Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File: m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier: m41gk+W5T+ucsuQQPd6YD01tFaKcfQmqrq3v3uN4+r4=
Subject key identifier: 0F:EF:C8:6E:2C:82:3F:1F:CF:33:76:E1:AD:8A:A5:FA:87:F6:CD:F7
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial: 01A026FC02E10C0A450E80D719F53ECA32D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number: 1A15
Signing time: Sat 22 Aug 2026 01:00:45 +0000
Manifest this update: Sat 22 Aug 2026 01:00:45 +0000
Manifest next update: Sun 23 Aug 2026 01:00:45 +0000
Files and hashes: 1: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: XoDV1PXvX5nNsYZ19LmnUwO5wm1FEthCdVRb3mHEXiY=)
2: uqRQxH9qEjG0hA9B3Ap6knKry0I.roa (hash: aVZsCZDmcN6Rpr0mzKedChfzxWEnLoXai4QxhXhqgNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:fc:02:e1:0c:0a:45:0e:80:d7:19:f5:3e:ca:32:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Validity
Not Before: Aug 22 01:00:45 2026 GMT
Not After : Aug 23 01:00:45 2026 GMT
Subject: CN=0fefc86e2c823f1fcf3376e1ad8aa5fa87f6cdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:34:39:7c:f3:dd:ea:8f:1d:1b:46:e3:a8:
7c:06:d7:1b:94:a5:10:a0:5a:74:0e:c1:73:5e:a2:
e8:86:93:3b:ec:37:b3:a5:78:30:24:13:88:67:d9:
07:7e:e6:09:a1:de:c3:d3:0d:89:86:16:1d:01:01:
07:b1:11:d8:da:70:b8:3d:44:01:f5:02:5e:76:18:
9c:0c:39:bf:15:70:d3:25:59:15:d2:5c:4e:cd:d4:
73:df:a0:a4:4d:08:b0:77:56:59:b5:54:90:d3:4d:
93:7b:cd:f9:5c:58:52:6b:16:ba:62:ae:d3:fb:4c:
50:6e:c4:ad:ef:4c:b4:a8:7e:3b:17:a5:81:e3:f0:
6f:fa:b7:bc:27:1c:f0:74:79:35:ab:62:b3:91:69:
6e:c7:9a:fe:bf:dd:8e:cd:96:9b:a4:89:ee:00:d0:
4b:c2:18:17:15:3f:80:e9:1e:dd:34:cd:ee:ec:78:
b1:85:d3:1e:a0:a4:44:8c:14:f1:79:42:31:e5:d4:
fc:8e:ce:23:7f:42:dc:76:fe:4e:36:88:5d:97:18:
fb:3c:1a:98:3b:2e:29:08:2b:c9:0b:95:54:d3:52:
8e:27:c0:9e:25:cd:49:71:b3:e5:1b:35:d1:73:34:
e3:7a:4c:62:48:fe:38:9f:14:d7:5d:f6:3c:0d:cf:
57:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EF:C8:6E:2C:82:3F:1F:CF:33:76:E1:AD:8A:A5:FA:87:F6:CD:F7
X509v3 Authority Key Identifier:
keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:51:bf:ae:61:14:49:a8:12:37:3a:85:72:c6:b2:ce:5b:f0:
85:d2:df:c3:12:ab:a4:19:4a:a3:40:61:1b:16:b4:34:d6:78:
d8:9e:98:7c:b8:10:44:74:a1:2c:a2:20:25:7e:e5:ca:ea:fb:
31:ad:26:7a:5c:97:4b:3e:d4:2d:2f:fe:cd:df:c3:2a:51:be:
36:76:04:d1:e5:d8:bd:b1:f1:5f:ef:ac:bf:a9:7d:a5:a6:73:
bc:4c:5e:a4:c6:f9:5c:9f:5f:d4:cc:00:88:f6:bb:5f:61:e6:
0b:e5:a6:7d:8a:a5:f8:ae:82:e4:a1:ae:6d:85:6d:a0:3d:df:
c8:93:45:fd:5a:d3:24:40:e0:cb:7c:14:79:8e:15:f0:00:84:
32:37:dc:de:57:90:7f:6d:88:08:80:72:b1:b6:3a:e4:59:e3:
e2:74:68:16:f1:ae:bd:4d:b4:57:28:86:fe:30:b6:de:25:0a:
a3:eb:35:57:a0:0a:f6:2f:b1:99:d1:c9:55:5e:d4:a1:c0:88:
26:5a:cc:9b:ac:96:53:9e:66:43:61:67:c1:d4:10:aa:ff:7e:
cd:e6:44:5f:c8:c9:14:82:f5:ba:72:48:ca:cd:81:9a:fa:bf:
2b:b2:c6:f1:4f:fb:38:6d:5e:49:56:ce:16:8c:9e:01:5c:c5:
7c:69:4e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 11:00:50 2026 by rpki-client