Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
File: D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json)
Hash identifier: rK4cdigMgr++S72sxd1cD4wRh6ZEWpqFSO+LdiHVZU4=
Subject key identifier: 67:5E:2C:3B:F6:66:60:86:B5:92:5C:B6:2C:09:4F:95:E4:4F:4B:EC
Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
Certificate issuer: /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Certificate serial: 01A118989BF29730ED16224571F3ABDA8A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
Manifest number: 0A7B
Signing time: Wed 07 Oct 2026 23:00:16 +0000
Manifest this update: Wed 07 Oct 2026 23:00:16 +0000
Manifest next update: Thu 08 Oct 2026 23:00:16 +0000
Files and hashes: 1: 79yWfe1C0oJyorvH1Ndj5_ksS2E.roa (hash: VEEzicoUwIVdfyy7u/W5/zZAs5snmAOXbsnXFY4gVR0=)
2: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: yVbaC9wuEPYVFRTSQYdp1qA5ms++NcDA6iFHz7FrDkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:98:9b:f2:97:30:ed:16:22:45:71:f3:ab:da:8a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7
Validity
Not Before: Oct 7 23:00:16 2026 GMT
Not After : Oct 8 23:00:16 2026 GMT
Subject: CN=675e2c3bf6666086b5925cb62c094f95e44f4bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:93:e8:29:45:77:38:72:ec:88:d9:4e:09:
ec:c9:26:84:98:29:07:8a:fe:9f:c4:10:0c:dd:9f:
13:20:a2:d1:53:6e:2d:b7:54:67:c4:84:d0:c2:12:
49:61:0e:64:b4:23:97:16:ea:b5:8a:19:2b:80:b0:
f6:dc:b0:84:2d:1b:7e:db:15:03:bd:cc:60:96:a4:
9c:4b:73:22:6b:4b:12:c7:03:5f:8d:d4:58:98:27:
1b:7e:44:14:e5:f6:9d:2e:7a:26:fd:cd:28:9c:14:
be:d8:4a:bb:8e:4e:b3:a4:b4:61:e9:81:2e:2d:fb:
cd:46:d1:68:a5:32:3b:c4:cd:52:95:a6:b3:c0:fa:
8e:88:c4:bc:09:e9:40:d7:08:fe:aa:80:8e:a4:93:
9d:bd:29:bc:80:4f:de:62:e8:9d:fa:d5:55:c8:fa:
20:56:03:5b:df:2e:3b:66:53:f1:20:c3:54:2f:a6:
f6:9b:aa:d4:6f:f9:fd:f4:1b:82:ed:a7:38:2a:df:
e8:fd:bd:25:e5:a1:ad:8d:e4:9a:8b:cf:3c:1a:55:
4f:07:95:6a:01:93:9a:36:d6:a7:b9:49:47:2f:b5:
72:3e:9d:e4:8a:fc:a2:ed:8f:28:13:c7:98:17:75:
42:3f:ea:d4:33:7f:30:84:7e:40:14:33:39:ab:35:
62:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5E:2C:3B:F6:66:60:86:B5:92:5C:B6:2C:09:4F:95:E4:4F:4B:EC
X509v3 Authority Key Identifier:
keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:37:85:02:6d:dc:dc:62:f4:d3:76:98:1d:2f:88:98:23:73:
b8:70:ab:9a:bd:f5:3a:94:b1:af:f5:ad:e9:88:ba:86:35:af:
d0:72:e7:41:2f:cc:85:a5:a5:9c:67:b0:cd:83:54:d0:ac:18:
fc:67:a2:16:5a:ce:5c:82:fa:fc:ef:a1:e3:36:ee:41:00:1a:
93:dd:c6:82:e0:28:b5:f5:aa:e3:39:c4:61:34:e9:24:48:3c:
d9:74:1a:3b:ba:07:3c:d7:21:59:e3:d9:0b:da:fd:97:18:86:
b9:10:a0:ae:ca:93:4f:4d:4f:1f:b0:8c:59:8c:c1:98:5b:47:
48:cf:e3:12:1a:bf:a5:9c:ae:d8:db:25:84:04:ab:cd:09:ff:
c0:3e:59:94:a5:b7:be:50:24:9d:29:66:6f:1f:3d:cd:37:bb:
77:75:60:64:ff:22:08:d4:7d:57:ea:be:79:13:7c:37:76:4d:
79:6b:8d:87:03:02:2b:a5:c7:0c:73:c1:ba:38:c3:58:79:28:
bf:20:79:e2:54:22:18:17:1f:b9:95:ca:24:1a:87:69:7e:5a:
42:d2:9f:b2:cf:d3:2a:42:45:64:15:16:78:ef:bf:c2:19:4d:
11:c8:c1:af:31:4d:a9:25:8f:29:cb:88:06:77:24:69:eb:6c:
98:55:10:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:43:27 2026 by rpki-client