Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: CyPSik3JohegXRx5ly7RyBLAxXkBoILO7TIlfTs70iQ=
Subject key identifier: C4:89:04:46:97:3F:FC:0B:B8:B5:DD:6A:6E:B9:32:A4:D8:0B:FB:B6
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 01A0C8C61E03285EBA82EB78657E01817B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 1531
Signing time: Tue 22 Sep 2026 11:00:21 +0000
Manifest this update: Tue 22 Sep 2026 11:00:21 +0000
Manifest next update: Wed 23 Sep 2026 11:00:21 +0000
Files and hashes: 1: PeJEMtupept21vf-rfjqUX1mldY.roa (hash: L3Vq59CQQkeuB9Tb5q+mJV+IQYi3JZHbF6U8aJ9gFYU=)
2: aD0lsDcoNGKfxZpDG-OdR_bzMnU.roa (hash: bvoZBbd9QoLZ+N5I+xfKDL3PeYR6CygFLOwHX1oAOxI=)
3: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: OU3QtxVVYL+L4FuBLV0kd/of5e2wehjpSaWFhs6q7Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:1e:03:28:5e:ba:82:eb:78:65:7e:01:81:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Sep 22 11:00:21 2026 GMT
Not After : Sep 23 11:00:21 2026 GMT
Subject: CN=c4890446973ffc0bb8b5dd6a6eb932a4d80bfbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:e7:29:3f:70:b7:5f:70:44:c3:2d:85:8a:
f7:0b:47:21:d4:97:4c:fe:02:4d:63:fe:7e:06:73:
0e:9a:98:be:36:43:4f:cf:62:91:0b:a9:2e:c3:ac:
41:25:4a:42:6d:6e:e7:dc:ac:3c:bb:02:73:1e:46:
56:17:e1:7a:27:ed:5d:5d:07:04:19:50:d0:ba:ef:
d3:74:65:48:6a:0b:5a:c5:89:07:87:26:75:6f:90:
d4:32:57:38:d9:13:00:73:fc:1f:03:17:1d:0a:85:
60:4c:f8:a1:62:f5:38:68:69:82:0c:93:ea:61:66:
88:f0:be:e8:6c:55:6b:10:bc:48:3a:29:55:4a:38:
24:5b:86:8f:df:c7:07:63:f7:2c:53:8a:56:35:05:
44:2f:fd:16:61:6e:f8:13:f5:9e:8f:09:6f:4d:08:
10:d2:44:99:d9:52:d0:30:58:16:0d:c4:d4:03:21:
fb:32:12:ee:77:37:84:13:6e:87:38:f2:e1:45:ad:
e5:06:46:3c:c2:05:ce:51:a5:82:ce:cb:36:48:12:
8b:4d:ac:56:cf:5c:b4:da:e0:a9:ff:bd:70:ad:f6:
21:ff:c8:32:e4:bd:df:99:91:8a:ef:32:94:06:aa:
5b:b7:5b:8c:bb:28:63:38:35:6a:06:95:32:aa:b0:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:89:04:46:97:3F:FC:0B:B8:B5:DD:6A:6E:B9:32:A4:D8:0B:FB:B6
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:54:6f:2c:e1:f4:dc:52:e0:7a:ac:e3:49:b3:a6:c2:b7:9e:
68:8b:e4:64:33:aa:5d:c1:59:9e:4c:41:80:0a:29:a6:21:59:
62:c0:13:28:06:dd:21:2d:e5:56:f6:cc:8a:ec:a3:c6:94:18:
21:93:ef:09:2a:27:11:92:fd:7a:0b:76:fc:0d:41:7a:4b:aa:
05:fa:a5:bd:44:7b:2d:c3:bc:c4:ad:c9:c6:20:b2:5c:fb:cb:
43:00:54:15:8b:54:a6:01:02:51:31:4b:4e:83:96:b3:69:db:
0b:12:86:a8:b0:b8:be:c6:36:5c:20:8d:e2:d2:c7:9c:ce:10:
36:49:fe:07:4e:7a:e3:54:ae:23:be:93:6c:6c:05:d1:ac:50:
a3:55:a1:f3:39:1a:27:c4:c6:a8:b4:91:83:d7:4f:61:c9:88:
1e:97:a9:62:3d:a3:16:82:5e:c7:31:9b:28:11:2b:f7:79:db:
d4:9c:f8:ea:db:34:0c:f3:cc:50:04:d9:92:df:7d:99:f3:6e:
2b:80:02:a3:c6:1b:ec:e7:b7:67:f1:f9:02:b8:18:88:84:e2:
f2:7b:3a:a0:c5:bb:bf:78:b4:af:a3:69:57:f4:90:04:14:fb:
6c:15:60:b8:2b:14:08:8f:b5:a7:19:4d:da:1c:ae:8e:24:b1:
33:58:5f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:18:24 2026 by rpki-client