Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
File: DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft (raw, json)
Hash identifier: BNX3pGqW2DeLHc+Ti9htS5bzcbmkcmEDXsNTyv2PhXw=
Subject key identifier: 2D:8C:BE:DB:89:91:A6:AC:7F:23:DC:65:A3:FE:FB:0D:2A:B6:7A:6A
Authority key identifier: 0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
Certificate issuer: /CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Certificate serial: 01A0D7CC3C82CC3FC53A32BC145E459A8783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
Manifest number: 026A
Signing time: Fri 25 Sep 2026 09:01:21 +0000
Manifest this update: Fri 25 Sep 2026 09:01:21 +0000
Manifest next update: Sat 26 Sep 2026 09:01:21 +0000
Files and hashes: 1: Atp7ou_dWLqF9yrUFBSaGu8i1NQ.roa (hash: iX6v9+WjPW25JV4dSQdrR9Ylqr6/LIAKembF0Rx+4SM=)
2: DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl (hash: NSD8imRyy4XwPk8VcBpF2jcoQsE2foJI5SQg230hIDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:3c:82:cc:3f:c5:3a:32:bc:14:5e:45:9a:87:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Validity
Not Before: Sep 25 09:01:21 2026 GMT
Not After : Sep 26 09:01:21 2026 GMT
Subject: CN=2d8cbedb8991a6ac7f23dc65a3fefb0d2ab67a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:3a:32:8e:ed:c4:07:31:a6:e8:5b:64:c4:
e1:95:ad:0b:e4:df:09:63:81:a7:e3:48:5e:b0:96:
66:7a:5f:d8:85:d8:4c:2e:62:0a:a9:e4:e4:bf:85:
be:8e:bd:80:10:56:73:16:be:b6:75:e8:a6:97:1b:
c3:96:44:d7:4b:74:e3:26:fd:90:be:f5:a8:2a:6b:
07:c2:25:62:b4:37:09:66:f3:04:5e:12:37:b6:fa:
8e:59:98:51:a9:d9:ef:6e:fa:d9:cf:f1:41:6f:90:
83:7e:4f:b2:91:65:4b:b2:6a:f5:b0:25:db:96:d8:
62:69:17:0a:bc:8c:76:19:91:58:8a:c8:f3:88:54:
fc:ee:5a:f0:8d:da:3c:0c:71:14:ce:1c:2f:a7:bb:
2a:a7:9c:ac:72:f0:60:4d:81:38:be:1b:51:ea:76:
3e:77:04:b7:b6:de:b1:fa:07:30:c9:4b:f0:37:c3:
36:68:f7:bd:b0:40:cd:55:22:4a:97:b0:32:ce:03:
fd:a9:bc:d0:b1:36:5f:8e:3d:4a:2e:1a:f0:f4:5d:
b1:95:b9:4a:15:ea:e6:40:59:3b:33:06:e0:29:34:
f8:16:47:ea:7e:7b:4c:62:84:71:61:f6:8c:61:f2:
d8:18:60:3c:02:5a:e3:d9:70:7b:69:fe:61:10:33:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8C:BE:DB:89:91:A6:AC:7F:23:DC:65:A3:FE:FB:0D:2A:B6:7A:6A
X509v3 Authority Key Identifier:
keyid:0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ae:a5:7a:e5:90:27:38:e4:20:13:e2:ea:53:d2:70:b9:7d:
80:31:05:a9:0c:c9:96:ff:f0:36:bf:6b:4f:74:10:95:3e:eb:
06:4f:91:ca:58:e1:10:ea:4c:7e:37:7a:97:56:6d:6e:ff:71:
3b:0b:98:b8:7a:7a:b5:54:dd:ea:9f:ab:4c:61:f3:0d:93:f7:
b0:1d:e2:b7:38:76:00:a9:b2:16:ec:26:ab:4d:61:1b:d2:7c:
30:cb:ea:9f:ad:2a:30:8e:59:b0:04:ac:6b:0c:99:06:bf:94:
d1:4e:79:d5:65:a8:7c:a8:8b:bc:9b:d5:8d:f7:e3:57:d1:99:
68:70:9f:04:eb:87:ca:7d:13:0e:56:e9:89:c4:b7:76:7e:95:
49:57:5f:11:92:47:7b:5f:10:a6:af:b8:a0:f5:1a:f9:05:7e:
f0:60:34:f4:4b:e9:ec:c8:52:e3:18:12:bf:c7:76:56:7b:42:
79:4f:c4:09:d5:11:a4:c6:fa:bf:0e:48:4a:54:29:0a:0a:05:
9c:a0:3c:5e:f2:23:94:98:69:c9:6f:2f:b5:61:c1:b3:b4:eb:
ba:f0:1a:27:f2:c5:85:64:05:57:7e:0d:2e:81:96:01:8a:3c:
20:ef:e7:7b:a4:20:45:b9:09:34:25:25:81:ea:79:2b:16:e4:
d2:c2:cd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:08:51 2026 by rpki-client