Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: neEUi6ujUPGaFj+Ff3O5iHld/olgYJyG2OPBAmEaFfA=
Subject key identifier: 67:10:A5:5D:77:A9:36:F9:49:E3:D6:B1:FE:DA:E9:BD:82:0D:B2:0F
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 01A0DD296DBF5DFD1D8EE1EDCF981DE00DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 0ADA
Signing time: Sat 26 Sep 2026 10:01:14 +0000
Manifest this update: Sat 26 Sep 2026 10:01:14 +0000
Manifest next update: Sun 27 Sep 2026 10:01:14 +0000
Files and hashes: 1: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: 6DaA/oYK1zVWzWUPEa57uXuutKmmOjBN8kkuQ6jCubA=)
2: bdFa7noc5JULgEIUUp2O_nnsfX8.roa (hash: oE4E3OOq0qDI/T3VHEtrFh4lpygnjYYLcPsEtbasbyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:6d:bf:5d:fd:1d:8e:e1:ed:cf:98:1d:e0:0d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Sep 26 10:01:14 2026 GMT
Not After : Sep 27 10:01:14 2026 GMT
Subject: CN=6710a55d77a936f949e3d6b1fedae9bd820db20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ec:5f:16:0e:a9:a9:68:be:b1:73:b8:29:38:
c2:13:b9:8e:0a:6e:d9:83:26:73:8e:87:c1:59:f9:
a5:5d:bc:6d:4e:a9:84:ea:39:16:dc:69:e3:57:40:
6b:22:67:0b:9b:8a:b5:53:58:80:17:11:63:65:ac:
65:3d:d1:87:f0:e9:c2:21:97:7f:a6:74:f9:02:ba:
20:74:6f:21:1d:10:97:c3:21:d1:67:3e:51:79:97:
d3:11:64:27:d9:15:54:c5:e3:61:85:24:8b:9e:84:
08:41:9d:93:92:92:c2:55:b1:e4:5e:b7:65:57:c1:
79:c7:92:81:ae:4c:28:6c:9c:69:57:67:81:87:e5:
84:64:97:23:99:3e:6e:82:71:9f:b2:71:f3:f1:b0:
e9:37:70:b5:59:01:8c:bf:c2:f1:b2:2f:04:3c:ae:
28:36:7e:3e:e1:64:55:34:60:b5:64:dc:4d:27:ea:
ed:3b:72:e3:81:e4:2b:04:63:19:65:95:21:64:a0:
cb:7c:4d:0c:d5:4e:41:b9:31:d5:d3:38:87:be:82:
27:5d:2a:9c:0c:d2:b5:eb:81:42:e9:f9:6c:a1:16:
ac:6c:e9:f2:55:67:ca:03:bc:d2:c2:30:74:ea:27:
1a:fc:71:80:f8:6e:fb:bf:bf:ae:42:8e:af:f7:cb:
5e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:10:A5:5D:77:A9:36:F9:49:E3:D6:B1:FE:DA:E9:BD:82:0D:B2:0F
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a9:60:ff:2c:c0:ae:8d:00:0f:1f:18:ac:e9:15:20:3d:33:
13:cc:ce:21:a5:48:17:e3:fc:20:47:8f:99:4c:10:ed:a5:10:
f4:4a:c5:74:69:ea:05:63:ab:54:71:69:9f:65:0e:9d:f4:05:
8e:cd:ab:58:53:77:5e:1c:2d:b3:64:22:6a:47:f5:e9:17:63:
a1:d9:c2:2e:84:2e:c7:16:3f:59:0a:53:75:f1:60:fc:e4:c8:
6d:a3:01:67:0d:30:97:5c:c9:71:d9:6b:0e:72:f9:ba:87:f6:
fc:e6:bc:6d:88:95:c6:ac:8a:8c:bb:e5:e9:6c:32:10:e4:4d:
a0:49:a1:ff:3d:19:dc:60:0a:fa:47:37:8f:62:e7:39:69:6c:
6f:a1:44:1b:a5:99:6c:4a:5c:03:fb:67:11:08:b3:2b:40:a9:
80:53:94:84:4d:35:c0:66:3b:b0:f6:d8:3a:c6:fc:f3:f9:73:
52:98:ff:78:56:ed:a0:8f:8e:cd:3e:72:07:56:72:c0:fd:74:
0d:17:ca:d8:bc:fb:b4:1e:e9:ab:77:05:71:b2:2f:d2:3c:7e:
df:15:16:6b:fe:c5:1a:bb:14:10:77:90:dc:a1:75:49:6e:c1:
51:93:43:fe:4a:c7:7f:56:dc:7a:d8:2e:d7:13:ce:2c:56:34:
5d:43:78:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:47:28 2026 by rpki-client