Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
File: daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json)
Hash identifier: B3K8mOT7SRHBNLclr0gHEmuuohPOZ/HtNrRIIMKf89A=
Subject key identifier: 71:C2:34:8B:FF:30:72:36:CD:8C:72:BA:34:C4:22:2E:71:E1:B7:74
Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Certificate issuer: /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Certificate serial: 01A0D426EBF72322D5E6DF1288C6C0B0703E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 16:01:55 +0000
Manifest this update: Thu 24 Sep 2026 16:01:55 +0000
Manifest next update: Fri 25 Sep 2026 16:01:55 +0000
Files and hashes: 1: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: rgYZDWngJvyR3CqAzxBsaXSXgJZ7eBOvJ1wPqJ+93Wk=)
2: nDj9PT5N_QWx4Sz5FT7RF4CSpok.roa (hash: h0RW3y25bIVEC8aKObDu/RDtNTnrw2v6jC5PsgpIK5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:eb:f7:23:22:d5:e6:df:12:88:c6:c0:b0:70:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Validity
Not Before: Sep 24 16:01:55 2026 GMT
Not After : Sep 25 16:01:55 2026 GMT
Subject: CN=71c2348bff307236cd8c72ba34c4222e71e1b774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:62:df:be:dd:34:3b:7e:18:63:7f:70:5b:
75:10:b4:68:9b:83:dd:6c:92:50:76:5f:4b:ce:11:
4b:99:e4:b5:a2:12:1a:08:4e:38:c3:47:e0:a5:dc:
28:42:ee:13:05:86:23:ad:c0:5b:53:9f:b3:b1:47:
f3:d3:89:6e:91:0b:47:e2:96:00:f7:c6:73:e4:e9:
a7:de:35:31:fe:22:79:e8:81:35:ac:4f:93:8a:f6:
f2:74:fc:3f:eb:0e:43:83:1b:60:78:69:b5:b5:cb:
2b:ef:93:f2:54:ec:23:70:ba:88:4b:84:6e:3c:cb:
58:86:69:31:76:ca:a4:65:bd:e0:26:2f:5b:db:8a:
e2:c0:a6:37:50:ed:cb:ea:8a:e8:5d:8d:99:1d:e1:
b1:f5:48:48:0f:fd:0a:04:66:20:62:71:72:5e:90:
6e:22:c5:a9:63:c9:ca:aa:58:4f:b3:27:1a:0f:48:
5f:3f:c3:90:5e:f5:04:fb:3a:5a:4c:6f:5b:91:22:
1e:c9:45:1f:63:b6:3a:3c:ec:11:04:d6:9a:a1:eb:
02:75:82:55:db:e6:47:da:90:5b:ab:fe:e8:68:25:
83:33:73:3d:35:5a:f2:fc:c3:b4:07:31:24:12:ac:
e4:ef:db:2e:d0:b0:1a:c7:7f:46:81:c7:e1:29:cd:
e5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C2:34:8B:FF:30:72:36:CD:8C:72:BA:34:C4:22:2E:71:E1:B7:74
X509v3 Authority Key Identifier:
keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:85:36:e5:c2:7f:1b:25:c4:62:c0:0f:7c:f5:f0:06:26:a3:
20:e1:61:9a:e8:60:4e:a6:4f:9c:0a:16:f9:99:64:d7:73:e7:
40:be:a9:e2:5e:1d:4a:ca:fa:1a:27:12:a2:d6:d9:f3:bf:f1:
21:23:46:ef:04:a7:a7:69:6a:97:97:4d:88:63:e9:2c:80:1f:
be:c3:36:86:ed:94:ec:79:b3:46:06:31:70:2f:88:ce:3a:b6:
7b:05:79:82:cf:8a:73:18:18:5a:48:cd:19:cb:87:9a:7f:fd:
19:8c:c3:e7:e2:3c:68:46:ef:68:13:47:95:26:9c:31:36:96:
4c:5b:63:6b:21:18:dc:a5:1d:6d:31:80:11:ed:88:93:91:ef:
77:32:67:49:85:ce:a9:5a:a7:6f:73:b6:27:4d:de:ad:6d:48:
12:5e:cf:ba:7d:f0:b2:d5:bf:df:e8:ed:70:17:45:38:fa:7c:
24:f5:f5:3d:95:7e:55:8d:e9:4a:14:73:79:a0:af:49:17:2a:
db:90:54:c3:27:15:ef:96:c7:f4:9c:05:b7:6c:0d:3a:2b:03:
ef:f1:48:e0:08:32:01:d8:18:c6:cf:17:f0:b3:91:a2:97:41:
12:af:0c:ee:43:23:57:46:1f:b3:c6:4c:b9:8c:be:f6:91:7d:
b1:99:cb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:03:41 2026 by rpki-client