Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: +2e8q/jh/dDzeVUcnyR7f1RD+PxZy8CHw16jE7ukRIE=
Subject key identifier: 38:A7:D9:1A:87:46:A8:64:C9:95:98:07:BD:7E:56:2A:39:1E:93:01
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 01A0E4755415392D7DFE87835BCAF6261B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 1A78
Signing time: Sun 27 Sep 2026 20:01:29 +0000
Manifest this update: Sun 27 Sep 2026 20:01:29 +0000
Manifest next update: Mon 28 Sep 2026 20:01:29 +0000
Files and hashes: 1: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: RyrzmFPhy3B5u3awnRZ/Wpe407PHvzmNfhuZpoE9GJ0=)
2: vWKPs1EksdLNehXFmCXDKSULnXk.asa (hash: yNn9JtBbsWodt41KzrmjveQKUch9zXpyA0sczkLauf4=)
3: yV3n7Of-XfxujJs_oZpOk9T5zxc.roa (hash: RWU+lLoWMG+Uf+PGBYW1EPxQGP3cMIviVCgLyu7si9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:75:54:15:39:2d:7d:fe:87:83:5b:ca:f6:26:1b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Sep 27 20:01:29 2026 GMT
Not After : Sep 28 20:01:29 2026 GMT
Subject: CN=38a7d91a8746a864c9959807bd7e562a391e9301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:5c:9c:3a:d0:c1:12:d5:2b:84:99:39:2d:
e6:ca:33:d4:9d:ed:5b:41:63:1d:09:15:52:2c:95:
b8:71:14:6c:8d:45:42:20:9c:76:4f:2f:7d:33:ff:
ff:ef:22:b2:a6:68:68:b0:70:27:89:01:a7:fb:32:
35:cd:d2:1f:df:e7:67:d1:5c:7d:e4:62:43:75:54:
28:dc:96:0c:fd:fd:c7:ca:2a:be:6f:23:9f:82:c7:
b9:d2:31:b3:0b:38:5d:46:3d:6a:b1:ad:49:38:50:
02:47:ea:58:46:19:02:64:b6:54:88:bd:a7:cc:6f:
aa:7e:56:c9:d3:e6:6e:08:1b:e6:60:42:88:a0:64:
74:f8:59:14:86:51:ee:d0:c0:17:69:8a:53:8f:14:
7e:aa:a0:08:64:4a:bb:b0:9e:f6:f8:90:d0:d1:48:
14:be:7c:4e:5f:f7:db:43:e0:68:20:64:8a:17:75:
58:0d:88:3c:89:5f:51:85:da:cd:27:75:91:a4:3d:
0f:59:83:be:d4:85:da:31:72:0b:fe:75:40:9d:63:
a5:02:a2:b0:3b:04:9c:31:7a:81:90:47:08:c9:db:
81:c6:42:c5:84:ea:b1:fe:64:7b:a3:ee:17:38:2d:
5f:d3:bc:78:72:de:eb:f3:d6:10:e6:d5:84:06:83:
5b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A7:D9:1A:87:46:A8:64:C9:95:98:07:BD:7E:56:2A:39:1E:93:01
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:95:7d:d2:3d:4a:b7:d9:e2:20:d3:ba:4d:70:07:e5:5f:58:
5b:d2:c0:cc:1e:c7:9e:84:3b:55:04:4c:70:81:a0:4b:4f:dc:
9e:c3:a9:3b:60:c2:ba:88:e0:56:27:30:3f:d1:fe:63:c6:0f:
34:c9:25:80:e3:c9:10:c0:3f:bd:71:95:1b:8d:04:c4:b8:7d:
c0:0e:66:e4:79:75:86:e3:6b:e8:b3:fe:2e:6a:63:0c:4f:ac:
b6:fa:ab:cb:04:6a:05:5b:7f:4b:7c:51:b6:4e:81:60:11:29:
15:07:fb:44:fe:a2:49:d4:0c:f6:61:93:af:77:09:12:ab:85:
e9:01:e5:65:dc:a6:62:52:2b:e6:d4:76:33:22:b0:51:6a:9b:
bb:78:99:40:a8:04:44:86:c5:90:be:e2:27:37:8e:2a:83:0c:
66:99:7a:66:4c:d2:b4:72:13:57:37:53:3a:6d:03:0d:fe:32:
18:7d:33:7f:ce:7e:a9:cb:68:49:dd:0e:0c:5e:25:96:e5:b8:
d9:31:8e:13:51:9d:a5:c5:82:0a:73:8e:47:31:1a:32:b7:c5:
4e:c2:37:f1:e2:ae:4c:14:85:96:36:51:ae:bf:e6:f7:29:2b:
cc:ea:97:ca:ab:c7:23:08:c6:78:fd:a3:3b:f3:59:33:7c:fd:
78:b4:82:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:04:59 2026 by rpki-client