Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json)
Hash identifier: eB4YoRsfKZ3zXqoYhqvKsiqAk03J6MkXbttFCTJpp+Q=
Subject key identifier: EA:64:5D:7A:5B:B0:01:77:DD:B8:25:D7:91:A0:BB:97:0D:F0:33:7E
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 01A08DC4318A33958EA975F998AC7602014F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
Manifest number: 1A4A
Signing time: Fri 11 Sep 2026 00:00:40 +0000
Manifest this update: Fri 11 Sep 2026 00:00:40 +0000
Manifest next update: Sat 12 Sep 2026 00:00:40 +0000
Files and hashes: 1: B6KgFpwvViQTEk9Dmhs8MfS-w7s.roa (hash: OhVWCZDoCQizES2xkeCkzPUeD4jK/eG28KZNwsfJC3Y=)
2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: QvlqfO93DGIWvhAchRkvyoTjmwmN476Qx6fkcSzC1MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:31:8a:33:95:8e:a9:75:f9:98:ac:76:02:01:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: Sep 11 00:00:40 2026 GMT
Not After : Sep 12 00:00:40 2026 GMT
Subject: CN=ea645d7a5bb00177ddb825d791a0bb970df0337e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:46:37:1f:6b:0e:92:e8:13:98:a2:15:3e:
a9:14:4e:dc:98:13:ff:67:46:97:74:58:15:c3:a1:
e3:c6:c7:0f:1c:09:f7:b2:b6:74:a6:63:c6:b0:e4:
0e:a4:82:af:22:f8:ce:78:64:eb:e0:35:b6:f2:94:
11:9f:14:c4:c2:6f:8d:0b:be:ff:f2:7f:1f:60:3c:
68:aa:52:7b:25:3b:3b:04:4c:09:84:7b:6b:ef:3d:
ca:08:19:20:e7:c9:73:8a:03:de:8d:52:12:a9:28:
c6:cf:60:a7:1e:6b:dc:47:bf:53:eb:1f:fc:c8:2a:
8e:7a:6a:17:a3:1e:fe:3d:1e:5e:3d:e3:d3:a1:a2:
9a:e6:da:2c:d0:7b:dd:ab:a5:55:cd:39:a8:d6:cb:
a2:8c:6c:87:78:38:71:31:b0:83:c2:e0:95:cb:d1:
68:b4:f0:6b:78:2b:9b:d9:9b:09:88:06:8c:43:11:
0a:f4:cf:d9:42:05:b6:f4:6d:19:50:53:9f:a6:85:
5a:28:7f:2c:4c:fc:6b:e6:95:69:3c:15:27:56:13:
62:f3:8e:ae:af:bb:f0:3e:74:87:46:a7:85:f1:9a:
b0:07:53:86:13:a2:b5:a2:ef:08:ca:64:8b:e3:e0:
17:78:40:16:f8:10:b0:63:17:67:50:bb:bd:e7:b5:
00:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:64:5D:7A:5B:B0:01:77:DD:B8:25:D7:91:A0:BB:97:0D:F0:33:7E
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0f:a5:63:8b:27:f0:47:ba:d1:6d:e5:34:f9:36:93:5c:7d:
6b:66:c7:3f:f9:8d:56:fc:d0:61:97:88:7a:6c:13:3f:a0:6f:
1f:ab:ad:34:b5:a0:77:72:1c:b1:2f:f0:51:81:0d:d6:5d:c2:
be:44:db:af:54:72:d1:94:2a:27:90:09:3c:af:bd:de:8f:87:
f7:1e:33:94:7f:70:89:2d:a6:4e:0f:ac:84:3d:a0:21:da:2b:
c8:80:3f:ed:bd:98:f1:d4:1a:d5:01:37:6d:93:a2:e9:fd:ca:
9c:e4:30:b2:22:0d:62:f4:8e:6d:5c:5b:2f:0b:51:56:de:a7:
47:2d:3b:da:7d:35:98:e9:a3:ca:ad:d6:a6:10:f6:a6:52:6c:
d6:2a:8c:cb:65:ca:32:f3:c3:ee:25:e1:6b:d5:ca:c6:da:95:
f9:a8:1c:b9:cd:08:bf:f2:e8:7a:32:7b:eb:31:63:70:4b:2d:
8b:70:b9:90:70:3d:47:03:a2:ef:08:a6:f5:9f:a6:46:d3:5f:
fd:42:45:8f:30:10:ee:4a:87:63:e0:a6:40:1a:12:dd:c2:4c:
1a:02:79:7e:65:19:10:83:16:27:fa:20:f2:ff:04:10:85:26:
69:f2:b4:e3:e2:04:1e:5b:7b:b4:f3:bd:d3:17:7e:60:3c:b0:
93:69:25:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:31:42 2026 by rpki-client