Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft
File: DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft (raw, json)
Hash identifier: ousPfLo/3nYK+UqnCH35Bxt4T36c8Bkau1gARqW40Jo=
Subject key identifier: 1A:60:EE:F2:C2:EA:A9:41:F3:D4:2E:DC:43:2E:FF:0B:DF:BB:67:9A
Authority key identifier: 0E:85:FD:3C:9F:95:58:B2:18:02:2F:F4:09:FC:55:4F:AE:E7:90:90
Certificate issuer: /CN=0e85fd3c9f9558b218022ff409fc554faee79090
Certificate serial: 01A13E5D44641570A0B681101E447A1472E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoX9PJ-VWLIYAi_0CfxVT67nkJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 07:01:01 +0000
Manifest this update: Thu 15 Oct 2026 07:01:01 +0000
Manifest next update: Fri 16 Oct 2026 07:01:01 +0000
Files and hashes: 1: DoX9PJ-VWLIYAi_0CfxVT67nkJA.crl (hash: f2TYB9gMmAzajSKYwVDKFRihGUAeXNaqLv5XTHwP+WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoX9PJ-VWLIYAi_0CfxVT67nkJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5d:44:64:15:70:a0:b6:81:10:1e:44:7a:14:72:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e85fd3c9f9558b218022ff409fc554faee79090
Validity
Not Before: Oct 15 07:01:01 2026 GMT
Not After : Oct 16 07:01:01 2026 GMT
Subject: CN=1a60eef2c2eaa941f3d42edc432eff0bdfbb679a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:66:fe:d2:ec:e3:e5:30:16:db:3c:66:93:3b:
6e:c3:ba:74:75:be:a1:14:cc:5c:fd:dd:68:1d:f2:
0b:d2:c4:0c:12:68:30:7b:40:74:9e:b3:9b:bb:0d:
5f:49:75:c6:25:32:ec:10:22:13:f6:f6:d1:ef:d5:
07:d1:f6:a2:59:31:15:0e:3e:34:46:85:3e:d7:79:
3f:2e:c1:05:53:99:76:d3:b4:0c:d1:b1:e9:de:ec:
15:70:2c:a5:39:71:a1:b1:63:96:f6:71:d5:83:4f:
5c:0a:6a:9e:2c:89:e0:a4:bf:17:bb:43:10:30:3c:
d4:24:6d:1f:33:30:d6:11:d2:b3:71:59:1f:bf:fe:
5c:4f:c8:62:95:c3:bd:a7:42:f7:05:96:e7:65:62:
7f:29:93:89:ab:c3:d9:c3:3c:71:de:d0:66:a8:29:
06:bd:0d:75:0e:c8:a9:90:d0:ff:96:61:aa:cb:5f:
36:b7:2a:fd:ff:a9:f7:57:a3:2c:37:ef:ef:ce:2d:
76:7f:6f:00:6a:2e:6e:ee:aa:e3:4c:8c:57:ea:71:
d0:c9:d9:ea:c0:dd:af:f9:fd:85:c6:f2:3c:58:6c:
db:e0:ee:99:a9:5a:9d:8f:cc:6e:a1:b2:65:fc:b3:
a9:13:fd:fe:0a:db:bc:a9:85:d1:cf:32:63:68:6d:
39:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:60:EE:F2:C2:EA:A9:41:F3:D4:2E:DC:43:2E:FF:0B:DF:BB:67:9A
X509v3 Authority Key Identifier:
keyid:0E:85:FD:3C:9F:95:58:B2:18:02:2F:F4:09:FC:55:4F:AE:E7:90:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoX9PJ-VWLIYAi_0CfxVT67nkJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/b3d3d9-7928-458d-836e-3303afe5c89b/1/DoX9PJ-VWLIYAi_0CfxVT67nkJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0b:e2:85:97:39:a4:e8:46:e0:44:60:d8:b7:a9:aa:82:b1:
10:86:98:0b:88:df:aa:e0:cd:8e:72:0e:7c:ff:11:c3:e6:a9:
84:80:81:e2:b2:54:cf:c7:ae:fb:48:6f:12:af:45:03:5d:a1:
4c:c9:09:18:3e:4a:5c:15:3f:67:93:b4:5d:86:d8:71:25:f7:
27:da:cd:be:a7:d9:a8:22:05:c7:ed:b7:8e:e9:03:a3:bf:f7:
6c:76:c4:08:3c:3f:81:38:d9:ca:5c:48:e0:43:9e:87:d9:2c:
27:0e:a6:01:cd:01:bc:c4:9d:34:3e:59:73:ac:ea:e0:6c:35:
bb:46:0b:b3:39:94:ef:bf:7e:d1:5f:a4:97:1b:ce:93:52:62:
c2:8b:2c:1f:f3:03:d3:99:05:63:ff:87:d6:96:c4:8f:02:a1:
a2:a6:05:4d:08:cc:d3:84:4e:81:5f:92:d8:1e:c0:0d:62:39:
1d:42:92:55:d5:f2:90:2f:e3:66:15:b0:53:ac:4d:15:6e:0a:
6a:b4:94:cc:f5:cf:f8:54:5a:b2:8b:e3:ce:c1:b3:cf:15:ef:
b1:4e:71:a4:1c:99:c1:fc:7b:a8:5d:cf:ec:ac:c0:1c:ea:9e:
98:52:e1:54:b1:2a:01:c7:25:aa:36:15:c5:7f:a3:0a:58:bd:
67:02:98:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:50:31 2026 by rpki-client