Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier: QQzmNLV6Bv2AP8xk4Tq38GfKn79jqPFlINC5xwMLptc=
Subject key identifier: 51:DD:51:67:4D:17:3E:53:8D:80:7B:43:CB:24:4E:7D:AE:A9:30:AD
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial: 01A08A8D4392D79D96AA892E5EC85A419497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 09:01:48 +0000
Manifest this update: Thu 10 Sep 2026 09:01:48 +0000
Manifest next update: Fri 11 Sep 2026 09:01:48 +0000
Files and hashes: 1: Ra_O1tJPqxceyq_rAhiwFMOrKjw.roa (hash: Rmyhdy6TeiiXlYpWyq2MVfXDcJgMeLMhA0axqCrhBSg=)
2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: EwHPhAGn7GfhlG1kSBmMJko/k8beoPKQ9GBRWM/d99Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:43:92:d7:9d:96:aa:89:2e:5e:c8:5a:41:94:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
Validity
Not Before: Sep 10 09:01:48 2026 GMT
Not After : Sep 11 09:01:48 2026 GMT
Subject: CN=51dd51674d173e538d807b43cb244e7daea930ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:cd:9a:af:ae:c7:a4:bd:37:8e:23:a8:3a:
2e:dc:6f:e0:72:a0:f3:df:41:77:d4:cc:45:49:cc:
07:57:d7:cf:25:ea:0c:7b:89:bd:61:d7:db:ee:5b:
a4:7d:90:be:e3:ac:44:82:bb:34:3c:a2:79:d8:4e:
71:36:0a:5c:ae:dd:87:f0:5e:5d:a3:87:3e:e7:4b:
18:6b:c0:52:97:4f:61:39:fd:b3:d1:8a:13:78:e3:
09:5a:a5:61:3e:82:f5:72:1c:94:99:51:ed:f7:4e:
04:fc:ad:43:10:e7:07:b6:8c:09:08:ad:dd:22:16:
db:48:8f:3b:b0:0f:af:c8:36:99:e6:6e:6c:3b:fa:
4c:dc:14:3d:1d:cd:ac:d0:08:da:64:18:91:99:ea:
ba:f3:5c:86:86:3c:41:09:ec:39:98:57:cb:23:e9:
c5:3b:b3:76:bf:9b:59:4b:58:e9:4b:02:e3:8c:b0:
3f:9c:3c:1c:ee:f0:eb:24:fe:69:cd:11:d8:0f:42:
9a:6b:ad:85:50:e7:a7:2b:36:94:e4:82:27:52:3f:
6b:7b:8e:a1:88:12:4e:78:7d:98:2a:c2:24:c5:0f:
dd:df:d6:fe:68:d0:a9:f8:f2:14:d5:dc:34:bb:79:
5e:d6:44:5d:2b:be:62:a0:d2:59:f3:c4:b5:bf:17:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DD:51:67:4D:17:3E:53:8D:80:7B:43:CB:24:4E:7D:AE:A9:30:AD
X509v3 Authority Key Identifier:
keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a1:c3:f7:f9:bf:35:ff:16:fb:12:28:f7:f0:0d:4b:5e:33:
3a:28:f0:39:d3:26:76:5b:bd:50:88:5b:bd:ec:f7:ed:f6:cb:
b7:47:2b:3c:5f:dd:b5:36:bf:9c:b1:0f:c6:f1:21:a3:85:65:
fe:d9:35:4f:35:42:c3:9f:d7:77:fe:f3:3a:64:6a:76:24:6e:
8d:e5:3e:a8:e4:35:67:dd:39:f2:76:0b:3f:2b:e0:04:f6:1a:
31:34:6a:e7:01:48:d8:a3:00:d0:1f:79:bc:80:37:fd:b9:23:
d1:79:2e:d5:a0:96:82:ef:df:9b:5a:fc:0f:3c:8b:a4:93:78:
a5:f1:cb:72:ca:56:1e:5b:0e:25:95:a0:c2:1c:8d:c4:81:a0:
06:92:7e:50:db:0f:68:7f:11:53:98:44:59:30:0a:de:ca:60:
4e:1f:79:ce:b9:42:d1:16:2e:2d:9f:44:c7:f1:83:1f:15:5c:
42:e7:52:cd:7e:d9:ea:89:c6:64:0f:43:2f:6d:5f:f5:e9:85:
16:2e:73:78:83:7b:a8:12:50:dc:a6:ba:39:db:4e:d7:b7:7b:
dd:55:fb:26:c9:2d:22:b8:df:df:4a:e2:e1:f8:e6:9c:4f:8b:
af:bb:95:7c:39:c1:3c:7c:40:e4:5f:ea:f5:14:3e:a9:ce:c3:
0a:61:ce:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:34:27 2026 by rpki-client