Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
File: sdLmgf8j3d89UXhY4cZKHa0phyk.mft (raw, json)
Hash identifier: XwUsi0xOkZVH5Nm8j5AF9s+FGNVjXlIo9cnD1kZ4i68=
Subject key identifier: 20:D0:D3:9F:07:A6:86:89:8C:7C:87:A0:D4:83:A5:23:DE:BC:D9:76
Authority key identifier: B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29
Certificate issuer: /CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
Certificate serial: 01A119AB8AFA18D6086F9A57BF777C7CA515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
Manifest number: 18DF
Signing time: Thu 08 Oct 2026 04:00:34 +0000
Manifest this update: Thu 08 Oct 2026 04:00:34 +0000
Manifest next update: Fri 09 Oct 2026 04:00:34 +0000
Files and hashes: 1: bLRsbjwrHl85CS_7pV5-UUKmgDU.roa (hash: wRWPjMaqEtjkWAV9xCnB4Aq9mP2pz2n/Qg6SuBrxsSE=)
2: sdLmgf8j3d89UXhY4cZKHa0phyk.crl (hash: RH2ashkeIiNRxxnHCXzXG45WdtOrT5f0b6sjiS31Ql0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:ab:8a:fa:18:d6:08:6f:9a:57:bf:77:7c:7c:a5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
Validity
Not Before: Oct 8 04:00:34 2026 GMT
Not After : Oct 9 04:00:34 2026 GMT
Subject: CN=20d0d39f07a686898c7c87a0d483a523debcd976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:b7:5d:45:d8:a6:bd:05:25:b2:67:d9:a5:
6c:40:e1:aa:92:d7:96:2e:f4:c9:11:a4:fd:b8:a3:
d6:36:5d:6e:83:ca:56:81:30:b7:4f:86:6c:b9:02:
6f:b0:8f:0e:c8:31:c7:ea:a9:75:de:a5:cf:04:5e:
f0:b7:05:fb:2f:ac:ea:73:c2:cd:fa:56:43:39:66:
d6:ba:74:50:d6:ba:4e:54:6d:e5:53:f2:06:0c:2a:
73:f5:87:d5:c5:fb:47:2e:7a:d9:af:d2:d1:9b:c1:
62:23:f3:76:06:0c:a2:a5:4c:e4:b3:3a:38:03:96:
a3:37:c6:c8:90:ac:f5:46:4f:be:6d:5f:fa:e4:84:
ed:39:b5:ec:6e:af:36:d1:eb:72:94:1a:cb:58:e3:
3e:99:92:ce:11:57:fa:fb:92:b3:09:9e:b9:27:98:
cd:88:d4:49:91:75:82:58:0e:49:7d:03:d2:3d:b3:
01:dc:c1:1d:e8:f0:1f:92:e7:99:f0:4c:4d:11:84:
9e:0d:8c:f1:dd:47:71:49:6e:fd:9d:4f:2c:7b:7f:
b9:02:54:b8:04:69:c4:92:4d:51:f1:d5:73:a3:75:
c4:2e:73:7b:94:cd:54:ce:fd:dc:b3:d1:2d:6c:d0:
1d:90:cc:25:d3:76:b5:ff:82:cf:a3:3a:5f:76:51:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D0:D3:9F:07:A6:86:89:8C:7C:87:A0:D4:83:A5:23:DE:BC:D9:76
X509v3 Authority Key Identifier:
keyid:B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:45:35:5a:e1:fa:84:e7:ba:fb:d8:6c:64:90:39:6e:84:18:
1f:32:72:e4:be:48:f9:5c:f9:7b:cc:0f:bc:cd:a4:0e:64:fc:
86:e4:9a:e8:89:d5:15:1f:6d:5c:46:9c:30:02:19:96:a8:36:
a9:08:7e:78:e7:18:ff:6c:ca:4a:53:37:72:29:72:18:fd:d9:
ba:88:6b:ba:fe:ed:8f:c2:8c:c4:7f:5e:0f:a0:ea:b5:f3:36:
ee:4a:79:59:e9:44:b4:8e:90:25:35:4b:8e:ef:18:34:75:f3:
0d:b6:2d:c4:7f:e8:1e:e7:f6:89:a1:c3:c0:bd:02:05:b2:38:
f2:eb:65:66:0d:96:04:37:bc:41:3e:60:8c:71:ee:76:39:d6:
5f:31:63:75:7f:9e:b1:ba:29:1b:cc:d2:8b:5c:42:f9:3a:a2:
c1:88:9f:ab:53:36:ac:86:51:3c:0b:0d:56:ed:15:ac:9b:de:
8d:b5:a3:f1:ef:45:ad:e2:ce:af:1f:0d:db:99:40:53:5a:99:
e1:56:c6:e6:77:32:f7:18:07:26:a9:72:b3:88:b1:60:be:fe:
3c:2c:c3:0d:e6:39:56:4a:7a:75:aa:2b:d8:63:55:ad:a6:a8:
be:ca:e5:32:a4:72:85:5a:f0:74:7c:74:8c:03:af:1f:aa:c1:
95:53:4c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:29:35 2026 by rpki-client