Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.mft
File: D6j7U5miekMK5yfFMs0iSZnohk8.mft (raw, json)
Hash identifier: tEEavbcurmnW+7AjOJrfQ8JGcD5+lhfuzzfmPizHFgY=
Subject key identifier: 5F:57:F6:B7:1E:46:F5:AD:AF:8A:CD:A7:99:2A:A1:F3:B7:92:C4:54
Authority key identifier: 0F:A8:FB:53:99:A2:7A:43:0A:E7:27:C5:32:CD:22:49:99:E8:86:4F
Certificate issuer: /CN=0fa8fb5399a27a430ae727c532cd224999e8864f
Certificate serial: 01A13ECB3166A5E1504330A49D788D265D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.mft
Manifest number: 072F
Signing time: Thu 15 Oct 2026 09:01:05 +0000
Manifest this update: Thu 15 Oct 2026 09:01:05 +0000
Manifest next update: Fri 16 Oct 2026 09:01:05 +0000
Files and hashes: 1: D6j7U5miekMK5yfFMs0iSZnohk8.crl (hash: JwJa6GddHphawAfNSn9sLwjL1UFiD43ik0Mm+s9L620=)
2: N3bXffW8yKFqU5UMm7fvxG-jz6A.roa (hash: bdRoY8TZDQQa0PscQFcX1AU8tV8n2oKXvuQ9ADHxYzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:31:66:a5:e1:50:43:30:a4:9d:78:8d:26:5d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fa8fb5399a27a430ae727c532cd224999e8864f
Validity
Not Before: Oct 15 09:01:05 2026 GMT
Not After : Oct 16 09:01:05 2026 GMT
Subject: CN=5f57f6b71e46f5adaf8acda7992aa1f3b792c454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:0e:a9:6b:03:da:ff:99:33:58:18:95:85:
dd:f8:3f:64:9e:81:55:03:7a:33:72:a3:f7:48:ad:
b8:1f:0b:ba:d0:fd:0f:de:8a:d3:ce:21:17:cb:0d:
15:d0:53:6c:10:d4:b0:ef:5b:bd:5d:70:30:d9:d8:
84:12:db:9e:2f:40:c9:88:1f:42:eb:9c:dc:bd:22:
cf:48:bb:84:17:dd:1c:d0:f7:28:2f:df:c3:e7:5b:
fe:f2:39:e3:e5:56:34:13:da:31:56:a2:e4:1f:5b:
19:78:72:82:41:ab:7a:b3:74:1c:b3:33:39:4e:d5:
62:43:d9:35:67:c5:6a:30:2b:bc:b2:9d:1b:3e:ee:
46:5f:5b:3e:cd:6e:51:c8:8c:3b:84:b0:d4:9a:60:
6f:e8:1c:36:1b:88:35:0f:75:22:39:ee:cc:a6:a3:
9f:69:d9:87:07:cd:d7:6c:98:ce:01:16:6f:68:e1:
06:ee:ff:06:8a:25:43:9b:7e:ba:11:43:53:56:0c:
d6:92:89:2a:b4:1a:54:ae:aa:44:45:01:c3:67:3b:
57:64:ed:8a:af:da:1c:ec:a9:1a:26:4e:a5:71:d1:
cc:56:6b:62:b0:3e:0c:24:9e:04:ef:d8:e1:85:2e:
da:f8:52:1e:5f:d6:85:76:67:0f:56:51:7b:1e:8f:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:57:F6:B7:1E:46:F5:AD:AF:8A:CD:A7:99:2A:A1:F3:B7:92:C4:54
X509v3 Authority Key Identifier:
keyid:0F:A8:FB:53:99:A2:7A:43:0A:E7:27:C5:32:CD:22:49:99:E8:86:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6j7U5miekMK5yfFMs0iSZnohk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/386f81-b139-48af-bcea-a71fb4635065/1/D6j7U5miekMK5yfFMs0iSZnohk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9c:d7:b6:44:51:2e:be:dd:63:93:a6:28:51:56:02:96:9a:
f9:dc:87:5e:77:7a:47:f8:48:3b:f9:18:aa:47:52:1c:f9:09:
0b:9b:89:28:d7:cf:27:56:50:69:09:38:61:39:18:ad:8d:61:
76:8f:fd:85:ed:f1:ff:db:38:17:60:a3:67:89:95:87:75:2e:
ea:6d:b9:f3:ad:29:97:2b:f4:68:b9:3c:69:29:35:9f:13:45:
4b:ed:d9:84:af:f5:5c:46:a0:b6:7a:65:03:4f:0f:1f:d0:8f:
ae:53:51:16:27:3f:b1:83:93:e5:2d:c0:e7:cd:01:fd:d0:6c:
58:b9:dc:83:d8:d5:94:79:1c:2d:78:a6:66:9f:a4:71:a7:70:
c8:f2:9a:37:93:41:da:1d:6d:cd:1c:d1:72:51:ab:8e:77:1c:
7d:04:01:76:63:68:db:a2:95:a6:45:b7:0f:0f:02:f3:ca:02:
1a:dc:26:5e:a2:2c:8d:ef:c2:4e:a4:75:81:d9:86:6a:61:de:
a9:a4:38:7c:09:45:4b:1e:75:c3:e2:bc:ac:59:9b:67:2d:4a:
4d:0b:a6:2f:2d:dc:16:e1:59:91:d0:59:41:d1:db:3a:80:c4:
f0:37:c3:15:58:0f:6c:c8:f9:d7:f2:c0:5a:27:37:82:65:68:
dc:2d:ea:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:26:28 2026 by rpki-client