Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier: 6Tfg6Zfi5zIqSGQxrXjTrRnRQpEowWJlct9xIrnVO3U=
Subject key identifier: D8:2F:0A:DA:5A:5F:1D:70:53:A8:6B:AA:F5:9A:81:9A:87:39:26:6E
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 01A0C8594BEB2D91E09AC4CB7674CF94BD4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number: 0F0D
Signing time: Tue 22 Sep 2026 09:01:30 +0000
Manifest this update: Tue 22 Sep 2026 09:01:30 +0000
Manifest next update: Wed 23 Sep 2026 09:01:30 +0000
Files and hashes: 1: CEtSnynucMTXjmsVQI2XO0Vay7g.roa (hash: 2YbIxKxSxNLbUsVeSSXam6c2lBbX/6A1TDycN6DbUfg=)
2: KfM_Z_Z-SNR188s2cAL37I8urEE.roa (hash: UID52aiMOKJSN+qhsE3djfMdcKj7BbWtDHOsP/vEFqQ=)
3: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: QveSyzpCQzPT6lhj7x7VBUZFAfH6eakoB70wlTbSyGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:4b:eb:2d:91:e0:9a:c4:cb:76:74:cf:94:bd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Sep 22 09:01:30 2026 GMT
Not After : Sep 23 09:01:30 2026 GMT
Subject: CN=d82f0ada5a5f1d7053a86baaf59a819a8739266e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:67:98:80:0b:16:50:91:bb:3a:a4:6e:fa:
84:77:44:5c:20:96:92:08:37:e0:c6:44:05:cd:a5:
0a:58:7e:a5:d5:3e:a6:b4:c4:87:5e:bb:64:14:45:
1d:97:62:79:b0:c6:71:f3:99:5b:c1:99:9a:b9:0f:
35:1e:0c:1b:7a:2e:a5:04:5f:a9:88:6e:fc:89:03:
11:9f:f1:a7:65:28:ed:ea:d9:ec:8b:44:22:de:18:
20:be:5b:43:ed:fb:be:8e:33:02:05:af:44:96:65:
c4:02:d6:31:8f:19:10:c5:77:08:f8:2b:eb:44:fb:
1f:ca:03:63:64:15:dc:ed:e0:2f:8e:18:f3:bc:bf:
7b:d9:a9:7b:6c:ce:ff:4d:49:19:bd:e8:05:39:c4:
d3:7c:a4:6f:74:c3:50:2a:a7:ae:02:cd:96:8b:ce:
82:22:23:96:e6:5b:b2:cf:1e:65:c0:12:7e:92:28:
6d:6a:93:e3:f7:3b:ea:5c:f6:8d:05:db:48:7e:63:
7a:61:b4:1b:9a:53:43:cb:44:0c:43:3b:07:31:a7:
6f:67:39:b4:9e:41:57:44:0e:b4:bd:f8:f6:d9:60:
65:1f:c2:ef:b4:d8:f3:2a:b4:be:0b:cf:e0:86:7f:
d2:da:79:6e:2f:dd:92:1e:71:cf:c8:09:b4:ee:69:
4d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2F:0A:DA:5A:5F:1D:70:53:A8:6B:AA:F5:9A:81:9A:87:39:26:6E
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:da:98:a8:dd:14:cd:e8:28:af:b5:02:6f:72:97:42:29:46:
93:31:24:e0:eb:b7:d9:ad:c3:45:ab:74:5e:45:d7:49:d1:90:
ba:23:97:be:93:84:58:d1:cb:36:75:19:52:7a:53:16:9c:5c:
de:83:9c:09:de:3d:f0:f8:88:d9:1d:c5:a9:ff:18:dd:19:e9:
20:f6:c2:93:22:c5:22:51:7f:bd:18:83:36:8b:62:b4:b1:af:
ce:3b:a2:62:1a:83:a1:48:d1:28:64:70:5b:f4:00:98:ac:19:
bd:36:2e:ef:2b:9c:fb:4f:fa:01:02:db:0d:df:50:b1:32:ac:
06:23:62:0d:0c:13:ed:8f:31:7d:ce:e7:16:3d:38:19:0d:e0:
e0:b3:90:f2:f2:c7:c7:c9:44:fa:cb:54:83:9c:9a:9c:3c:95:
34:cc:07:49:9d:dc:ba:cc:d9:cb:1d:a0:2f:e7:b4:de:ea:2e:
20:9f:15:c7:b8:25:6e:43:2f:ae:18:82:82:4d:d7:07:c8:d0:
de:df:74:ef:c0:73:50:a5:9d:40:78:77:e4:5f:92:ac:fb:14:
f5:e0:05:a1:2a:b6:9d:6c:c4:fe:0e:40:d9:bb:f9:de:8d:7c:
e1:06:14:c9:23:6d:50:53:1b:d4:4d:c4:25:dc:21:a9:31:05:
00:ad:f1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:18:00 2026 by rpki-client