Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File: m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier: frY4FbQ4X/c3zcH6XbRteGwfylhl/cTQOejVwDuK5Xk=
Subject key identifier: AF:E3:0E:22:6A:A0:A1:30:C7:51:2B:3E:2C:20:8A:24:A7:53:A0:CF
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial: 01A14C86DE57BEC2848C9DC54476759F1228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number: 1AAD
Signing time: Sun 18 Oct 2026 01:01:09 +0000
Manifest this update: Sun 18 Oct 2026 01:01:09 +0000
Manifest next update: Mon 19 Oct 2026 01:01:09 +0000
Files and hashes: 1: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: X6nUSp/Ajr+vkp8TvoIAbpu5U2JPemZ4kC3HdsBQIfM=)
2: uqRQxH9qEjG0hA9B3Ap6knKry0I.roa (hash: aVZsCZDmcN6Rpr0mzKedChfzxWEnLoXai4QxhXhqgNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:86:de:57:be:c2:84:8c:9d:c5:44:76:75:9f:12:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Validity
Not Before: Oct 18 01:01:09 2026 GMT
Not After : Oct 19 01:01:09 2026 GMT
Subject: CN=afe30e226aa0a130c7512b3e2c208a24a753a0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:fd:09:81:fd:47:85:2d:7f:ea:75:a7:72:
8d:ec:70:1c:cc:3c:9d:fe:14:42:5e:90:13:20:12:
4a:74:95:44:d3:b2:73:0e:d1:53:8c:36:c7:78:8d:
6c:e8:d4:d2:79:26:b3:ff:32:1f:34:b8:61:59:a6:
13:ea:72:70:1d:e9:cf:79:37:f4:44:15:fb:4a:b3:
fc:b6:96:22:bd:82:57:62:11:da:b0:25:34:d9:9b:
e2:b1:83:76:6c:a8:e6:84:9e:57:bf:af:0a:c7:10:
e8:c6:e8:0e:86:3b:53:d6:f5:ae:e5:0e:de:7f:d8:
4e:52:97:19:a4:63:f9:1d:e8:9c:13:b6:28:98:6c:
ef:b3:69:d2:9f:cd:6f:9e:34:9e:06:40:57:cd:89:
76:d3:eb:70:2d:12:05:55:bb:57:cf:cb:8b:f5:6f:
34:e5:61:bf:6c:68:11:f5:f3:e3:4d:62:26:05:8b:
83:8d:4d:64:7f:5b:62:a1:5d:f4:88:b4:e7:3e:f0:
3a:fe:31:3e:eb:db:09:af:cd:21:8c:4f:a3:d2:73:
09:68:92:1e:11:65:9d:33:23:92:32:ef:40:48:84:
c7:39:86:aa:5b:2e:ad:e1:c1:0b:60:a3:2f:95:55:
b4:5d:e4:32:2f:58:ce:d5:27:44:c4:c7:c2:92:91:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E3:0E:22:6A:A0:A1:30:C7:51:2B:3E:2C:20:8A:24:A7:53:A0:CF
X509v3 Authority Key Identifier:
keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:10:9a:52:e0:95:de:ba:bc:91:1a:79:24:fd:03:17:03:13:
28:06:2c:6e:3e:09:31:6f:3b:68:7f:1d:a9:5c:74:04:10:49:
16:cf:3a:23:ae:d4:ad:cf:82:fe:a5:51:13:cb:4c:f3:79:a3:
35:74:cf:df:83:9f:56:2e:49:c7:55:7e:34:1c:26:f8:a9:31:
e6:dc:19:38:16:3c:02:7b:a3:38:7f:45:c0:6e:b1:b2:50:76:
bc:3d:8f:57:6f:fa:ba:c7:0c:45:0e:44:91:8c:35:82:45:9e:
1a:de:0c:99:8e:47:1e:9a:0b:f5:15:d7:1b:1e:fc:e7:4f:a5:
b3:26:fd:c5:36:4b:92:96:db:47:d2:00:74:e2:3c:8f:80:9c:
63:b8:bb:fb:19:7b:36:7e:51:73:01:fe:20:13:3b:85:d7:83:
45:43:0a:e5:1f:7b:a5:10:f8:67:ab:91:79:93:94:72:fd:66:
ec:76:cf:d0:8a:55:33:ae:7f:76:76:dc:da:77:83:75:38:d3:
20:0c:d2:74:60:45:68:ea:28:8d:4c:32:1e:0f:31:b1:55:8f:
b9:b4:19:79:b8:4b:e2:54:c6:3b:70:63:07:e8:a9:b0:d8:c7:
18:54:2f:97:34:cf:d7:46:e3:b2:36:96:00:42:58:49:73:6d:
5a:4d:ae:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:50:35 2026 by rpki-client