Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
File: d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft (raw, json)
Hash identifier: hsRjPvrkXKNlAX47zBR5jSsRBqJi6yUak/4xEXstIZg=
Subject key identifier: 3C:28:8D:D5:6C:D8:5C:DF:3A:66:8B:E4:0F:42:B4:07:99:DF:BE:08
Authority key identifier: 77:85:37:BD:CB:35:32:0C:78:D5:98:19:A5:0B:36:1E:B9:58:20:B7
Certificate issuer: /CN=778537bdcb35320c78d59819a50b361eb95820b7
Certificate serial: 01A0CCDA18C1D64FEF367BD2718C1E21854C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
Manifest number: 0184
Signing time: Wed 23 Sep 2026 06:00:40 +0000
Manifest this update: Wed 23 Sep 2026 06:00:40 +0000
Manifest next update: Thu 24 Sep 2026 06:00:40 +0000
Files and hashes: 1: K2Dc5OBuZ-3GVexCh6zp51MBUis.roa (hash: c29k2Uu3E6+pH0/RU1RBK1xurercCYLwxnC+Kb8waAo=)
2: d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl (hash: 9MPBlgSvk5gQ9H4yPIDaQ/WtTwEwxL8CCKXvmMWdGxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:18:c1:d6:4f:ef:36:7b:d2:71:8c:1e:21:85:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778537bdcb35320c78d59819a50b361eb95820b7
Validity
Not Before: Sep 23 06:00:40 2026 GMT
Not After : Sep 24 06:00:40 2026 GMT
Subject: CN=3c288dd56cd85cdf3a668be40f42b40799dfbe08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:bd:61:30:34:fe:b7:fb:75:0d:35:a6:16:
94:a1:75:6f:01:56:85:2a:f5:1a:de:93:a1:2c:04:
63:e1:1a:d4:1c:a2:6d:c1:28:ff:ae:34:05:23:e4:
9f:2b:d1:7f:53:47:db:2f:6e:70:7a:cb:cd:5d:60:
33:00:80:9d:b8:6e:e7:71:76:af:24:c1:a8:de:e6:
f7:9a:a3:76:b0:33:9e:a1:32:ab:4a:e9:f9:db:db:
e7:55:3b:7e:32:c6:c0:9e:0e:e7:d5:b5:73:86:f4:
a3:b0:40:1c:fa:80:38:57:6b:ee:1e:86:d2:41:2b:
0c:f7:7d:fc:ff:3c:40:ae:67:9d:68:4f:fb:de:b8:
b4:31:3d:c7:a5:87:5a:38:ab:5a:73:3c:8c:7a:72:
55:bb:38:2b:46:7d:8c:a9:01:20:0d:dd:22:1e:a8:
fa:db:db:39:92:2d:84:5c:42:b0:84:8b:c5:56:ae:
9a:eb:43:0e:4b:dc:bd:23:71:76:6c:de:c1:25:51:
be:1f:f3:c0:7f:50:3b:97:72:be:88:8d:30:b7:84:
f6:53:71:29:2f:05:35:9e:14:fb:c0:de:7a:df:07:
9a:25:08:4e:dd:d4:80:92:a7:29:27:f6:9e:65:79:
ee:50:da:ab:59:f9:90:30:c6:0a:e5:3d:73:6a:77:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:28:8D:D5:6C:D8:5C:DF:3A:66:8B:E4:0F:42:B4:07:99:DF:BE:08
X509v3 Authority Key Identifier:
keyid:77:85:37:BD:CB:35:32:0C:78:D5:98:19:A5:0B:36:1E:B9:58:20:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4U3vcs1Mgx41ZgZpQs2HrlYILc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d5d1cd-0027-40af-819f-83a22a4faa4f/1/d4U3vcs1Mgx41ZgZpQs2HrlYILc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c3:82:35:02:fd:a3:04:4b:eb:cb:fe:45:e6:f5:1a:96:b5:
81:1a:1a:d3:cd:e1:19:ee:7d:3b:ef:0d:bc:36:b3:e0:dc:bd:
92:aa:cd:7d:60:e2:4c:b5:bc:e4:09:80:2d:43:0e:4f:f8:0b:
d4:f7:01:3e:85:a1:cf:f9:76:9f:c9:15:bb:57:67:4a:1a:4f:
67:4d:d2:c0:97:5f:a0:1f:15:9d:54:35:dd:64:b0:7c:e3:56:
fc:64:7a:60:59:17:65:68:b0:99:a8:92:76:58:8b:64:c3:41:
50:a1:6c:88:98:ea:9a:fe:9d:5c:4f:8d:6b:4f:c9:b1:05:70:
2c:76:b5:59:fa:ec:de:53:46:e3:d9:97:55:fe:d8:e4:68:ed:
c9:ee:2a:06:88:11:95:31:65:17:75:84:e8:79:80:b0:ea:87:
b0:fb:bf:f8:be:d7:f2:88:2c:b7:22:53:26:4e:06:53:40:30:
de:0b:14:e2:03:6e:9a:2b:8f:89:bb:9a:b7:8c:b0:b5:6b:3c:
cc:88:55:5c:79:08:91:e7:67:5e:69:ea:44:d1:4c:81:eb:88:
81:65:f7:cd:1a:5b:ae:76:a7:e3:6a:26:1b:a1:c2:4d:47:c4:
41:1d:d0:81:15:f3:70:17:2c:44:dd:c2:97:91:4e:b2:01:2d:
af:4d:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:36:33 2026 by rpki-client