Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
File: dF5pC2XdK2La_T6uUwne-ky1x8Q.mft (raw, json)
Hash identifier: QbSHeLwIMTYfek6eL6fjL40fc79yppXqJ01cpAbWezU=
Subject key identifier: E3:C9:E7:EB:D0:16:17:B9:60:5E:33:FC:22:C3:28:64:C5:B8:BB:16
Authority key identifier: 74:5E:69:0B:65:DD:2B:62:DA:FD:3E:AE:53:09:DE:FA:4C:B5:C7:C4
Certificate issuer: /CN=745e690b65dd2b62dafd3eae5309defa4cb5c7c4
Certificate serial: 01A126FA53649C6CC1DB1CCB0DEFFCDDFDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
Manifest number: 0112
Signing time: Sat 10 Oct 2026 18:01:41 +0000
Manifest this update: Sat 10 Oct 2026 18:01:41 +0000
Manifest next update: Sun 11 Oct 2026 18:01:41 +0000
Files and hashes: 1: Bx-vAb6JcdMAkqoFkx5QchgWBPw.roa (hash: tXWgzC52m15bMpTie/nAe4jMMYYoA58oLlL3abiDdMc=)
2: V_c0MczS3zUpZJNTtQxngj6lCXY.roa (hash: I3RW9QlgWDHOKk+vzXe99y6FDPghIiCTxEZoxiZd0LQ=)
3: dF5pC2XdK2La_T6uUwne-ky1x8Q.crl (hash: /UHx9gyn8gnPEQo2ljqfbLTtj6vqTWUdHXsupK7VTL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 18:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:fa:53:64:9c:6c:c1:db:1c:cb:0d:ef:fc:dd:fd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745e690b65dd2b62dafd3eae5309defa4cb5c7c4
Validity
Not Before: Oct 10 18:01:41 2026 GMT
Not After : Oct 11 18:01:41 2026 GMT
Subject: CN=e3c9e7ebd01617b9605e33fc22c32864c5b8bb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:33:01:bd:19:68:23:96:58:28:5a:47:87:
0a:9d:d2:24:f8:2a:70:fb:db:1d:87:48:5c:18:9a:
25:18:21:b7:6d:97:0a:43:ac:85:1c:fc:96:55:52:
0e:93:73:1b:fd:ab:ce:b3:2a:6a:f3:6c:6d:d4:94:
4b:c2:21:7a:e6:bf:4f:d3:de:f6:fb:66:4d:6c:d1:
25:c8:01:4e:4f:79:97:72:dd:57:2e:16:b3:b7:0c:
d9:61:cf:4e:ef:64:9f:ae:72:ed:d1:67:78:17:0a:
bb:a0:a9:2e:9d:c2:11:56:0a:61:95:1d:73:67:63:
51:cf:cf:c2:81:4b:d4:db:19:ab:72:be:d0:2d:d2:
e6:4f:39:3a:57:1a:5d:16:8b:16:95:98:03:10:4c:
de:18:7b:cc:e2:ee:85:6d:c7:1b:74:ed:75:62:1b:
b9:3d:6c:46:4a:0c:cf:c4:29:25:6b:b9:88:fc:55:
14:d4:1a:92:5f:fe:08:ef:ce:6b:d2:fb:c5:2a:b8:
de:4d:13:52:4a:27:f2:23:3c:d7:17:68:a0:bc:9d:
dd:3a:f4:f8:b4:0b:7c:51:b2:ae:12:a2:d0:0d:e1:
12:08:bf:18:21:db:dc:ed:76:cb:7b:45:39:50:40:
8e:47:fe:3e:c3:bf:9e:26:ea:92:de:49:d6:6c:fa:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C9:E7:EB:D0:16:17:B9:60:5E:33:FC:22:C3:28:64:C5:B8:BB:16
X509v3 Authority Key Identifier:
keyid:74:5E:69:0B:65:DD:2B:62:DA:FD:3E:AE:53:09:DE:FA:4C:B5:C7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9a:6b:42:44:5b:57:b5:8d:b4:02:70:4b:3d:67:12:b5:0c:
32:d1:56:ac:99:c2:56:08:59:a8:f4:48:20:8c:30:53:86:46:
b6:24:70:5e:93:a4:e9:f7:7d:f0:bb:fc:92:e3:13:b3:b7:45:
d6:73:f8:ea:d7:95:b9:b7:c2:5b:f6:20:ac:06:15:d4:a0:3b:
c1:da:55:4a:ba:97:f8:22:e5:46:05:87:94:d8:22:a0:d3:12:
83:a3:33:f6:d7:f2:fd:25:88:cb:ee:d2:72:9e:09:cc:41:ba:
73:2f:1f:c3:ba:52:31:74:92:cb:2b:42:97:98:1d:92:9e:b0:
c6:b8:e9:8b:5d:1e:02:0c:66:34:8e:53:f8:b8:3a:4f:51:39:
1f:0f:0b:91:15:34:9c:1d:84:cd:b8:87:ca:59:c4:3d:c3:63:
ab:d5:fa:35:30:11:57:6d:32:41:f7:16:0c:6d:5e:ff:d6:3b:
d0:08:ed:aa:3c:e1:ab:d1:29:34:1a:6a:a1:a9:b0:a7:ec:b9:
57:a4:09:15:58:29:25:90:98:5e:f0:fc:d4:9c:68:ea:4e:83:
98:b9:42:30:33:f1:cc:ef:19:48:6e:a4:53:12:c9:f8:05:93:
d2:8e:92:b9:a6:45:4f:d3:99:72:d4:6c:2a:1c:22:46:4b:1e:
a2:fb:28:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:51:48 2026 by rpki-client