Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
File: D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft (raw, json)
Hash identifier: MtQKpI9ZNVxEPuL+6t6gyB4zHwowdyfG+j1FqyONH58=
Subject key identifier: 21:B3:3A:23:4C:D2:88:38:60:2F:57:C3:EA:89:36:DC:94:C8:E6:DF
Authority key identifier: 0F:97:E2:ED:1E:92:7D:BF:D8:DE:0D:5E:94:A7:7D:54:C2:DD:00:42
Certificate issuer: /CN=0f97e2ed1e927dbfd8de0d5e94a77d54c2dd0042
Certificate serial: 01A08C7BE597196BA55F60B3B06631261FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:02:04 +0000
Manifest this update: Thu 10 Sep 2026 18:02:04 +0000
Manifest next update: Fri 11 Sep 2026 18:02:04 +0000
Files and hashes: 1: D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl (hash: AmKElgWYhAHZadBbM0zwuSMin6G8FFaUX/w90LBEcbw=)
2: Um6n_idKHhLBJBBzUCl6l1HPrEI.roa (hash: SxF4T3uK56mVfgUvnXBquT7aoBlNGiQk5l7rUMHBbSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:e5:97:19:6b:a5:5f:60:b3:b0:66:31:26:1f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f97e2ed1e927dbfd8de0d5e94a77d54c2dd0042
Validity
Not Before: Sep 10 18:02:04 2026 GMT
Not After : Sep 11 18:02:04 2026 GMT
Subject: CN=21b33a234cd28838602f57c3ea8936dc94c8e6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:58:13:e8:fc:3f:35:2a:7a:e1:55:cf:c1:45:
2b:58:19:bb:14:8a:cf:70:81:fb:ff:7d:68:d1:f3:
55:69:8f:b4:fe:ab:76:c7:5a:9e:a0:d1:36:ae:15:
59:47:19:b6:b6:95:60:cc:b0:1c:f7:e1:8d:d9:89:
28:00:63:89:c0:ac:45:3a:f3:f6:f2:06:4a:70:c6:
af:f2:d1:63:c6:ae:2e:a5:b3:d8:02:02:c5:2a:16:
ef:06:21:27:7e:db:7a:c1:0b:a9:de:30:22:1c:4a:
bb:0c:4b:53:f3:1e:d4:fc:02:1a:6d:dc:fa:36:2d:
a7:5d:22:f3:5c:f8:9a:73:69:c3:fd:51:89:7d:ac:
89:ff:f1:9b:0d:a8:44:9b:36:af:06:a9:7a:82:ec:
5e:45:13:05:93:6d:10:c1:68:30:0a:f1:41:d6:f9:
d8:e0:12:7c:1b:a4:70:20:9b:49:84:e2:57:73:36:
38:83:08:e6:14:eb:33:11:bd:1a:c0:0b:7c:e2:a9:
2d:47:d2:7f:9c:ee:31:67:75:c4:39:15:19:07:6b:
75:97:18:c4:35:70:03:0c:1b:c5:a2:d0:0a:e3:26:
e8:0b:ae:23:e5:a5:06:b8:1d:c2:c7:fc:b2:48:91:
18:fe:b2:00:01:7e:d5:e4:f7:84:62:d6:52:a9:c4:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B3:3A:23:4C:D2:88:38:60:2F:57:C3:EA:89:36:DC:94:C8:E6:DF
X509v3 Authority Key Identifier:
keyid:0F:97:E2:ED:1E:92:7D:BF:D8:DE:0D:5E:94:A7:7D:54:C2:DD:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ae:7a:8f:25:1e:5f:92:ee:73:cc:3f:99:71:5b:23:6c:2b:
b7:fe:b3:ac:8d:b7:76:ac:ff:86:f7:66:3b:c1:d0:93:3d:4b:
15:1f:58:21:e0:7b:42:ed:d7:58:97:4f:ec:8c:42:6c:3d:e9:
f3:bf:7c:2c:4f:5e:41:95:68:a1:32:c0:8f:79:f2:2a:9a:a1:
b4:8e:a6:64:93:2f:a0:e9:8b:08:65:9e:c6:91:0d:63:71:e0:
b1:64:71:46:d0:44:6c:61:1b:71:8b:4d:c5:9b:96:17:a6:25:
99:4c:57:eb:61:fa:93:2e:ca:04:49:ac:0f:1f:51:ea:5c:2b:
9f:51:2e:55:15:10:0f:af:0f:ab:87:75:f4:73:79:e9:ee:29:
50:1a:b8:5a:a8:cb:b8:3b:c3:8c:19:a9:98:80:1d:c2:3a:13:
14:b5:d8:c0:62:62:57:04:d2:f8:1e:09:f9:36:b3:ab:ec:89:
90:06:62:0c:c0:c0:eb:04:fb:dc:eb:58:cf:81:15:36:fe:7f:
27:41:4c:8c:33:50:af:76:ea:5f:23:c6:47:e6:2a:87:33:59:
87:86:b8:ad:aa:f3:f9:f6:eb:e6:7e:c5:88:d3:d1:9d:4c:14:
96:48:b8:90:1d:0f:3c:77:70:2c:4b:80:7f:89:bb:1e:a3:0d:
da:b1:82:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:40:32 2026 by rpki-client