:59:5D:FB:4C:9D:27:5F:37:4A:3B:14:2D:5B
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ce:a6:d7:88:d1:0d:e3:21:08:ea:bc:d6:cf:c0:3e:ae:91:
14:6d:7b:1e:c1:fd:d3:cb:9d:27:f1:51:bb:77:e3:de:85:35:
6f:11:9f:6a:80:23:1c:b0:d0:c6:0d:fd:1d:e7:b8:8b:fa:62:
66:19:8c:b1:7f:be:a2:c2:14:ec:54:69:35:4d:20:65:fa:b7:
c3:50:62:83:3c:84:a6:81:8f:07:7f:a4:24:78:31:84:25:e1:
1a:89:cf:14:fc:47:38:d9:35:16:9f:23:93:c6:9b:68:54:b8:
a8:77:dc:55:34:f8:04:13:c2:ef:1d:5d:df:10:26:ad:58:81:
6c:d5:63:65:81:81:d1:54:a3:ba:36:a1:65:bb:0e:55:9c:2c:
81:38:e2:3f:73:7d:fb:ab:fc:1e:6e:6e:79:95:2d:31:35:ba:
7e:e1:47:ea:69:36:23:fa:a5:6e:21:a7:e0:7f:95:61:ad:c4:
a4:30:28:e2:24:ea:23:ac:60:83:a5:bb:6d:d5:de:64:2c:01:
d1:88:ab:55:78:d5:f9:a2:c9:45:ab:f7:9f:d5:46:64:e0:4e:
98:31:87:73:a1:a0:ce:84:9c:26:c7:ea:81:1c:27:f3:06:d8:
3c:15:66:4d:65:20:aa:cb:4b:a1:35:8c:bd:9c:a5:48:e8:b2:
73:c2:95:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:03:07 2026 by rpki-client