Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json)
Hash identifier: hW6hUM77YatVwRi3bi3gVBEpIHUak+K5hZwpYu+b75M=
Subject key identifier: 7E:8B:8F:21:94:03:E5:A3:C9:75:A4:05:8B:2A:BB:77:5F:50:C0:E7
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 01A0E92D5EBCB40B9B746180306DB89ABE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
Manifest number: 05CF
Signing time: Mon 28 Sep 2026 18:00:59 +0000
Manifest this update: Mon 28 Sep 2026 18:00:59 +0000
Manifest next update: Tue 29 Sep 2026 18:00:59 +0000
Files and hashes: 1: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: Kx+8Rqp9wnLwINXYQvzGEbitToVIpmgH4/xdJlVCwt4=)
2: eh-_1IK7oCD8nbLcwB1h-jsivvQ.roa (hash: 1hB/vcchKccjfMUEW19JzNX5vcI2nAxqryUItaWwuI8=)
3: pdvwezXifSPbHn7Zg5GsoIZ-9_g.asa (hash: L3xvDc7N16Bw2yzHqAnTIftFzbiPXKuwqnDanSSbEog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2d:5e:bc:b4:0b:9b:74:61:80:30:6d:b8:9a:be:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Sep 28 18:00:59 2026 GMT
Not After : Sep 29 18:00:59 2026 GMT
Subject: CN=7e8b8f219403e5a3c975a4058b2abb775f50c0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:c6:73:c5:1e:05:61:78:f1:6b:76:2e:8a:
f1:08:04:ec:88:73:57:7d:4e:95:4e:55:76:0f:32:
69:bb:9a:a7:78:bf:98:21:e8:60:8b:02:ef:48:41:
07:2b:d8:99:cb:c0:a0:ca:64:3d:15:bf:58:e5:15:
e3:80:5c:02:6c:41:ad:11:e0:3d:c6:69:11:09:2a:
13:f6:b7:85:93:d1:18:f8:1e:dc:1e:62:f7:ea:5b:
6b:0f:6f:82:81:b1:49:ab:36:2c:1d:4f:38:52:26:
9f:2f:69:07:84:5f:25:fd:ef:33:d2:1d:88:36:80:
29:c4:ee:4a:c3:6d:26:bc:c5:72:01:a5:79:a6:fa:
48:2c:9b:4b:2d:13:cd:b0:0b:30:a0:63:b7:fd:30:
e5:c7:a8:91:d1:a2:6e:c9:19:42:0a:96:ea:bb:84:
8e:fd:73:a7:d8:ed:ab:b1:69:a6:f7:7c:c8:23:e5:
3a:ff:72:f2:43:8f:77:00:02:27:a1:77:5d:f0:eb:
60:bd:56:79:00:cf:e6:44:ce:5f:12:b3:ab:22:b0:
90:f3:12:30:4d:d8:ed:b7:ae:f8:10:28:bd:d4:f3:
33:6b:8a:3a:bf:f2:b2:58:2a:8f:db:c3:99:8d:a0:
7d:31:43:74:60:6b:93:5a:dd:29:3d:88:d9:fe:26:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8B:8F:21:94:03:E5:A3:C9:75:A4:05:8B:2A:BB:77:5F:50:C0:E7
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c2:4d:08:d1:45:c8:bd:bd:cc:69:19:47:7f:25:c0:59:b3:
42:45:95:90:c2:85:35:3e:99:16:2b:35:ac:96:64:63:16:98:
3e:84:ac:68:fe:0b:55:1b:cd:00:09:a3:cd:a7:d3:a0:39:1c:
19:91:ea:f7:b8:89:19:05:5f:dd:74:a9:91:bf:34:2e:1e:81:
bb:6d:f8:d1:c1:a3:65:84:ca:58:b9:27:33:60:e6:3d:51:15:
dc:9c:7f:96:11:e7:ff:f4:1b:50:3f:33:bc:bf:53:43:cc:f0:
df:15:ce:48:80:42:53:4f:d4:38:cf:bd:71:fd:58:15:e0:b9:
fd:dc:3d:18:84:1d:65:c4:66:a7:72:d2:13:07:35:3f:f0:95:
67:dd:8b:2e:37:22:29:be:89:55:e4:e5:13:a4:08:61:24:7a:
1f:6b:a6:85:8e:5c:0a:70:80:66:a2:49:07:4e:e8:14:f6:6b:
98:ef:17:2c:35:74:f1:1d:9f:51:0e:e2:e5:c8:9d:5f:80:5c:
f2:3f:89:2f:d3:c8:ac:e7:42:ce:89:ae:2d:d2:81:02:23:8a:
e8:1f:e6:c8:62:fa:e3:2c:75:1b:f2:0d:ec:43:12:c9:b9:37:
cc:02:c0:a9:51:0d:c9:c8:ed:35:33:fb:e7:bb:39:fc:f7:02:
4c:45:a1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:48:03 2026 by rpki-client