Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
File: sdLmgf8j3d89UXhY4cZKHa0phyk.mft (raw, json)
Hash identifier: 9xuySUW7bzgX2XRJO8lna9pU2jh/BvEv4d4s5sz6CeU=
Subject key identifier: FE:A1:CE:65:D5:72:44:D2:0E:CB:41:4B:6F:CE:DB:29:ED:45:47:7C
Authority key identifier: B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29
Certificate issuer: /CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
Certificate serial: 01A115CED21456E3662B2052E7325EA30BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
Manifest number: 18DD
Signing time: Wed 07 Oct 2026 10:00:38 +0000
Manifest this update: Wed 07 Oct 2026 10:00:38 +0000
Manifest next update: Thu 08 Oct 2026 10:00:38 +0000
Files and hashes: 1: bLRsbjwrHl85CS_7pV5-UUKmgDU.roa (hash: wRWPjMaqEtjkWAV9xCnB4Aq9mP2pz2n/Qg6SuBrxsSE=)
2: sdLmgf8j3d89UXhY4cZKHa0phyk.crl (hash: XLAaKq+hCZRvf+azoGwHdn6zXrJ+zDjEw1TyeJCChzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:ce:d2:14:56:e3:66:2b:20:52:e7:32:5e:a3:0b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
Validity
Not Before: Oct 7 10:00:38 2026 GMT
Not After : Oct 8 10:00:38 2026 GMT
Subject: CN=fea1ce65d57244d20ecb414b6fcedb29ed45477c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:6e:93:4c:85:98:a8:fe:5e:73:c8:8c:3f:
b2:cc:96:ee:57:4d:b7:e3:b1:43:e4:5c:47:3c:01:
9d:09:f4:36:13:e3:00:b7:79:a3:78:db:eb:50:1a:
25:ac:6a:dc:60:a0:3b:c6:a8:58:6d:ce:85:e2:b3:
67:6b:a3:86:ae:1a:39:d9:61:2e:ea:7c:9d:6f:ad:
3e:41:14:5b:26:7c:b4:4f:e6:35:75:63:3c:49:ce:
ec:dd:da:92:26:02:66:21:62:12:a9:50:5c:d8:ff:
7f:5b:bc:c3:98:34:6d:4c:83:ab:eb:5a:d9:f4:76:
f9:77:47:0f:b7:ba:79:f6:23:54:57:b3:6d:b5:de:
c7:01:00:b7:e0:8f:65:1b:fa:24:e2:3b:d6:01:6e:
ee:b4:56:6b:cb:f4:75:83:c9:57:bd:c0:ee:c0:e1:
70:5b:1d:8e:c1:ad:c6:73:65:96:bc:fa:aa:8f:64:
e9:55:e9:8b:fc:30:7a:79:39:dd:79:db:58:29:9f:
e5:b8:f2:a9:14:b3:21:f5:87:c2:0d:ac:2c:23:55:
c2:0a:d3:3d:83:5f:4b:2e:f9:22:b9:bc:17:35:f5:
b3:48:78:3c:dd:a0:eb:c0:8c:90:d0:49:8e:40:2e:
92:ae:c2:1a:73:0e:d3:8f:78:40:20:75:5e:76:16:
d9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A1:CE:65:D5:72:44:D2:0E:CB:41:4B:6F:CE:DB:29:ED:45:47:7C
X509v3 Authority Key Identifier:
keyid:B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:41:88:99:c8:87:b1:2b:99:ec:0c:ab:4b:c0:8c:72:6d:c1:
fa:67:5d:b9:bb:f7:cf:dc:dd:47:f4:e9:e1:6a:cd:d7:0d:c1:
fa:45:4b:cd:b0:df:cc:d9:3e:f6:7d:14:e9:7c:a9:7c:38:58:
5e:e0:45:9f:c4:7b:07:0d:56:9c:9f:d5:9a:2d:06:82:0e:e4:
f8:09:7e:8f:be:da:c6:fc:d2:17:4c:93:cc:5e:5f:95:fc:71:
db:da:1d:8f:02:3d:68:b1:0b:d4:cc:81:ee:37:e2:12:8c:8d:
ef:70:fd:21:c9:47:d0:be:7c:56:f4:b5:fe:02:60:2a:b9:97:
b9:4d:aa:1b:95:ec:ac:8a:17:0b:75:bc:71:2a:e5:56:07:65:
a1:85:90:72:da:ed:fa:64:4f:c2:79:aa:09:30:82:e0:de:c1:
ab:7d:b7:06:59:f7:05:1f:09:a2:52:83:07:ac:96:42:55:ef:
15:e8:e5:f5:48:50:16:fc:a7:ad:fe:8b:97:78:b3:21:f2:42:
78:06:74:fd:a7:8f:38:bf:71:7a:4e:d3:87:cd:44:03:5d:8e:
4b:80:93:77:a1:35:10:28:54:13:fe:c5:41:b7:21:3d:f1:72:
2a:67:f4:02:d8:bf:8b:f4:ac:77:68:e9:dc:01:c2:3e:c1:b5:
6a:fd:97:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:22:23 2026 by rpki-client