Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier: hrqcmrFrt5N+T/Gq0oC7LBY37x5BJwRmeUp4Q6LEqPI=
Subject key identifier: 93:89:2F:CE:8F:1D:C4:7C:D6:7C:97:02:AF:75:0F:49:2B:4F:BC:BE
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 01A0CDEC59AF32297671CFCE4F37AA893A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 11:00:13 +0000
Manifest this update: Wed 23 Sep 2026 11:00:13 +0000
Manifest next update: Thu 24 Sep 2026 11:00:13 +0000
Files and hashes: 1: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: dZann70JB7ciy0b0a7K2sqm2tpU8KpuZJAMUou8yiCc=)
2: g7fYHM51W9swYseMkrEDa3soWXY.roa (hash: k9K4BHL4fbJsHQSn19Joe+3Hon27U4MZ6GclcBUO56E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:59:af:32:29:76:71:cf:ce:4f:37:aa:89:3a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: Sep 23 11:00:13 2026 GMT
Not After : Sep 24 11:00:13 2026 GMT
Subject: CN=93892fce8f1dc47cd67c9702af750f492b4fbcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:8a:0b:12:e1:28:cb:ea:b7:90:9d:32:de:
f0:5d:67:be:93:50:97:a7:57:be:50:93:4d:d2:ac:
2c:63:37:8e:41:0d:b9:2a:50:70:8a:dd:d1:7e:ba:
fd:5a:e2:56:ad:bc:e7:f3:54:76:a3:46:3a:3e:c0:
3e:1d:38:7e:dd:b5:b9:2b:ad:23:8b:95:5c:55:4f:
81:21:9a:19:be:1a:ff:d7:f9:81:ae:4c:7c:2a:28:
cd:48:7c:ba:df:49:a2:7c:41:d2:63:dd:22:b8:9f:
1e:17:9b:36:06:4d:d7:59:7a:9f:b2:2a:90:9f:9c:
c5:d0:9a:d2:3f:80:bb:8d:d3:e1:0a:52:fc:39:55:
87:4d:82:a2:bc:76:98:01:7f:62:ee:70:40:51:f7:
e7:46:34:d2:a7:24:1e:86:8e:9e:00:fd:85:aa:66:
80:93:45:97:5b:c4:de:98:11:63:2a:d6:f3:c1:24:
71:33:33:6b:d5:0e:a6:2b:64:84:eb:23:1e:b9:85:
62:89:26:8f:dd:b3:48:d8:8f:f0:c5:e6:dc:d5:83:
c4:64:9f:ff:03:29:c6:ae:a1:38:6a:20:0f:0f:7a:
ba:2c:b5:87:4a:fd:b1:83:91:2b:76:d4:9d:97:12:
fc:a0:82:3a:1f:e2:87:65:bc:69:c7:c7:74:b6:ae:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:89:2F:CE:8F:1D:C4:7C:D6:7C:97:02:AF:75:0F:49:2B:4F:BC:BE
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ef:0c:9a:61:62:6b:11:b0:28:69:02:f3:7c:e9:d8:5f:47:
7d:16:ed:f0:37:c2:00:62:56:6a:6d:8d:13:73:33:67:77:e4:
f6:4d:bb:e8:55:16:b9:e2:65:8b:e7:4b:16:af:b8:d2:6a:aa:
7b:6c:f1:fb:01:5b:a2:2c:e7:88:72:0a:56:99:b4:1c:51:e5:
69:a2:ce:4e:bb:7c:d5:6a:92:42:3e:1c:f6:c8:09:af:5e:83:
5e:8c:c3:ee:30:34:a6:47:2e:2a:70:3a:8d:ec:a9:16:a1:73:
b1:fb:fe:72:65:df:0c:02:a1:71:17:d5:66:3b:a5:c6:90:19:
ff:7d:de:25:58:2b:43:38:2a:4f:23:56:d4:84:ff:5a:64:49:
29:e6:a8:1a:1d:06:7d:53:04:03:da:60:af:19:82:22:59:5d:
7c:98:ea:6e:46:05:a7:58:c2:42:b5:77:5c:12:2e:63:cd:f2:
5f:88:05:c2:47:d7:9a:52:3c:8f:cb:f6:4b:38:4a:ab:3c:77:
67:bb:7c:dd:17:b0:c1:32:7c:36:69:46:78:95:6e:28:02:be:
9f:40:97:0b:26:9c:28:9e:ed:be:82:d4:59:75:87:76:10:63:
72:a2:25:38:97:75:18:26:72:af:26:20:e8:ee:75:b8:80:ca:
bd:be:a0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:26:50 2026 by rpki-client