Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
File: rfDfdxFHQeE6F9chPmlWv5YntVg.mft (raw, json)
Hash identifier: 8ujZ9fLqkGbcB7SZ3iK5Vyq6XvFM6JRse7eSP/QEkxk=
Subject key identifier: B2:28:B4:92:B8:E6:5D:81:88:88:76:3A:57:FB:A1:A6:07:10:33:CE
Authority key identifier: AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
Certificate issuer: /CN=adf0df77114741e13a17d7213e6956bf9627b558
Certificate serial: 01A0CAEB75A9F442E77EA36E292E38B83C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
Manifest number: 191D
Signing time: Tue 22 Sep 2026 21:00:23 +0000
Manifest this update: Tue 22 Sep 2026 21:00:23 +0000
Manifest next update: Wed 23 Sep 2026 21:00:23 +0000
Files and hashes: 1: 8eYijGU89HKkHPl1vQkVznR2YWI.roa (hash: GVKbdEH+zbWNIRI6lkz6XipadG7YSN2rD9CEidAiQUs=)
2: rfDfdxFHQeE6F9chPmlWv5YntVg.crl (hash: tMNjDHhlIvNMKpIoX7xFa3kGde6E4EbGimwVF2L71tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:75:a9:f4:42:e7:7e:a3:6e:29:2e:38:b8:3c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf0df77114741e13a17d7213e6956bf9627b558
Validity
Not Before: Sep 22 21:00:23 2026 GMT
Not After : Sep 23 21:00:23 2026 GMT
Subject: CN=b228b492b8e65d818888763a57fba1a6071033ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:7a:c8:e8:15:34:83:fd:ca:ae:77:86:c7:
23:5e:6d:2b:1e:ea:e0:8d:3f:a0:3e:2d:9c:2d:1c:
6f:07:7a:3d:1b:3c:a5:54:82:40:f6:91:53:71:e6:
fb:eb:50:23:79:77:d3:06:d5:90:90:2f:9e:df:bb:
5f:28:1b:0a:96:aa:c5:df:36:0f:59:2a:47:ba:61:
df:df:04:7e:85:51:01:e5:4f:d6:83:1e:e8:02:5f:
87:f6:3e:72:d5:7f:ae:d9:76:7c:a3:ec:56:ff:dc:
70:8e:c5:87:41:75:c5:aa:4a:17:4e:f1:d0:fb:d6:
5f:ea:8a:39:e7:53:58:df:ee:d3:00:64:d4:c3:5a:
61:75:70:1d:42:7f:39:82:c0:be:ce:5f:9f:a3:c3:
03:5b:ef:84:0e:38:f5:b6:bd:2c:7a:ec:4f:d5:ba:
8b:5d:4c:ef:91:c7:5f:37:f4:1d:d6:07:ae:a4:49:
d6:57:fd:44:89:3d:1d:e3:0b:1e:a2:f6:46:0b:da:
a3:17:44:38:12:4d:13:68:35:b2:92:11:88:21:ab:
10:de:d1:34:04:f4:fd:bc:6d:4b:c1:76:fe:2f:ac:
92:bb:96:26:78:9e:b2:c8:81:1e:5d:da:02:e2:bd:
c3:03:3c:9f:f8:b9:53:9c:f3:17:f1:8f:b4:cb:ce:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:28:B4:92:B8:E6:5D:81:88:88:76:3A:57:FB:A1:A6:07:10:33:CE
X509v3 Authority Key Identifier:
keyid:AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f8:aa:c5:13:c1:66:36:9b:dc:3c:7d:24:32:0e:2a:77:67:
e0:67:0a:cf:29:2e:b7:4c:33:ca:8a:91:27:4d:f4:a6:fb:e5:
71:bb:1d:32:75:ae:b9:64:86:0e:72:16:c0:30:5c:b8:98:63:
36:2b:ad:91:00:2d:cb:5b:f7:23:34:6c:55:22:4f:ae:04:6f:
f7:dd:ef:32:56:16:3d:e0:a0:04:f5:6a:b5:99:83:7c:f0:36:
3f:bb:f6:71:15:ca:4c:2a:67:75:48:23:2a:89:cc:5c:b5:53:
33:6e:f8:ab:10:69:f0:25:88:b8:90:26:66:71:17:10:3c:e5:
05:cd:c8:24:03:c6:74:2f:fa:62:ca:b2:ca:92:f5:18:f1:ff:
59:81:aa:d9:82:d6:22:7a:58:77:28:d0:da:9a:ee:03:f6:11:
2c:6d:d4:03:28:b9:1d:a1:3c:86:b2:fd:f8:21:b0:f0:c6:09:
13:62:24:34:52:1d:43:96:9a:a6:3d:37:de:14:74:69:1f:df:
5c:f8:33:2e:f4:0a:e1:f2:f3:5f:87:79:11:20:17:cd:2d:11:
99:12:a0:f5:98:ec:27:90:ea:e8:a6:00:de:e6:89:55:09:e6:
11:7d:b3:49:79:f2:a1:43:8e:e8:5e:56:f2:4a:5f:9e:3b:bd:
5b:b5:22:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:46:26 2026 by rpki-client