Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
File: D1PmC9pkZYSIzqajMPBcd0nVucY.mft (raw, json)
Hash identifier: I/Grz4qCSVP5OPDK6BuXyofh8Ulrqmq62IM9DoiiFvA=
Subject key identifier: AC:A1:A8:4D:30:63:BE:BC:46:8E:13:29:BC:66:3F:69:7C:85:A0:30
Authority key identifier: 0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
Certificate issuer: /CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Certificate serial: 01A10CCC27198F2565DE879CF7F206BB6268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
Manifest number: 01B0
Signing time: Mon 05 Oct 2026 16:01:08 +0000
Manifest this update: Mon 05 Oct 2026 16:01:08 +0000
Manifest next update: Tue 06 Oct 2026 16:01:08 +0000
Files and hashes: 1: D1PmC9pkZYSIzqajMPBcd0nVucY.crl (hash: mz5ITM0JT985Rxj83DIoUDUFHbA9DtaeT44p/6M4b64=)
2: _tT1XC7nkQRWgQdxKibbMXrzVoc.roa (hash: zg0b/n4wXZx1538KhR67xdLnhn+vJRWK90TV+fz8uiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:cc:27:19:8f:25:65:de:87:9c:f7:f2:06:bb:62:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Validity
Not Before: Oct 5 16:01:08 2026 GMT
Not After : Oct 6 16:01:08 2026 GMT
Subject: CN=aca1a84d3063bebc468e1329bc663f697c85a030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:2b:e5:37:93:c8:50:6e:75:91:84:62:d8:
49:3d:a2:44:5c:5a:d1:d6:53:2e:cb:15:3a:fc:9a:
b5:52:6e:81:fd:c9:00:f4:e0:1f:03:a2:09:70:d6:
3c:2e:88:66:55:be:d8:20:52:d1:cd:db:bc:2e:66:
a5:a2:d6:75:ed:d1:87:76:7a:10:6c:8f:5d:77:00:
30:4c:86:9d:33:1b:00:63:39:20:10:8b:24:11:bb:
38:e6:cf:3e:f3:33:4f:72:8b:a7:f0:6b:21:bc:63:
40:06:f8:cf:10:0a:5e:dd:ce:2b:97:74:4d:42:01:
97:b4:cb:32:49:e1:af:69:19:ec:f2:0d:f3:50:c4:
2e:bd:e8:27:51:9c:1c:1e:82:4a:8d:9e:1b:03:16:
8c:00:0f:6b:c5:bf:d0:e6:e0:f6:82:68:79:b3:66:
14:16:44:ac:92:ff:32:08:5e:c7:7e:05:0c:f1:b6:
1b:f9:fe:e8:34:ba:13:69:c4:b1:07:c6:00:50:ee:
a0:d4:2f:2c:ad:2e:5d:7a:31:12:18:86:89:21:55:
c9:db:10:d8:20:8a:49:9c:1d:b6:c1:ae:bd:87:28:
21:ca:45:43:80:a1:08:df:a3:ca:98:2d:9b:13:67:
f8:72:19:a6:68:0e:1d:92:f0:03:2e:0d:e0:ac:59:
7a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A1:A8:4D:30:63:BE:BC:46:8E:13:29:BC:66:3F:69:7C:85:A0:30
X509v3 Authority Key Identifier:
keyid:0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8a:24:33:1a:2f:96:36:c9:e5:cd:3c:a2:7b:81:9e:0f:6a:
26:e0:ad:01:11:47:86:28:87:06:77:87:37:28:51:2e:e5:be:
8e:88:81:f7:fa:3c:bb:1d:de:e8:57:2a:75:3c:1e:8f:f6:92:
d8:2e:f0:65:28:f5:0b:ae:3c:90:6b:3f:a4:c0:a9:45:d0:97:
71:a6:a8:b3:fd:40:62:a6:aa:1f:d3:c7:f5:83:d1:62:2b:a0:
6b:e2:1a:cd:85:4e:9f:48:61:90:71:03:cc:47:72:fb:41:ba:
8e:82:a5:d8:44:e3:2d:37:d9:3b:4d:3b:1a:6f:93:20:b3:08:
bb:c9:c0:29:46:dd:26:c8:21:88:4c:cd:bc:a7:73:b1:d9:8c:
99:39:62:91:50:a1:e6:56:8c:b9:e4:af:96:92:75:01:7c:bd:
cd:64:2b:b4:41:a3:f7:4c:48:ed:eb:ea:0c:e4:47:c6:2e:3b:
c5:b1:8e:18:4c:43:6a:bb:a5:72:f7:1b:0a:c8:ed:07:0c:b2:
76:34:08:75:81:f2:85:45:dc:92:35:d8:d8:73:df:ae:06:3d:
87:35:9a:2a:96:b1:a4:85:83:ba:aa:88:1b:e5:5c:0d:02:ca:
cf:0f:4f:a4:32:bb:8b:ef:59:be:b6:1a:24:f6:e2:ea:4b:f1:
a2:c8:0e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 19:14:34 2026 by rpki-client