Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File: dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier: vMv4EQQscnsmuanUy9iAEqqejpp7W/ipmgnwVEWlSw8=
Subject key identifier: 23:6A:86:77:A0:89:C7:ED:FE:3C:E0:63:D1:13:08:82:4E:FA:27:0C
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial: 01A05A7BD617290A06D910434DC30F4A5BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number: 102F
Signing time: Tue 01 Sep 2026 01:01:00 +0000
Manifest this update: Tue 01 Sep 2026 01:01:00 +0000
Manifest next update: Wed 02 Sep 2026 01:01:00 +0000
Files and hashes: 1: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: lbPtPSO4RLT2U905dGjXkwUS9fw+yBD62IXhZNAYako=)
2: vj0F4FgcNslWI5L8V7Dw0mIMfn0.roa (hash: j/Kb2HDxy8LEtTBE0A03kW5/ZkhjPjh8YBluaGzICqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:7b:d6:17:29:0a:06:d9:10:43:4d:c3:0f:4a:5b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Validity
Not Before: Sep 1 01:01:00 2026 GMT
Not After : Sep 2 01:01:00 2026 GMT
Subject: CN=236a8677a089c7edfe3ce063d11308824efa270c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:77:b9:bb:a7:e0:d7:ce:0e:61:e9:dd:bc:6f:
37:67:34:8d:83:25:46:a5:78:72:f3:e3:28:3e:83:
2d:ea:e4:be:6a:53:08:df:02:92:d0:d0:89:cf:da:
b5:3f:5b:37:f6:f9:04:f5:85:b3:8c:6a:39:5d:75:
f7:2d:d3:96:f4:c0:dc:12:df:87:8f:f3:2b:7a:f3:
79:69:5e:7e:9b:99:47:fc:fd:e3:18:3c:91:33:54:
83:1b:3d:3b:f0:6b:b0:5e:4d:28:07:76:03:0b:60:
52:c1:bc:23:21:e5:81:5a:96:99:21:08:58:aa:04:
d3:58:6b:22:fc:c7:da:76:3b:4e:fc:03:f9:da:82:
78:7e:e3:11:a8:ea:18:6f:8e:1c:fe:23:98:09:a2:
3d:f5:35:7f:5a:9b:4b:72:55:94:59:66:dc:68:1f:
52:9d:f3:f2:8c:0d:30:57:6e:4b:f3:df:be:6c:ae:
93:47:b4:05:7c:fd:17:57:12:9c:12:78:f3:31:9c:
9a:36:f7:70:ea:c1:3c:7a:9f:36:6c:80:90:76:28:
21:35:91:d6:e3:38:8d:4c:20:dd:67:f9:2e:5e:ca:
d6:31:0a:01:4a:0a:7c:97:ac:75:40:fa:c7:f0:f8:
9a:f4:be:f6:7a:2f:fc:1b:98:af:a3:a7:2c:a2:9f:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6A:86:77:A0:89:C7:ED:FE:3C:E0:63:D1:13:08:82:4E:FA:27:0C
X509v3 Authority Key Identifier:
keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bd:23:1d:97:05:d5:85:c5:6c:b6:7c:cf:64:2d:e8:6c:ab:
54:9d:cc:2e:47:be:26:94:b9:22:d5:f5:6e:07:60:77:7e:1f:
dd:ad:5d:2e:50:a0:a5:ce:33:dd:9d:04:93:45:8d:92:8e:f3:
fa:3f:67:99:6e:a5:98:58:39:d6:9b:79:6d:d7:a2:52:4b:20:
f0:b1:06:20:cf:0e:33:f5:5b:0c:09:59:68:2f:9e:30:1b:01:
24:60:6e:cc:af:95:8b:25:42:8a:37:06:0a:dd:6a:46:ed:44:
aa:21:6f:7c:4d:3a:e2:ce:7b:90:5f:45:c5:54:fd:a0:07:93:
ea:95:ef:3a:2f:b1:01:e9:44:c2:54:e2:0a:e5:e3:0c:5b:05:
9a:58:52:d2:ac:66:94:c9:52:f8:8f:38:f7:56:b7:88:a0:24:
77:e8:13:1c:86:0f:ee:60:09:d8:eb:4d:d2:20:02:63:88:0f:
eb:b5:65:17:55:bb:6d:0c:de:c5:01:04:4c:97:9a:82:7e:89:
ef:fc:43:17:d0:b5:0a:a6:e5:fe:96:56:18:bc:84:97:dc:dc:
a7:03:99:9f:20:19:19:7b:59:33:76:f0:ae:16:58:92:9a:6b:
ab:b8:f3:af:1a:52:aa:dc:95:3e:02:42:40:38:e9:be:4c:57:
3d:ac:d6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:06:54 2026 by rpki-client