Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
File: 23DOek5uSrOk6p8IH1kupfbSuao.mft (raw, json)
Hash identifier: jkZhueLPOeC/K2zPzErzRTpOV+d9721Ep7/xfuPyUEE=
Subject key identifier: E7:F4:DF:02:00:76:B6:CF:DB:9A:10:BA:B1:DA:E8:94:30:33:10:5F
Authority key identifier: DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
Certificate issuer: /CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Certificate serial: 01A0CCA33852C144912F675BA0A52E062BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
Manifest number: 0AAD
Signing time: Wed 23 Sep 2026 05:00:43 +0000
Manifest this update: Wed 23 Sep 2026 05:00:43 +0000
Manifest next update: Thu 24 Sep 2026 05:00:43 +0000
Files and hashes: 1: 23DOek5uSrOk6p8IH1kupfbSuao.crl (hash: qKE7hYZTIVpSJCzErI7qeH/vilSnvdMKW2HTA0ZKAY4=)
2: hhh3z06Bpe2m47ehC44Gk6XsxWY.roa (hash: D+hS8HY9ljD+1P/aopr0G/yuhchBVZY0zZMSPMrBOWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:38:52:c1:44:91:2f:67:5b:a0:a5:2e:06:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Validity
Not Before: Sep 23 05:00:43 2026 GMT
Not After : Sep 24 05:00:43 2026 GMT
Subject: CN=e7f4df020076b6cfdb9a10bab1dae8943033105f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:ca:e8:7f:1e:e4:1a:94:87:95:94:e7:b5:
85:dd:fc:38:01:51:24:63:83:95:f2:8e:c1:39:d4:
64:af:97:c7:b9:70:84:68:47:88:4a:9c:fb:a4:5c:
c7:4f:06:0c:8d:b9:02:52:55:42:27:9f:7a:df:ec:
79:88:3c:3f:7f:c6:31:87:78:f8:b2:a0:c8:64:62:
d7:83:5b:91:dd:db:20:20:e0:d1:ad:9c:ce:72:2b:
5a:bb:eb:57:89:99:23:f2:04:09:ee:fa:c2:1d:c6:
d8:c6:3d:7c:ae:50:60:37:9c:80:a8:ae:ad:ff:fb:
4b:42:aa:7b:77:43:c0:bf:f3:aa:16:26:9f:06:7b:
1b:18:0a:89:c4:b6:02:d4:e3:68:c1:46:fc:f4:9a:
6c:5a:5e:25:ef:c5:95:b7:ea:43:b2:ad:2e:1a:02:
fa:14:13:fd:93:62:62:54:ee:b6:9b:18:d1:4e:4d:
9a:58:2a:49:53:91:46:98:b2:a3:23:9b:5e:ac:2f:
b6:00:9e:4e:33:d4:47:c2:b7:ab:f7:4c:55:ff:05:
c5:99:68:e4:a6:7d:d0:c3:a1:db:5f:1e:43:06:fc:
81:b3:b1:ff:ac:cb:6c:20:c5:15:3b:f5:61:3f:63:
ab:7a:cf:14:e1:68:08:00:a0:8d:33:09:45:11:42:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F4:DF:02:00:76:B6:CF:DB:9A:10:BA:B1:DA:E8:94:30:33:10:5F
X509v3 Authority Key Identifier:
keyid:DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:46:02:8d:e2:6e:3e:f3:ed:37:dd:13:24:99:86:57:5c:db:
3e:0c:c5:5c:8b:b9:0d:49:e7:a3:95:24:69:72:a1:d0:84:2e:
25:78:f9:2a:dd:2c:df:b2:41:a1:08:1d:d1:b1:ab:c1:0b:48:
0f:77:11:7f:1b:ad:ac:4f:49:27:06:04:fb:31:21:e3:c9:c3:
20:29:c9:2c:56:00:29:7a:f6:f9:6f:68:32:af:88:6e:6f:17:
de:79:4c:d0:8c:60:88:47:69:5d:a3:47:7f:03:f4:d2:21:50:
52:7d:36:ad:a7:c6:50:39:77:36:7f:09:a1:be:83:e5:ad:f3:
a9:5e:80:f4:59:7b:eb:b9:7b:42:4d:7e:9a:7e:d0:63:78:60:
94:54:a0:44:c0:ad:55:19:8a:a5:76:6c:9e:ad:69:f1:22:b2:
7f:ec:db:7e:b2:d3:c3:e1:22:7f:9f:65:81:42:0f:1f:04:a2:
c6:10:02:30:e1:a2:36:d6:9f:75:cb:38:5f:b0:fe:34:9f:b2:
ac:84:35:65:06:70:15:04:da:c1:0f:df:99:16:0b:21:27:88:
b9:a3:6e:af:65:75:69:32:54:ea:7b:0d:0c:b3:b6:23:92:fd:
42:69:bc:7e:e4:60:03:0f:19:24:8e:3d:b4:63:07:56:05:36:
7a:c9:6f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:01:30 2026 by rpki-client