Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier: L/AbHIH6UumFg6exYyOmjNs7s3CNrEZYlytlMXS5/+o=
Subject key identifier: 0D:FD:03:02:9D:4A:62:B7:11:38:5E:F2:28:52:1B:48:ED:BE:E5:A3
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 01A08C4435FAD4D06EBC60B37122CE2E6BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number: 08FB
Signing time: Thu 10 Sep 2026 17:01:15 +0000
Manifest this update: Thu 10 Sep 2026 17:01:15 +0000
Manifest next update: Fri 11 Sep 2026 17:01:15 +0000
Files and hashes: 1: 1ULsjrhU_Mgs_8Mvd-oE1b7ANaE.roa (hash: BPqaZcuEdD+lQrMI+iPU/GW6APEbwg38yW1mZjGwXr8=)
2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: 6WtoDhsukIoSf5ANxX3nABxUmT5WpORyW51sw57WIbI=)
3: pXo0ZUaV-y6EDCcUoSCUhqpPURU.roa (hash: EuVKLvC6yGpoLeqj+M0pu9788Rfc943eOWrQgVLBCHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:44:35:fa:d4:d0:6e:bc:60:b3:71:22:ce:2e:6b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: Sep 10 17:01:15 2026 GMT
Not After : Sep 11 17:01:15 2026 GMT
Subject: CN=0dfd03029d4a62b711385ef228521b48edbee5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:08:72:72:54:0c:64:d2:92:db:e3:7d:da:c5:
39:db:05:b6:9f:72:d0:40:86:33:ff:aa:9b:5f:fe:
16:05:df:4b:dd:47:ce:0c:64:46:db:9d:c6:4e:0d:
e3:6f:7d:24:10:62:1f:01:d1:80:82:9c:cd:58:fb:
94:41:7f:ff:f1:30:6d:06:de:d2:ea:38:91:25:6a:
1f:a8:50:15:e0:14:3a:ae:64:0a:06:47:e8:cc:2a:
29:5f:92:29:c2:5f:f8:d3:36:37:79:85:35:ae:b5:
77:81:2c:64:30:e1:e4:2e:23:46:e2:86:4f:ae:ab:
b7:c9:d8:9f:8c:0d:db:66:48:c4:f2:4e:0a:cb:94:
28:87:84:40:07:f8:08:fc:35:36:1f:b1:d1:bf:3b:
7f:fc:72:e1:30:01:6c:53:c0:9e:93:84:cf:c8:29:
be:36:8a:b2:70:76:e7:23:30:39:68:f1:60:f2:e0:
b3:11:da:bb:9c:13:29:b8:52:17:b0:33:3e:5a:8a:
c2:3d:a1:d9:10:87:b7:8c:ce:85:67:5b:7e:ec:0b:
bb:5d:05:33:5a:1b:c3:4f:e2:c9:d9:77:6d:49:e3:
b6:8c:f1:d2:ea:f2:ea:99:07:f2:83:72:02:22:53:
9a:86:59:a0:88:85:31:9e:e9:94:5f:07:1a:1c:a2:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FD:03:02:9D:4A:62:B7:11:38:5E:F2:28:52:1B:48:ED:BE:E5:A3
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3e:f5:79:77:5d:9a:4d:b0:ba:d0:c6:91:92:d8:98:ab:50:
11:cb:9e:be:bc:4b:c4:a4:28:33:f3:3a:17:1a:7f:9e:84:e3:
7d:2b:53:30:c0:10:a9:be:65:84:fb:6e:53:f8:ce:14:2d:2b:
bc:71:07:d1:bb:a7:47:7d:37:83:50:fd:7c:f3:e4:37:8f:f6:
98:a0:0a:35:ee:34:b7:1b:b9:4d:ca:f6:42:2a:f6:90:17:04:
9c:70:60:8e:53:32:0b:dd:94:3a:35:86:6c:e0:f7:8f:4c:4f:
d2:4c:00:a4:68:fa:ae:9f:55:95:ba:2f:29:a2:d2:6e:5a:2b:
04:fe:ad:01:22:18:e1:1d:79:38:52:78:67:dc:94:13:4a:18:
a2:6e:45:b6:69:ec:ac:4c:fe:97:79:60:8f:77:a0:1c:25:5f:
ef:69:02:e7:6f:9e:c4:7e:b9:99:ea:72:06:05:e7:94:a3:95:
46:c7:4e:13:4a:4a:72:3d:37:e0:ea:e4:0e:cc:65:d6:90:52:
06:55:94:af:c5:f5:ff:62:ba:f2:b0:64:e5:d1:d8:30:42:4b:
52:6e:f7:f1:fd:3f:48:ee:57:ef:64:cf:45:44:4b:f8:05:db:
db:95:4f:a2:3b:77:62:b2:d8:a9:64:ed:e0:7e:f2:e9:82:a9:
dd:cd:20:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:22:35 2026 by rpki-client