Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
File: 0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json)
Hash identifier: OSVhC1ayy1UkNRUBbqZFJr7l3FMXEOZNPsmPAWip9a8=
Subject key identifier: 52:9B:E5:B1:3C:2C:E0:01:0D:F9:C7:C3:C1:34:F3:E0:02:9A:25:E4
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial: 01A0C557F96AEB2BB22FA9833BDB9DF191E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 19:01:11 +0000
Manifest this update: Mon 21 Sep 2026 19:01:11 +0000
Manifest next update: Tue 22 Sep 2026 19:01:11 +0000
Files and hashes: 1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: eHSWTTNHHnPsljlx8odZK7Fzkc+eKXzLKRTkv2qnTKI=)
2: uVyWlFLKciqrsAXXjZQjx39QcNU.roa (hash: jEDtg9ux39nelJUaz7u7+ZJxoa/PnUqwfRMuyqZC6j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:f9:6a:eb:2b:b2:2f:a9:83:3b:db:9d:f1:91:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Validity
Not Before: Sep 21 19:01:11 2026 GMT
Not After : Sep 22 19:01:11 2026 GMT
Subject: CN=529be5b13c2ce0010df9c7c3c134f3e0029a25e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:85:38:01:23:c1:60:7d:8e:bb:fa:6f:50:
b5:4b:48:f5:61:3c:28:fa:e8:f1:7f:b3:4d:87:41:
c0:7d:50:0b:b0:f6:42:b4:ab:0d:2e:3e:a7:04:fb:
35:17:b7:ca:23:2b:da:3c:d1:4a:a3:7f:b0:eb:7e:
6d:53:7c:f0:d3:73:a8:3b:cd:56:2e:6b:68:58:0d:
33:67:e5:f0:1b:e3:6c:13:29:be:a8:e7:e6:d0:a9:
85:cb:bd:e9:5a:ba:1e:52:13:02:c7:eb:cd:fd:bc:
48:a3:33:7e:2a:e9:60:6e:d1:93:f2:34:56:ef:5e:
a7:f0:62:66:1b:3b:2c:ed:8d:14:b2:f2:11:24:0e:
ff:ba:4b:28:5f:aa:85:e2:10:91:8a:b4:ed:79:22:
c7:86:35:05:0d:14:58:f9:a4:85:c8:e3:18:8c:0e:
c2:14:08:3f:50:89:f4:e7:5e:27:eb:ba:b0:49:32:
7c:6e:33:ea:70:18:f8:4f:2d:cf:c3:9b:e9:d5:9b:
a9:01:51:a4:5b:ca:d8:fb:39:6c:87:a6:39:0c:04:
3b:a0:9a:9b:58:c4:d7:0d:8d:42:15:d0:d7:7a:ec:
b3:47:6a:58:34:b2:58:d6:17:49:f3:9c:35:68:a4:
61:3e:cd:f8:8e:40:99:e8:3c:2a:22:93:8c:32:b4:
e5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9B:E5:B1:3C:2C:E0:01:0D:F9:C7:C3:C1:34:F3:E0:02:9A:25:E4
X509v3 Authority Key Identifier:
keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:17:ad:bf:2c:9c:f3:e3:84:8a:08:41:c5:74:50:8f:ec:26:
44:a7:4c:68:8c:16:13:57:ae:59:3e:f2:20:b7:e9:6f:ec:2f:
6a:cd:cc:98:dc:24:89:e3:29:de:f7:d9:91:67:cd:da:e1:25:
43:6c:e4:b4:f6:ae:04:d5:ed:1e:cf:9e:e7:19:46:87:6f:f8:
dc:d7:bf:34:c0:64:d7:d3:97:9a:bb:18:22:57:79:6c:77:1a:
dc:8f:42:0b:64:b4:c0:c7:79:26:79:63:cb:5b:9b:4b:39:b8:
21:67:90:4b:11:eb:99:1d:41:06:9c:c2:6d:12:d6:46:fe:0e:
98:5b:38:c2:93:09:66:f5:6b:8d:1b:e2:f3:92:84:b2:4e:2d:
38:f8:cd:b9:70:e8:3f:3f:f8:08:5d:00:fc:03:0c:84:fe:9a:
7d:43:9a:64:bf:95:77:a7:3e:ae:be:32:1f:3f:2b:37:eb:48:
82:ef:f1:21:36:0b:49:e6:ce:89:e7:46:a2:32:75:d3:93:15:
58:1f:e3:77:83:7e:c2:dc:93:eb:40:cf:88:f6:bc:75:99:ff:
80:a7:66:61:09:bb:53:e3:9c:9c:70:89:ff:a2:98:b2:2e:e5:
b1:45:41:81:64:b0:6b:76:17:86:7c:7d:9a:48:7a:80:26:d8:
c9:f3:e3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:48:41 2026 by rpki-client