Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
File: D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft (raw, json)
Hash identifier: xH8WRDAQOg7nyPoK0BWIGFadp3Q9MGypimNGS3he3uA=
Subject key identifier: C9:38:BB:A8:B1:EE:DE:64:1F:84:CE:1F:F4:18:FE:9F:46:DD:A6:E1
Authority key identifier: 0F:97:E2:ED:1E:92:7D:BF:D8:DE:0D:5E:94:A7:7D:54:C2:DD:00:42
Certificate issuer: /CN=0f97e2ed1e927dbfd8de0d5e94a77d54c2dd0042
Certificate serial: 01A176275922A30244397FF01273A9C28654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
Manifest number: 013B
Signing time: Mon 26 Oct 2026 03:00:52 +0000
Manifest this update: Mon 26 Oct 2026 03:00:52 +0000
Manifest next update: Tue 27 Oct 2026 03:00:52 +0000
Files and hashes: 1: D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl (hash: YNISsCMZYbqb/3CaldVogZHoIVjTyEvMVoa+vscr4ps=)
2: Um6n_idKHhLBJBBzUCl6l1HPrEI.roa (hash: SxF4T3uK56mVfgUvnXBquT7aoBlNGiQk5l7rUMHBbSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:59:22:a3:02:44:39:7f:f0:12:73:a9:c2:86:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f97e2ed1e927dbfd8de0d5e94a77d54c2dd0042
Validity
Not Before: Oct 26 03:00:52 2026 GMT
Not After : Oct 27 03:00:52 2026 GMT
Subject: CN=c938bba8b1eede641f84ce1ff418fe9f46dda6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:b7:8f:c9:35:46:a3:f8:30:70:2c:51:bd:
78:fb:1f:b4:a2:96:13:8f:ba:06:6f:9c:ea:9c:22:
40:b5:2e:8f:d3:d2:66:2e:ad:86:3d:a9:45:de:be:
db:31:69:77:0c:cf:39:03:0c:d2:c3:06:18:35:82:
74:1c:e9:37:d2:14:ca:86:10:b3:35:64:ba:3a:1a:
dc:63:d2:21:e8:f3:bd:07:20:4a:39:14:d7:ad:32:
11:44:e2:17:41:32:7e:b9:6f:e7:44:f3:a0:35:e2:
ab:ae:c8:ed:96:7b:a7:0c:0a:7c:77:7e:4d:4e:2c:
a5:8a:19:96:35:29:b1:9c:c2:f9:f8:f0:a9:a2:cb:
5f:ae:91:d3:35:d6:45:74:a2:0e:a7:dd:7a:b8:fd:
3b:2a:dc:08:5b:7a:8d:ea:1f:cc:bb:bb:57:7c:58:
85:33:da:9f:00:32:9a:b0:1c:1b:ed:7c:ba:d3:29:
f3:ec:0b:3d:94:98:7c:c1:d0:ea:56:85:a2:4e:fe:
29:4b:2f:b1:3f:70:ac:8b:57:59:87:28:64:56:3f:
13:67:30:c6:12:a1:60:db:f8:cb:ef:42:22:b8:09:
f1:7b:81:6e:d9:eb:9b:5b:56:d1:5a:94:84:c7:a8:
58:e3:22:3a:28:46:9c:71:a2:ad:36:e0:c8:38:03:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:38:BB:A8:B1:EE:DE:64:1F:84:CE:1F:F4:18:FE:9F:46:DD:A6:E1
X509v3 Authority Key Identifier:
keyid:0F:97:E2:ED:1E:92:7D:BF:D8:DE:0D:5E:94:A7:7D:54:C2:DD:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2a:53:c3:a2:dc:57:c1:54:f9:31:6d:f3:1d:e8:d6:f1:2b:
d8:c3:41:57:25:77:07:28:8b:d0:97:ca:48:36:17:6f:30:33:
86:44:4c:94:e0:e6:84:6f:22:d1:1c:ca:4d:48:58:de:5e:d5:
e6:04:c2:cc:52:eb:5c:2f:a8:ec:e5:98:90:3f:d2:2b:7a:ec:
ea:aa:1a:75:7b:f7:01:44:c9:33:bb:35:fb:9d:10:54:c8:56:
6c:e8:13:22:b8:66:34:01:f3:37:04:9a:94:4c:61:7e:38:6f:
df:d1:e2:6a:97:15:95:e9:fd:f9:d2:e7:65:5f:f7:ee:ec:d6:
e8:76:5d:43:8f:31:fe:43:d7:3c:c8:28:b2:bb:87:37:ff:21:
dd:40:cf:58:d0:b7:a2:66:5f:5b:13:e7:ea:20:8f:38:8f:2e:
94:f7:b4:72:2b:a8:c4:96:38:49:cf:6f:2d:0b:2c:64:7d:ef:
31:6c:d9:a8:a0:da:a4:58:69:fb:9c:db:78:9b:15:92:42:ee:
3d:84:00:e5:60:08:b6:68:72:ae:45:22:9d:da:c1:63:fe:d2:
04:cc:8e:cf:fd:3c:22:f1:0e:64:9a:8f:33:64:d6:02:0d:ff:
0f:22:99:4e:25:b4:3b:e8:f1:4e:43:02:d5:2b:cb:84:ec:06:
aa:00:21:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:20:29 2026 by rpki-client