Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier: wwrXtbHwyxIgfAJv1fpjrDo8lUokPrHGDySt+Fb5dns=
Subject key identifier: A8:64:DE:45:9B:08:30:F5:77:44:AA:75:2B:CB:FA:D3:6E:DD:39:17
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 01A08CB1E8BFB45149E622C383A84D5FADF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 19:01:04 +0000
Manifest this update: Thu 10 Sep 2026 19:01:04 +0000
Manifest next update: Fri 11 Sep 2026 19:01:04 +0000
Files and hashes: 1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: Kv9PNM5/reGM9ERJ8Vw4ypcdfzFq5pvC2vsuDkNqqi4=)
2: mQsjU1zOjVRO_u3D1WDC_GA_q4U.roa (hash: 4af//0/sTljaocW55fj5PkOIaVuuWa8S7DrXdP1GzbU=)
3: oFwZbtA1lxypnx_w-x5XCq34vRQ.roa (hash: i/Rl9TaZZIbdRkmJK6JnEtSg149s52oPIfIzhWvJ8BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:e8:bf:b4:51:49:e6:22:c3:83:a8:4d:5f:ad:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Sep 10 19:01:04 2026 GMT
Not After : Sep 11 19:01:04 2026 GMT
Subject: CN=a864de459b0830f57744aa752bcbfad36edd3917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:01:19:97:1f:e6:50:c6:aa:ed:e5:b9:4f:
98:75:98:20:52:db:40:76:ab:17:09:5c:ef:90:8c:
0d:da:c8:35:41:d6:64:a2:f2:51:ed:69:28:a0:ec:
7f:33:2c:b1:c4:21:b9:4d:bb:9f:05:cd:45:61:53:
ac:35:c2:f5:c8:e1:b4:0d:6c:f2:63:94:82:e0:ed:
24:51:bb:84:a3:21:2b:09:3d:bd:a9:be:c7:73:d5:
c3:6c:48:ea:11:a7:7e:70:b0:f9:d4:0f:78:83:23:
de:2a:20:d9:0d:9a:fe:98:1b:e1:d1:3a:5a:d5:26:
76:4b:8b:74:dc:86:8b:64:c2:a7:5c:1c:d8:a3:75:
88:56:14:16:60:c8:d5:2f:7d:77:a0:e2:a9:a8:76:
36:60:fb:73:88:95:2d:c3:be:96:a5:52:b4:ce:18:
f2:b9:c7:8e:5f:64:c5:89:e5:c7:fc:27:c0:5a:b7:
27:2d:07:ab:91:59:7b:91:a1:3f:c1:73:c2:5b:6c:
28:a0:e2:14:03:86:25:2d:a7:ee:e1:dc:1e:c4:3e:
47:47:17:36:20:e8:cb:f7:7a:91:e0:9b:64:5c:dd:
3d:ee:57:3f:5f:15:ae:70:ef:15:37:3a:c0:4e:8d:
99:08:0c:7a:ff:35:b8:e2:cc:72:d4:09:99:de:54:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:64:DE:45:9B:08:30:F5:77:44:AA:75:2B:CB:FA:D3:6E:DD:39:17
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:af:70:da:74:30:d8:d4:45:8e:40:63:2b:93:7c:48:1d:98:
34:a1:d5:8b:ed:0c:34:f6:12:85:20:81:f4:fe:1b:a3:d9:d6:
88:7a:5c:d5:30:78:e5:15:99:25:ae:c1:78:20:b8:5a:a1:55:
5c:58:a6:7e:bd:fd:97:39:5a:b3:9a:12:8c:db:85:5e:d9:cc:
73:eb:fb:0f:d5:3b:96:61:73:c8:db:a2:34:4e:f5:60:c1:e6:
39:10:59:5e:3b:a7:0e:63:40:da:81:59:95:25:34:86:2b:84:
7a:d7:4f:a3:75:c3:13:db:6c:6c:d4:0e:c1:b8:79:62:c9:90:
97:d4:e9:9b:67:8f:12:bd:07:f3:8e:a9:25:a7:ea:69:e8:f0:
17:f9:87:e5:46:f4:ca:e9:0e:86:5d:da:6a:aa:dc:f7:9a:fd:
a8:b3:b4:a1:18:1c:38:be:cb:72:c4:92:31:38:4a:59:48:86:
ee:99:be:d9:ef:36:55:d4:8b:14:a6:e0:47:14:3f:5a:4c:ad:
2e:19:65:e8:f4:bb:49:07:7a:1e:82:b4:43:70:e4:c5:04:73:
93:2c:d7:fe:0b:16:86:1d:26:1c:91:0e:53:8c:e0:ea:06:92:
4e:36:28:30:33:03:4e:01:20:27:6f:77:2c:10:74:1c:c8:9d:
74:b2:06:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:58:14 2026 by rpki-client