Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
File: D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft (raw, json)
Hash identifier: jLLFaX7s2wVWCZosWRib2BBVBFYV2bcd7GsJOXvhkRs=
Subject key identifier: 3C:CC:48:E5:A0:08:48:D5:CD:AA:06:B5:19:A0:C6:FF:3B:8B:A8:C4
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial: 01A06F1517EA0CF9F8B2F2A2CA96E7063F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
Manifest number: 1A40
Signing time: Sat 05 Sep 2026 01:00:48 +0000
Manifest this update: Sat 05 Sep 2026 01:00:48 +0000
Manifest next update: Sun 06 Sep 2026 01:00:48 +0000
Files and hashes: 1: D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl (hash: xL1Us4awnS8EpsR+Ov2zJvmvcOrV3ILw26wmsCqRH8Y=)
2: MXQ5fKgl8ZsaQZNHO6pbBu5IdxA.roa (hash: pI/grpKRBsBNOQ0aspRfRJgjD1ZrwmmpLNeau2QbWVA=)
3: Zx5o8v2ZCe9pK1Sbhq2vLi9k9J8.roa (hash: YgGRcc+fQUbTuFLOD9KlYqEbp3CkMEvOBhBenJB52Ic=)
4: jjZr6ibloVwf3j-xPGaypuYc1To.roa (hash: JuRrRALm0fnkDTSDsHBV/GbEKFpe95uRtT0ysTR3ENk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:15:17:ea:0c:f9:f8:b2:f2:a2:ca:96:e7:06:3f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
Validity
Not Before: Sep 5 01:00:48 2026 GMT
Not After : Sep 6 01:00:48 2026 GMT
Subject: CN=3ccc48e5a00848d5cdaa06b519a0c6ff3b8ba8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:ee:80:b5:41:c0:09:3c:bc:ef:dc:58:fe:
76:cc:af:71:26:63:d4:13:f0:25:eb:86:7b:86:11:
e1:71:45:b3:39:47:c2:9d:94:b1:f5:46:19:4d:e6:
ed:d3:20:f5:7c:83:03:d0:71:51:10:d8:23:f6:ce:
22:29:05:6e:be:90:5b:20:7e:67:a5:cd:72:1c:89:
43:4e:85:79:2b:8a:88:b2:72:76:01:40:61:05:87:
a1:ec:7e:02:88:80:e6:1d:19:37:26:ac:59:b6:9c:
5d:0a:f4:6f:b8:bc:17:80:5e:d9:9a:e8:2a:97:52:
8b:8e:d1:09:cf:1a:98:99:d1:3f:13:8a:0c:94:13:
3c:1a:60:a8:2b:5f:3c:1f:7f:39:cd:24:23:64:45:
25:c0:52:e2:77:76:0d:e9:94:2b:85:47:f1:6a:6a:
bf:77:84:46:27:25:1c:71:07:c2:de:1b:c7:e0:eb:
d5:ab:e1:fe:a6:fd:f4:f2:d8:28:f4:64:e5:3f:09:
58:ed:f4:72:51:16:2d:3d:62:a5:0d:ed:bf:8a:71:
5d:c7:44:05:bf:91:b1:83:22:40:d8:b4:b8:ba:26:
4f:24:33:f6:c5:b2:53:9f:a9:22:2a:10:e5:c1:54:
e7:3d:e6:fd:14:f6:a7:57:f3:06:94:7c:3f:49:00:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CC:48:E5:A0:08:48:D5:CD:AA:06:B5:19:A0:C6:FF:3B:8B:A8:C4
X509v3 Authority Key Identifier:
keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d6:04:20:19:67:5b:30:4d:5e:76:b9:54:98:72:18:e9:16:
60:63:c1:c9:d5:87:b7:e4:d6:23:d7:14:99:b4:ac:e1:fc:65:
0f:20:a3:c0:2a:56:5b:9f:bb:e2:ca:7d:6f:86:c9:a5:60:f5:
af:81:f7:3e:d5:37:72:13:bd:3f:df:12:7c:bc:1f:2a:49:d4:
8a:70:ce:4c:d6:d9:34:ff:42:a8:ff:12:77:bc:37:a0:1c:c6:
6e:63:3c:d1:bc:eb:ab:9d:d1:81:87:d6:30:02:71:b1:44:3e:
c2:c1:41:e5:ba:16:e0:0c:cc:04:01:3d:56:55:7e:f3:a0:61:
e6:9a:a3:60:96:c2:d1:80:3f:33:68:c9:60:37:13:55:eb:c2:
b6:d0:bf:f0:d6:3d:16:6e:96:0d:00:a3:22:61:55:a0:ed:3b:
e9:9d:3e:c7:80:56:43:0b:8d:e9:e1:ac:d1:bb:ba:fc:db:78:
91:e9:02:c2:aa:1a:54:09:3a:43:5a:5c:c1:67:6b:c9:5f:99:
19:af:4b:73:7f:8c:f7:82:9c:e7:9a:11:24:07:c4:76:40:58:
2e:b0:8f:e3:fe:ad:8a:fc:0e:d7:1a:45:40:3c:7a:a9:cb:ae:
09:fb:90:58:19:51:aa:50:65:ad:62:d4:59:48:9a:d1:d9:eb:
e7:8a:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:30:47 2026 by rpki-client