Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
File: pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft (raw, json)
Hash identifier: HLvrZnIcknSLizXkFcV76tNczda0lrrihi7gwboL20M=
Subject key identifier: DD:EE:72:08:18:76:3A:C3:BE:58:B6:2D:AF:EA:B0:C5:7B:1E:82:A3
Authority key identifier: A4:39:6A:C1:4B:77:B1:F0:33:D9:E4:59:21:0C:87:3B:01:2E:0A:79
Certificate issuer: /CN=a4396ac14b77b1f033d9e459210c873b012e0a79
Certificate serial: 01A0D83C417FCC02B5DDB1D7597270F799D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
Manifest number: 010D
Signing time: Fri 25 Sep 2026 11:03:42 +0000
Manifest this update: Fri 25 Sep 2026 11:03:42 +0000
Manifest next update: Sat 26 Sep 2026 11:03:42 +0000
Files and hashes: 1: 2GYhbWHtfBWPF1UEk4OY2FR4BlE.roa (hash: w4kZnQsbsuOxKFHTlD0TVfi8ciQmtnzyEXnJDLUlaZo=)
2: pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl (hash: F+xh4+Z8g+EuR4kQPGB05c4DIh1nVebasIxRi9Se6RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:41:7f:cc:02:b5:dd:b1:d7:59:72:70:f7:99:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4396ac14b77b1f033d9e459210c873b012e0a79
Validity
Not Before: Sep 25 11:03:42 2026 GMT
Not After : Sep 26 11:03:42 2026 GMT
Subject: CN=ddee720818763ac3be58b62dafeab0c57b1e82a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:0c:d4:a8:5b:8f:dd:d5:fe:08:7c:c4:e8:
6e:9c:a9:4c:b2:65:0f:62:93:53:ae:0b:c0:4f:9a:
20:93:af:e3:20:f0:f1:1e:e0:fa:81:3b:c0:52:63:
4e:29:b5:f8:66:0e:11:80:e4:96:3d:cb:13:3d:2d:
b6:72:3e:63:c3:55:28:ae:da:aa:c9:e0:e0:77:52:
38:6d:c7:3f:0c:d5:e0:f9:78:62:94:27:bd:4a:1a:
b8:3f:52:69:03:47:0a:88:84:83:0c:23:0a:4e:c0:
4d:c5:c7:0c:8a:91:9e:27:5a:5e:f2:34:f6:6d:0d:
00:de:41:36:b2:24:c9:83:11:7c:da:af:c3:41:e4:
30:db:c6:5b:19:38:15:1d:30:44:5b:a6:4b:e5:fc:
ab:cf:f8:51:e9:4f:57:8a:5d:3a:ba:d3:8e:a4:f5:
ef:c0:43:c9:cd:ce:a3:9d:66:45:79:b9:c2:f3:7a:
df:8f:66:98:8f:0f:98:2e:98:c1:62:63:ab:ed:c0:
f6:9a:18:ef:73:e8:44:c0:67:fe:59:d6:89:a2:66:
dd:ad:75:ea:34:c0:2c:de:f3:b9:dd:37:09:35:3c:
04:ad:3a:9a:24:bf:9a:24:3a:b8:a4:11:de:dd:79:
81:ca:a9:59:c9:c8:b0:bb:84:7d:d3:d3:e0:ce:f1:
0d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EE:72:08:18:76:3A:C3:BE:58:B6:2D:AF:EA:B0:C5:7B:1E:82:A3
X509v3 Authority Key Identifier:
keyid:A4:39:6A:C1:4B:77:B1:F0:33:D9:E4:59:21:0C:87:3B:01:2E:0A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDlqwUt3sfAz2eRZIQyHOwEuCnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/3df6ee-2366-4b92-8394-91c50a09047a/1/pDlqwUt3sfAz2eRZIQyHOwEuCnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ee:13:33:dc:ae:36:9f:a1:2b:f7:5f:c5:20:0d:96:6e:03:
10:07:bc:13:57:ec:43:de:f1:2f:70:0c:7a:3d:91:a7:43:ab:
64:73:c7:49:a4:a1:5b:09:9e:25:94:da:cc:57:69:3f:32:94:
27:e6:41:68:03:b1:47:fd:72:cf:5a:71:24:6d:14:e4:df:91:
72:d9:72:d9:4b:37:c3:ce:1f:10:21:3f:c7:3a:6b:7b:ae:94:
d0:60:db:c0:eb:f5:84:2e:7b:dd:a1:df:3b:1c:6e:13:ca:01:
79:30:5f:28:31:2c:04:90:ab:1b:61:e5:3a:a5:a1:b1:f2:68:
ad:86:24:07:5e:99:83:05:09:52:9a:65:eb:19:e7:d2:c1:00:
2e:48:85:d3:74:ee:66:1b:02:e5:e8:fd:ce:51:94:c6:8b:63:
5d:1b:dd:34:03:c9:7f:e5:fa:54:ce:e0:f6:10:9e:a8:75:3f:
4e:cc:b2:9f:a0:f7:90:5f:b2:30:9f:56:a5:2e:88:74:34:e2:
6a:f3:08:8c:43:6e:6b:88:98:c3:67:63:ca:9e:2b:0b:42:9c:
ad:4e:99:8d:23:eb:75:3e:20:29:a6:0f:40:85:41:6a:0a:ca:
53:e1:6d:30:f4:2b:b7:3f:53:5e:9d:0f:3d:71:e4:a4:93:89:
dd:2e:13:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:19:27 2026 by rpki-client