Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: C5KLRdfH6+m24RFAncPlKL8GwoRvayq7iSW24Hx9h3A=
Subject key identifier: C4:33:91:58:75:CD:AC:06:81:87:85:EB:F6:CC:C1:C4:A6:91:36:70
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 01A0CDB57DDBA53FB79C312EB1064759A02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 10:00:18 +0000
Manifest this update: Wed 23 Sep 2026 10:00:18 +0000
Manifest next update: Thu 24 Sep 2026 10:00:18 +0000
Files and hashes: 1: as_rlXqJ-9X5yyFioptlwk_3ywE.asa (hash: WOqxDpfG0009xOfBOkYF5jMYghhxHEkdiXrFFzH+iVs=)
2: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: fIC+Y9K6h0/W2tXyMyXRKm93Rd3ONczNUx0uiBst+Hs=)
3: mCi8IXM78zEe8k6a11x1wQYJJHk.roa (hash: XXRc/LdihJuiCQ6i4r0S3QErFt5j7/TSAtBg4nnm1BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:7d:db:a5:3f:b7:9c:31:2e:b1:06:47:59:a0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Sep 23 10:00:18 2026 GMT
Not After : Sep 24 10:00:18 2026 GMT
Subject: CN=c433915875cdac06818785ebf6ccc1c4a6913670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:37:50:58:f8:81:da:28:9d:38:67:e7:61:ed:
5c:c3:52:74:8f:65:80:f3:8e:6d:a7:07:37:6e:cb:
fd:bc:37:d2:a0:e1:86:cd:9b:80:8b:b5:28:fb:d2:
b0:b8:7f:dc:4e:0a:f7:c3:37:de:69:21:40:9a:94:
76:59:01:21:0a:a8:cb:7d:47:1c:81:3a:e7:b0:9a:
eb:47:9f:f1:72:ee:ba:89:8e:b5:fe:88:34:2a:03:
87:bb:09:f5:84:79:39:6d:54:a2:1d:75:57:6d:57:
52:6d:41:6a:c2:15:47:8f:4c:10:68:28:7a:42:f4:
20:83:5a:45:61:1f:6c:69:92:b5:05:6b:09:57:0b:
34:99:f9:36:4a:2c:a8:44:db:70:3a:31:c2:13:93:
11:33:df:12:05:1f:2b:db:51:2b:20:80:fd:03:b1:
81:1d:14:bc:a6:89:5b:65:14:b9:7d:a7:5b:ae:72:
79:cb:c3:70:16:f3:2d:f1:b4:5d:86:62:f8:eb:b0:
eb:1e:e0:83:7f:a1:54:04:5d:eb:49:74:0e:f6:33:
b6:44:6f:23:0c:6f:dc:30:4f:91:ef:83:7e:c9:c2:
a7:b2:5d:47:05:cf:27:41:88:73:ed:07:00:f8:7e:
05:c7:8c:14:6e:16:73:96:fc:0b:64:dd:a6:ce:45:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:33:91:58:75:CD:AC:06:81:87:85:EB:F6:CC:C1:C4:A6:91:36:70
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f3:8e:bb:f0:79:be:e3:65:d3:02:f2:a2:8a:d9:69:f2:36:
3b:9e:85:40:5d:35:4f:32:b2:4d:d7:32:70:b0:05:aa:36:b0:
05:cf:6c:11:7a:9e:02:dc:97:b9:84:36:40:68:5e:c4:c9:39:
af:7e:6d:7d:09:f4:8e:a4:ca:d6:f9:39:c4:9e:90:fa:b3:a2:
bb:51:57:1a:25:e6:63:95:0d:e0:10:7f:4d:6e:c7:7a:fd:1a:
3b:fb:f2:fa:eb:3b:6b:99:4f:39:f3:84:cb:49:31:12:14:dc:
1b:14:6a:70:7d:c0:6e:ba:65:9d:d8:e9:95:ea:16:3c:ba:ff:
ad:db:7d:59:61:f7:e7:15:fa:90:64:d4:82:74:d5:1c:94:d1:
a6:38:c6:6a:ec:49:8b:04:39:4a:98:54:2a:e8:20:50:69:85:
4b:ed:90:65:4a:b8:7c:dd:15:83:ef:84:62:35:81:1f:cf:d7:
c0:57:fd:1c:e1:9d:31:e9:c5:a9:8b:0c:b2:78:e6:35:6b:e3:
43:77:9c:46:f1:ce:a2:bb:03:7d:8f:37:6c:33:41:de:8b:29:
35:44:59:97:e9:32:5b:30:5f:25:66:40:df:0d:a3:b8:9d:76:
39:09:a8:56:ad:1f:c4:c2:a8:78:b4:87:1a:ee:3a:d0:92:34:
da:f7:67:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:47:22 2026 by rpki-client