Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier: 4JAyOdEUfBuaUF8qHkdy/R/cbhssRiN1jXtKmDkOZWk=
Subject key identifier: 8C:35:1D:72:71:27:E9:10:A7:EE:11:E0:9C:86:0E:5D:BC:82:50:4E
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial: 01A0C70E9CAF16348D41D9A84601D58F9447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 03:00:18 +0000
Manifest this update: Tue 22 Sep 2026 03:00:18 +0000
Manifest next update: Wed 23 Sep 2026 03:00:18 +0000
Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: Kig95jk5qFp4T702FGmWfcIhB9vfXokr5H3VpWlGpl4=)
2: _UE15j8dt-0E4MNHI1SJ6VAbDdo.roa (hash: RpMmPkih2MaIwwmI1CZ2YI65k33Pkn9LWYdRz9m4yPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:9c:af:16:34:8d:41:d9:a8:46:01:d5:8f:94:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Validity
Not Before: Sep 22 03:00:18 2026 GMT
Not After : Sep 23 03:00:18 2026 GMT
Subject: CN=8c351d727127e910a7ee11e09c860e5dbc82504e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:50:ff:99:38:59:c9:92:5c:ab:49:0d:d9:
b7:05:bc:38:54:17:54:8d:50:ff:ed:cb:0d:9c:c2:
80:bf:0a:27:df:ac:f5:4a:a4:53:f5:00:96:b8:6d:
3c:78:ec:37:d0:5d:85:ce:42:10:be:06:ca:63:b0:
95:a1:ce:b9:0d:a8:72:a9:bd:77:f5:fa:d7:0b:cb:
9f:39:d1:da:f7:a9:f2:f3:38:8e:34:b8:00:a4:90:
15:42:6e:cc:98:7e:4c:f4:5b:50:1d:6b:8f:54:80:
7b:15:2e:3b:54:1f:37:2b:c7:4e:2b:0c:f4:1b:6b:
3b:84:ae:60:38:2f:50:fb:71:29:6e:e5:02:c8:f3:
87:86:3f:b1:44:3f:0f:21:45:20:a1:90:8a:c2:ac:
d2:19:83:a9:46:0e:11:ef:4a:42:fe:44:64:a8:67:
54:3a:67:9c:07:56:a4:6f:06:ac:ed:8c:dc:6a:99:
be:70:30:f6:d7:93:5b:1b:3b:e2:3c:d8:11:75:99:
d9:ba:08:7e:1b:12:6d:54:fc:ae:ab:10:34:da:01:
94:13:ce:ab:27:77:cb:b8:eb:38:72:df:ab:f7:92:
b4:1d:aa:9b:70:5f:e7:1f:16:49:5c:2a:b9:89:8f:
9f:7e:29:78:84:79:88:d7:a4:b7:d2:59:1f:61:d4:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:35:1D:72:71:27:E9:10:A7:EE:11:E0:9C:86:0E:5D:BC:82:50:4E
X509v3 Authority Key Identifier:
keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1e:d6:de:ec:12:ad:b7:8a:76:f9:4b:23:78:b6:fc:44:aa:
79:99:67:0e:1d:4c:75:df:6c:db:5e:39:f6:e4:4d:19:55:98:
b4:d8:68:9d:f9:c9:14:f2:45:f9:0f:be:06:e2:6c:e9:ff:02:
44:4c:1d:23:4d:f9:34:6a:fd:54:43:c9:99:5d:9c:9d:6f:32:
6c:59:6d:36:f3:03:bf:c0:28:1a:a4:4a:22:73:bf:42:b8:c3:
a1:05:e9:6b:ad:47:77:f5:04:05:8c:70:b3:b5:86:6f:68:96:
10:5a:7d:55:ba:0f:fc:a6:72:45:d5:1c:b0:c4:c0:f6:83:8c:
43:92:f1:58:31:a9:8a:bc:3c:01:9b:6e:f6:96:b2:96:10:49:
59:7d:4b:b8:9b:04:8e:fb:76:32:57:91:b4:1a:79:2b:2b:0c:
d3:40:05:30:86:8e:42:8c:67:8f:75:b5:d9:bd:b1:2a:84:48:
02:56:29:c5:63:3d:49:7c:bd:4b:2e:4d:36:05:d5:7b:40:4b:
32:8f:2b:f2:72:75:a3:b4:a9:90:9d:34:e5:f9:d0:2a:4f:83:
60:4a:21:0c:2c:80:ce:07:1d:f4:f4:7e:e3:6a:7e:ec:01:bc:
1e:c1:07:5f:81:f0:ba:cf:b6:c5:ea:7d:85:33:21:7c:c6:49:
4b:a1:e8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:33:31 2026 by rpki-client