Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
File: mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft (raw, json)
Hash identifier: hOVvXJswMUKDNwuILOnTgZViOj3T/WbFx2DhXFdnMa0=
Subject key identifier: B1:86:4C:FF:B0:36:CF:D1:5A:5A:65:E9:A2:C7:BC:57:5A:11:DD:53
Authority key identifier: 98:37:50:F2:47:06:96:79:B8:3E:ED:FD:7B:D5:65:EA:46:78:9A:60
Certificate issuer: /CN=983750f247069679b83eedfd7bd565ea46789a60
Certificate serial: 01A0C8588E1774C5C8BD22C692AB53EAD25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:41 +0000
Manifest this update: Tue 22 Sep 2026 09:00:41 +0000
Manifest next update: Wed 23 Sep 2026 09:00:41 +0000
Files and hashes: 1: P9PKZAt5djm7FdGsrSvgtxYkacg.roa (hash: ugWkvKLaNhrHSnXEVwNyBj9pWu4yB48C3daCoDS8DQk=)
2: mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl (hash: r7BZwXqESoDLIo2hOTdTksmx3xAAnBCzBfd4gv68/Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:8e:17:74:c5:c8:bd:22:c6:92:ab:53:ea:d2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983750f247069679b83eedfd7bd565ea46789a60
Validity
Not Before: Sep 22 09:00:41 2026 GMT
Not After : Sep 23 09:00:41 2026 GMT
Subject: CN=b1864cffb036cfd15a5a65e9a2c7bc575a11dd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:82:a4:d3:de:7d:f4:67:b0:e7:39:a5:95:b1:
dd:09:3c:28:e9:27:fc:67:0a:97:b1:f2:8f:23:a1:
2c:1c:c8:2e:77:b4:d4:a9:02:53:76:3d:a9:9a:50:
77:d1:62:88:1d:05:7e:ff:cf:89:12:1d:14:ef:ae:
57:45:20:6b:58:33:75:cd:1d:62:1e:69:0c:38:21:
9d:e4:d5:0f:c5:10:5d:c9:f6:db:64:6e:c8:10:b5:
20:97:b3:20:66:f3:f7:bc:c8:97:b0:ff:df:2f:b8:
e8:f4:27:42:91:2a:a1:87:f4:be:f2:7e:c5:2d:ce:
a7:29:81:ad:57:73:ad:72:75:53:69:cd:b8:10:fd:
b4:ab:14:5e:b8:73:80:df:c4:44:fc:99:bd:91:49:
48:ff:c5:df:f3:cb:b6:ae:26:48:30:5f:f7:de:c2:
e4:b5:32:d0:a3:20:82:fa:48:21:63:5a:3c:66:00:
0c:ca:16:c2:9a:e6:af:99:6c:8b:3c:08:6d:63:68:
4c:00:7b:81:d9:e6:0b:54:b1:01:d6:6d:85:f5:97:
ae:ca:1a:1c:ae:ee:61:84:7f:27:fb:10:9f:da:95:
e5:4d:1e:e1:14:c8:12:21:21:51:a6:68:c2:ac:fb:
7a:31:0e:68:1e:9d:81:e3:f6:4e:68:fc:62:d1:8e:
89:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:86:4C:FF:B0:36:CF:D1:5A:5A:65:E9:A2:C7:BC:57:5A:11:DD:53
X509v3 Authority Key Identifier:
keyid:98:37:50:F2:47:06:96:79:B8:3E:ED:FD:7B:D5:65:EA:46:78:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:61:7c:a7:12:6c:b1:3b:43:49:56:ea:47:7b:4c:b5:16:3b:
74:1b:e5:3f:b5:e0:0d:54:93:e6:5a:55:bd:1a:c7:e0:7e:86:
64:e7:c4:4b:b7:89:c2:f4:32:41:15:0e:73:ca:02:cd:06:0a:
4b:0d:e0:cf:b8:98:6a:49:3f:a0:0c:c9:7c:c5:bf:a1:81:63:
d9:3c:0b:fd:2a:c8:2b:42:2a:0a:75:37:5e:8b:ae:1d:68:94:
c3:7b:5a:5c:64:c2:7c:7d:26:94:87:c1:14:3d:05:16:88:be:
1f:72:f8:58:7d:f2:a7:7e:ad:7b:5e:c7:c0:9d:51:d1:80:ed:
26:6b:b7:e6:a8:fa:34:30:1f:cb:3e:e2:7b:d3:f2:e6:11:a6:
5c:e8:98:8f:69:af:35:85:75:1f:92:52:56:d0:1d:c8:67:91:
f2:9b:e6:7d:cd:eb:28:18:d6:44:71:8f:9e:95:65:53:ff:79:
8a:e3:c5:b4:5f:46:d5:e8:04:97:a9:01:82:21:80:c1:62:cc:
da:5c:61:d4:04:45:24:bd:76:cf:af:f8:09:a0:ff:cb:b1:0f:
5e:63:3b:23:c2:5a:40:f5:11:24:ea:bd:28:72:f6:0a:45:60:
ee:80:5c:41:01:14:11:66:49:bb:34:dd:86:38:b7:4e:73:7d:
a4:9e:cb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:54:49 2026 by rpki-client