Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
File: 2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft (raw, json)
Hash identifier: pLSf4E3Q4AAWPXjqWcD/3v2rNOEQud6iGiWPPk1Zk2Y=
Subject key identifier: D4:8B:A2:A0:07:89:2D:D8:96:90:4D:7C:BF:C8:B5:BE:2D:74:E3:AF
Authority key identifier: D8:39:4A:7A:7B:85:E5:B6:78:45:B8:90:71:50:28:5B:71:CD:5E:95
Certificate issuer: /CN=d8394a7a7b85e5b67845b8907150285b71cd5e95
Certificate serial: 01A147CDFED4EA6843BA601D7040B669C425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
Manifest number: 0123
Signing time: Sat 17 Oct 2026 03:00:44 +0000
Manifest this update: Sat 17 Oct 2026 03:00:44 +0000
Manifest next update: Sun 18 Oct 2026 03:00:44 +0000
Files and hashes: 1: 2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl (hash: UFGiXOXDNrp8uEaXcdjC98GC78kEKzzL22Chy3loudI=)
2: 5Z95gUiSdOG4r_uzAiN80rlQr-Q.roa (hash: 7yWAM4rRw5M/JV2A3HQ3yWCJTTzj2IN/RNPOITjQ4mE=)
3: EycWZ_dfGLG-EqHrgSZrTtUENKs.roa (hash: KJ1RAPm5hecF2qlfjfmX1AbYuEVtEPM/dltRx7gtvV8=)
4: JY1qhMWeHgfaGacafAu9A8pqPOU.roa (hash: vSlOo61MyUjunpp23wCdHaI75o9KFjuwDlia3rSNbp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:cd:fe:d4:ea:68:43:ba:60:1d:70:40:b6:69:c4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8394a7a7b85e5b67845b8907150285b71cd5e95
Validity
Not Before: Oct 17 03:00:44 2026 GMT
Not After : Oct 18 03:00:44 2026 GMT
Subject: CN=d48ba2a007892dd896904d7cbfc8b5be2d74e3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:46:e8:95:3c:aa:3f:5b:2d:4d:a6:e5:31:
ef:d5:97:14:4d:94:f6:b7:ad:4b:fa:e1:a5:ff:a1:
b9:84:c6:62:17:04:44:3f:69:07:a1:6d:d5:c3:ff:
a7:c9:77:29:53:f8:34:96:37:e0:d7:66:6f:c1:bd:
1a:3c:47:fd:ac:7e:18:4e:e2:bd:3a:77:bb:07:44:
3f:c1:66:c3:80:58:ca:43:0b:fd:08:0d:65:b5:15:
39:57:19:12:46:80:3c:8d:bf:3e:f8:c4:8a:c3:a8:
53:dd:e8:af:51:30:f8:f3:2e:89:d5:27:2e:74:07:
e1:5b:56:8e:6d:46:ea:11:28:51:62:86:ce:d1:4c:
46:29:81:74:c9:1c:78:41:5c:26:15:c2:69:c2:41:
dc:cf:47:f1:ce:78:d8:7a:6a:e0:24:0d:7b:25:7a:
e3:46:5f:5d:81:47:ca:f8:35:16:bc:af:03:88:82:
03:dd:4d:86:c6:98:06:8a:3d:12:14:80:f9:e2:d9:
c2:08:8a:11:81:a7:aa:78:57:4e:94:7c:67:38:14:
d8:de:d8:eb:1e:09:e5:9f:61:1b:8e:37:16:84:16:
94:2b:0f:99:bd:78:46:c0:13:55:58:f2:5b:90:59:
80:f0:f1:de:63:ca:ef:09:59:1b:67:2e:f6:20:63:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8B:A2:A0:07:89:2D:D8:96:90:4D:7C:BF:C8:B5:BE:2D:74:E3:AF
X509v3 Authority Key Identifier:
keyid:D8:39:4A:7A:7B:85:E5:B6:78:45:B8:90:71:50:28:5B:71:CD:5E:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:38:c8:a7:fe:7e:34:f6:f4:9b:f9:64:24:b7:69:78:47:d8:
f7:18:e0:46:8e:99:16:e1:76:a8:c6:fa:c9:07:5e:96:7f:03:
d5:84:82:87:51:a4:a7:d3:85:fc:50:ed:52:2e:a8:db:f1:52:
75:35:f6:81:7e:02:bc:9c:0c:36:26:56:eb:b6:1f:99:3b:14:
bc:cb:64:c8:28:42:05:11:d7:c2:a9:92:05:01:31:e5:e8:33:
24:58:4f:1e:ee:92:2b:de:32:1e:cd:0d:11:5f:80:98:b3:f1:
3b:f7:e4:7d:f0:1c:d6:12:50:9f:ce:d3:29:12:f1:37:00:e8:
73:81:31:82:ea:8e:0d:9f:b1:3b:3f:cf:7a:e4:2b:82:d1:c8:
d9:68:ea:77:a9:28:0f:38:ce:d7:51:48:ac:11:ff:df:21:01:
74:f1:7a:2d:90:30:da:91:78:30:98:af:1f:b2:e3:f0:11:7b:
80:34:ac:72:9d:a0:08:9c:18:6e:4b:f7:ca:fa:0e:c0:f1:f9:
20:1f:30:96:3a:f7:5e:e5:54:b6:ba:91:d0:a0:3e:de:a2:9a:
9e:d1:af:03:eb:21:df:df:2a:06:9d:1f:3a:59:ac:b0:5d:fd:
41:00:24:c6:d4:68:3d:8e:cb:35:a3:d1:15:06:b0:2b:09:55:
f5:08:ef:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:54:46 2026 by rpki-client