Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/D25wSX5EtH0p9UvYgRKm3vt1A9E.mft
File: D25wSX5EtH0p9UvYgRKm3vt1A9E.mft (raw, json)
Hash identifier: JvjpHp0Vei8XY451LulBDmkWzsmyFeiPLr2t6aa4DMo=
Subject key identifier: 35:5F:F2:5F:61:AE:4A:7C:39:55:58:8E:44:DF:9A:3D:F1:94:E4:2B
Authority key identifier: 0F:6E:70:49:7E:44:B4:7D:29:F5:4B:D8:81:12:A6:DE:FB:75:03:D1
Certificate issuer: /CN=0f6e70497e44b47d29f54bd88112a6defb7503d1
Certificate serial: 01A0412AEFC16CB9D2CEF25FE764B20F2037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D25wSX5EtH0p9UvYgRKm3vt1A9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/D25wSX5EtH0p9UvYgRKm3vt1A9E.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:02:07 +0000
Manifest this update: Thu 27 Aug 2026 03:02:07 +0000
Manifest next update: Fri 28 Aug 2026 03:02:07 +0000
Files and hashes: 1: D25wSX5EtH0p9UvYgRKm3vt1A9E.crl (hash: 1XI+Fxpn5tBftQY1bhpv7v4gM/7hT+RSRevosGqfXZg=)
2: i5OmNF3R_ksTFprj9Ee705dQkjg.roa (hash: boBqLzR4UMfLWnWA65zATuTLhh3sU6E3fN3d7N7eZI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/D25wSX5EtH0p9UvYgRKm3vt1A9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/D25wSX5EtH0p9UvYgRKm3vt1A9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D25wSX5EtH0p9UvYgRKm3vt1A9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:ef:c1:6c:b9:d2:ce:f2:5f:e7:64:b2:0f:20:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6e70497e44b47d29f54bd88112a6defb7503d1
Validity
Not Before: Aug 27 03:02:07 2026 GMT
Not After : Aug 28 03:02:07 2026 GMT
Subject: CN=355ff25f61ae4a7c3955588e44df9a3df194e42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:6b:0d:eb:46:39:a2:f5:69:43:83:95:15:
6a:f1:00:9c:34:4a:fd:68:2d:c5:a2:af:6b:76:96:
0e:14:ba:46:15:9e:c1:6b:3b:a9:f4:53:14:e7:a3:
5d:52:20:72:cc:92:05:dc:49:33:2e:e9:62:3a:84:
1c:21:b6:92:74:6c:54:de:af:79:3d:34:fd:38:b2:
46:ac:d7:72:f8:b6:7f:fd:65:bf:1a:cc:91:d7:9d:
70:7f:6f:ad:13:82:6c:9a:5d:67:0f:42:bb:4a:00:
25:8f:60:05:76:81:28:81:a3:db:4c:7f:d7:b4:d1:
a2:76:cb:e7:de:56:66:ce:85:23:2f:0c:b4:02:59:
25:75:08:7d:da:f9:1a:22:70:4b:0b:5e:bd:1c:88:
f1:ba:cc:4e:b0:92:be:bb:20:aa:a9:8b:c8:18:f9:
ca:84:af:b1:6f:e4:1a:96:71:86:33:87:41:57:27:
c9:f3:0c:87:26:8f:9b:f1:f0:df:14:13:9c:e2:11:
5a:6e:0e:f1:5a:9c:96:3f:bc:98:05:32:31:95:54:
4e:a1:cd:da:86:26:c0:90:ce:7f:db:0a:6b:f3:17:
af:0b:89:87:b6:88:74:9f:9f:38:5a:85:2f:d3:2b:
a6:db:39:0a:06:ba:72:95:7d:b1:77:dc:ac:64:d0:
c9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5F:F2:5F:61:AE:4A:7C:39:55:58:8E:44:DF:9A:3D:F1:94:E4:2B
X509v3 Authority Key Identifier:
keyid:0F:6E:70:49:7E:44:B4:7D:29:F5:4B:D8:81:12:A6:DE:FB:75:03:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D25wSX5EtH0p9UvYgRKm3vt1A9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/D25wSX5EtH0p9UvYgRKm3vt1A9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/D25wSX5EtH0p9UvYgRKm3vt1A9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:13:95:58:74:ef:1e:be:f4:57:d3:89:8c:8f:28:8a:b1:75:
0f:f3:3e:61:bf:99:12:52:15:47:6f:70:a5:f4:8f:b2:76:43:
ab:ba:ff:68:13:d3:ac:99:a6:d9:79:09:ed:27:91:ec:21:03:
6c:c0:08:e8:f2:74:e9:71:42:41:83:c8:07:a0:6c:c0:f4:79:
ba:f1:c2:db:72:a6:a1:04:e9:c0:64:ae:d3:bb:6e:e4:ac:77:
14:85:41:66:47:72:bc:ea:6f:66:20:98:3a:6c:89:e8:71:fd:
3b:82:79:57:cf:eb:aa:a1:7b:11:74:18:cb:95:86:05:0a:c1:
d2:4f:d0:ce:cd:bc:bf:12:21:43:e1:99:53:96:14:59:40:f1:
c1:5f:b0:fc:5f:7a:f4:76:f4:7d:ac:8d:ae:47:9c:00:76:b6:
02:2c:15:3e:30:78:c2:13:71:4c:c1:7c:2d:15:f1:1b:66:fa:
4e:ce:f6:64:25:24:cc:1f:14:91:67:42:19:37:5c:b8:c8:03:
5b:c5:d5:61:5b:9f:de:0b:7b:86:45:46:90:b8:25:5b:bb:ff:
65:49:f5:87:09:e3:be:16:a3:bb:e1:fb:00:79:43:46:dd:5a:
6f:b1:ba:ff:af:c1:7e:b2:53:55:af:41:f2:16:b0:df:30:96:
47:d8:ce:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:55:14 2026 by rpki-client