Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: nUuzed8pPdSnoPssJgLXVfWJKyGveFCnaneE4J0nTY4=
Subject key identifier: 34:8B:20:DE:78:FB:FD:F9:45:8C:DA:D2:7A:85:64:93:86:5C:D4:0E
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 01A128B0FEB4E975D27C96D4DEB6996ECB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 18BD
Signing time: Sun 11 Oct 2026 02:00:50 +0000
Manifest this update: Sun 11 Oct 2026 02:00:50 +0000
Manifest next update: Mon 12 Oct 2026 02:00:50 +0000
Files and hashes: 1: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: WdxKuiaCVWuX0pvXipS0IQwqN4nSXNAg2MAbEMMMWAQ=)
2: UcXFjwyhaWT6jJkzoQqS8tFWKQc.roa (hash: slGaHxdN7Oqozliq50gNi9OxqgfS+8LclDE77QIbzI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b0:fe:b4:e9:75:d2:7c:96:d4:de:b6:99:6e:cb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Oct 11 02:00:50 2026 GMT
Not After : Oct 12 02:00:50 2026 GMT
Subject: CN=348b20de78fbfdf9458cdad27a856493865cd40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:df:d8:c4:e0:5f:a2:32:ed:3a:1f:bb:48:
64:a0:3d:71:6f:90:3a:79:5a:74:89:ce:d6:d2:77:
3a:c5:5b:1a:2d:3f:b5:ed:0e:3c:2e:03:d2:c3:78:
a4:8b:ad:de:31:ef:24:a2:73:b3:5b:2a:ab:70:0a:
4b:30:17:1b:4b:d0:a0:54:ed:9f:73:26:71:64:ec:
62:d8:43:cb:da:ca:b1:42:f6:38:38:c3:48:15:9c:
15:1b:8f:39:82:ab:24:69:42:80:e1:14:82:b7:f6:
0a:2e:d5:61:f3:f9:e2:a2:05:a0:88:a3:f7:98:b4:
5d:ea:4a:9d:92:46:b7:ed:a0:26:93:3f:4f:43:f1:
3a:15:dc:e7:17:8a:36:5c:1d:12:76:88:b2:3d:3e:
88:e2:a1:ab:8d:b6:bc:49:31:12:18:84:07:b7:cc:
d0:8c:3a:88:72:0a:11:56:7e:f0:b5:dd:c3:3e:52:
4e:37:44:80:85:06:c2:24:78:56:a4:c3:4c:c6:42:
fd:0e:76:78:52:87:f5:28:a1:c0:83:b4:f6:68:92:
40:44:be:b2:07:70:78:bc:10:2f:a9:a0:98:92:96:
f0:9e:00:b0:d4:22:73:0a:91:b9:14:cc:ed:01:0c:
5a:37:05:01:77:bd:94:f3:0e:c8:ba:f1:02:c2:cf:
f6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8B:20:DE:78:FB:FD:F9:45:8C:DA:D2:7A:85:64:93:86:5C:D4:0E
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4c:58:04:96:6a:31:a2:29:fa:83:81:be:71:68:e3:99:4e:
a4:92:73:48:6a:8c:ed:f5:99:48:20:87:be:09:8f:90:a9:33:
83:44:1e:84:cf:58:21:42:f8:e8:22:45:64:cb:4a:6c:bb:a5:
84:e5:4b:62:02:f2:36:30:bf:5f:55:d2:57:55:74:7e:f7:a5:
33:2e:51:9d:fa:af:71:6f:cb:4d:7a:72:45:ad:dd:db:72:ac:
66:82:92:f0:88:da:9f:e0:9d:27:de:af:19:b1:98:41:05:89:
e3:3a:ca:ed:35:fc:47:a9:c0:08:b6:39:d4:21:1f:bb:71:4e:
1c:23:a6:53:c1:e8:60:ab:bc:34:26:fd:94:bf:2f:30:b9:60:
52:11:4f:ed:99:7e:6f:11:14:45:04:7b:f8:78:41:ca:f4:f2:
4e:81:77:85:32:fc:31:31:aa:61:c9:52:ac:5f:36:84:f1:e9:
76:9e:9f:74:65:38:d7:12:51:75:75:f6:05:a1:44:0f:a3:58:
6e:88:6a:6a:1f:85:f2:2f:89:01:8a:d5:00:53:89:30:9e:23:
86:08:0c:12:6d:1f:17:35:cb:44:bb:02:f3:cb:9b:9a:12:9c:
76:ae:26:2c:ff:82:f8:3a:4a:bd:99:d7:79:a2:b8:50:05:5a:
a8:c7:04:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:04:30 2026 by rpki-client