Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
File: dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json)
Hash identifier: HnxfJSe1JXFIvGSErV9FWCJMPD+qnHXYc8WX6nlndFw=
Subject key identifier: 2D:11:C1:06:5E:20:5B:AD:9B:27:D3:6B:4A:72:E8:20:10:9A:D0:89
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial: 01A123F8B1E24FE48B98E52DFC4464A70697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
Manifest number: 1A96
Signing time: Sat 10 Oct 2026 04:01:03 +0000
Manifest this update: Sat 10 Oct 2026 04:01:03 +0000
Manifest next update: Sun 11 Oct 2026 04:01:03 +0000
Files and hashes: 1: LCf-Tegx0fZiipUoAGLWioHn_mQ.roa (hash: gYRcDzeAFInSekOjnAJBC9uOYALnCXCAmTDWjzmnLrQ=)
2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: JfpKBLH/oDxNr0G5DGGyU/rsxYHnVhe6Q7/V6sjIloA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:f8:b1:e2:4f:e4:8b:98:e5:2d:fc:44:64:a7:06:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Validity
Not Before: Oct 10 04:01:03 2026 GMT
Not After : Oct 11 04:01:03 2026 GMT
Subject: CN=2d11c1065e205bad9b27d36b4a72e820109ad089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dc:1a:fe:41:70:c5:96:f3:7f:54:03:d7:ba:
08:3e:fe:d2:be:fe:ea:ce:e5:fe:df:cc:2a:2d:bb:
8e:e3:ce:84:7c:fa:eb:e7:40:bd:47:49:6f:d6:f1:
69:41:85:23:63:23:58:27:10:9f:5b:ac:78:67:82:
7b:6f:91:5d:b1:78:83:ef:07:0b:86:25:a1:4a:51:
f1:97:58:93:94:68:a0:4e:09:ca:60:43:7c:a2:bb:
b4:fc:50:ac:02:e1:2a:67:12:aa:32:01:16:fe:22:
03:f1:fe:e2:fc:4d:33:d4:08:f6:7c:95:d7:e0:c9:
4b:e0:d8:3f:b9:fe:7f:b8:2e:7c:b5:ac:a1:de:17:
35:f9:64:19:1c:db:1d:2e:c5:13:37:25:35:6e:54:
6e:8e:90:8c:1f:95:da:cf:a1:07:70:fc:55:b5:7e:
f7:4d:aa:84:f7:0c:2e:83:32:b6:a7:17:4a:95:d4:
e6:a6:4f:7c:43:a3:25:d9:e9:b3:94:2f:79:a1:0b:
d3:ce:8c:c6:69:a6:f9:1f:12:e1:f6:d1:ca:a4:b0:
f8:5b:82:62:bf:0d:5e:54:2e:16:51:a4:e9:c1:ca:
c4:01:0b:03:6d:f0:40:9c:c6:5e:9b:55:ab:d2:8a:
db:78:fb:a9:10:23:a9:71:cd:11:62:31:04:76:ab:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:11:C1:06:5E:20:5B:AD:9B:27:D3:6B:4A:72:E8:20:10:9A:D0:89
X509v3 Authority Key Identifier:
keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9b:bf:ff:4d:8b:a7:92:b6:a4:ff:c7:e7:73:17:bd:c4:a4:
a8:2c:f6:4c:d4:ff:fc:3b:7e:a5:43:58:d8:03:d8:e8:fa:a6:
51:09:97:d3:e7:39:77:e1:5a:6c:f7:e5:57:e2:8e:16:71:7f:
0c:2f:55:26:f6:2b:cd:d4:92:2f:41:0b:43:a7:27:3c:d3:d0:
84:2e:0c:21:cb:86:91:63:e5:55:6e:e1:47:65:9e:86:c4:45:
62:a1:b2:15:0c:13:92:b0:c2:55:d3:65:40:d3:20:a3:00:09:
aa:1b:7f:33:35:64:d5:5c:ed:0d:63:7d:52:3a:63:cd:cd:8d:
5e:cd:c5:be:c8:88:67:b7:e4:60:5f:71:73:45:59:2a:41:b2:
af:36:cc:f4:d7:03:08:4d:a7:db:ba:df:25:e1:3c:ad:94:c3:
dd:21:b6:c1:63:21:6d:16:af:c6:96:56:58:8b:6e:98:cf:8b:
0d:06:cb:35:f0:0c:dd:9b:53:5d:85:1f:18:50:dd:cf:94:df:
9c:0a:1d:33:42:46:f5:8e:8d:02:ba:6f:7b:e4:1c:c4:64:1b:
fd:91:41:16:b3:b4:1e:88:51:84:f0:6d:f6:37:4a:88:42:28:
ff:1a:9e:f5:c3:65:6d:aa:f9:74:86:ee:b4:f2:00:77:ed:9b:
d3:a3:4c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:38:12 2026 by rpki-client