Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: OzhpA0OUI74V5rE+xGNv0oylCkQLS/r5bGostjg5ye4=
Subject key identifier: 8E:21:2E:53:09:21:EE:D8:3E:69:DB:A7:54:EE:B5:17:3D:E2:25:68
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 01A0C40E8CF40B67EBEAA152E89CA554A012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 13:01:22 +0000
Manifest this update: Mon 21 Sep 2026 13:01:22 +0000
Manifest next update: Tue 22 Sep 2026 13:01:22 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: ijV8PMzEcCb/qZdTTOh9C3cnzTzEXo5kUHDh8M0CG70=)
2: _L8W4pQYN95d_ru9437-S9YHe24.roa (hash: 7Vq9DgyAlsbGrBriOiUBAAmu/kBfnz1j1W0Ug2fBKPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:8c:f4:0b:67:eb:ea:a1:52:e8:9c:a5:54:a0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Sep 21 13:01:22 2026 GMT
Not After : Sep 22 13:01:22 2026 GMT
Subject: CN=8e212e530921eed83e69dba754eeb5173de22568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:63:1d:20:e8:c0:74:4f:57:42:a4:92:9a:
35:a5:33:25:44:57:4a:5f:eb:4a:dc:3a:46:fc:4b:
6c:6f:b2:90:fb:09:1b:80:08:0a:00:de:aa:e1:e1:
0c:01:34:cb:f5:a5:e8:ca:af:90:15:27:d4:2b:a7:
02:33:f9:fc:30:42:55:37:b8:95:82:cb:ec:b7:d6:
c3:3b:1c:b1:f3:28:81:a4:7e:c6:7b:41:de:0e:f5:
df:fe:5c:a3:b1:1b:68:e5:24:43:1f:1b:56:90:ef:
a4:64:64:7f:e1:34:60:13:1d:fa:8a:3b:d1:be:7f:
49:32:43:13:75:46:4f:a1:70:02:d6:73:a3:a4:fa:
6a:09:76:43:33:e8:36:9d:a8:83:73:4b:f6:00:e0:
92:dd:18:a0:ae:7c:60:19:74:a5:8c:24:cb:df:8d:
4e:45:c2:8d:c5:b0:5e:71:1a:25:c9:82:54:3d:c3:
4d:82:1f:2d:d5:12:fa:38:1b:e0:1f:8d:aa:31:f0:
c8:c1:89:b9:dd:16:b0:14:5f:5a:57:6f:2f:7c:04:
45:b7:42:23:88:85:46:d2:df:48:e9:f3:62:45:b2:
04:f0:a4:a2:1e:ed:f3:86:0c:d2:26:53:ad:c3:7a:
93:13:04:d5:a7:15:0b:89:be:ac:40:cf:0b:bb:6a:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:21:2E:53:09:21:EE:D8:3E:69:DB:A7:54:EE:B5:17:3D:E2:25:68
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:67:d0:77:4c:68:76:cd:af:eb:a1:ae:39:87:49:c0:8b:83:
ce:89:a5:5d:61:08:ce:fb:35:df:6e:1d:af:d8:19:e8:3e:c9:
1e:d6:ea:3d:84:1e:be:be:f0:33:99:da:ed:a4:be:4e:1e:25:
b4:08:b7:2b:ef:9c:dd:4f:64:5f:43:67:7f:5c:4c:42:ee:33:
0a:cc:02:bb:b8:24:de:f4:f1:0a:13:69:63:35:58:b3:a9:a2:
d8:7a:6a:4c:8a:fd:f1:05:bb:0c:e2:5d:ad:81:f7:01:63:7e:
f2:5f:64:e9:42:37:0e:94:78:4e:61:6c:aa:a2:70:88:ca:78:
d8:6b:71:92:9f:16:48:15:1a:29:a5:8f:df:fc:b2:c0:71:09:
d3:54:7a:bd:5c:75:d4:28:98:62:c0:84:bf:1d:83:d3:c1:76:
01:39:c0:f3:45:03:f2:25:f7:45:30:39:a7:b9:d9:ef:1a:e1:
c7:51:05:d1:a4:30:41:03:e3:29:eb:4e:e7:00:1d:fd:69:85:
5a:ce:40:6d:90:80:0f:59:6c:48:a7:e0:d4:94:45:d2:52:e8:
8c:34:c5:0e:a3:1e:3f:27:29:6d:10:5a:71:e2:7f:e2:25:44:
9b:8d:a0:d2:f1:aa:60:7c:3e:05:e7:12:7b:58:cb:db:a8:34:
35:53:81:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:18:21 2026 by rpki-client