Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
File: D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json)
Hash identifier: T/lsq+iY1vYo8u3FOfTI7PWps4YeRX05wCUNJN5c4YQ=
Subject key identifier: 8E:90:F0:C3:2F:4A:73:D3:F6:F7:D5:84:8E:89:3D:61:70:4E:B6:19
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Certificate issuer: /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial: 01A13E25A913DFFCC1336FAE47C8E34A9688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
Manifest number: 0CFA
Signing time: Thu 15 Oct 2026 06:00:17 +0000
Manifest this update: Thu 15 Oct 2026 06:00:17 +0000
Manifest next update: Fri 16 Oct 2026 06:00:17 +0000
Files and hashes: 1: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: 73bWK4zR1CMZAfKcXVhBTqJzZLeN0uEGUFA0v6X6ctU=)
2: RZQiwmw-LTuvBT8bKGu9sePwQKA.roa (hash: 30MASV+eS5v/knDU6PvbB3wtKl60C43+n0OVN/QWwQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:a9:13:df:fc:c1:33:6f:ae:47:c8:e3:4a:96:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Validity
Not Before: Oct 15 06:00:17 2026 GMT
Not After : Oct 16 06:00:17 2026 GMT
Subject: CN=8e90f0c32f4a73d3f6f7d5848e893d61704eb619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:a5:d4:5b:3f:ee:a5:fc:27:f8:76:32:d6:
e4:15:82:78:d3:f6:5a:ff:83:fe:41:8f:75:9d:45:
8d:95:17:30:b0:f3:84:23:c7:99:9e:d4:95:03:51:
9b:d7:c7:ba:04:93:5d:93:a7:9e:49:78:b8:c6:97:
31:8c:c6:cf:b5:87:43:cd:e1:64:47:35:78:1d:69:
fc:56:6c:aa:f3:47:60:47:bd:15:77:f5:eb:47:5a:
f3:8b:db:4f:09:b1:4f:50:b3:73:41:af:b6:2d:f9:
20:4f:e8:70:47:87:a2:f0:77:81:6a:35:ab:36:38:
b4:79:aa:dc:86:ea:10:ae:61:1f:42:eb:b6:bf:c9:
22:ef:89:9c:00:0e:0f:a5:37:ba:fb:3f:e7:26:64:
ef:50:00:ba:ba:b4:7e:b0:41:bf:e9:0f:9a:bd:69:
7c:a3:d9:af:f7:36:e1:20:31:32:de:d4:56:65:70:
9e:db:40:b8:44:53:22:84:b5:8d:65:53:a4:15:05:
5d:c2:95:4d:82:8b:1b:05:20:66:ba:3b:66:42:e5:
42:41:b1:37:59:92:45:29:3c:d6:40:9f:7f:7a:14:
db:73:6e:89:08:11:62:1a:a5:cc:81:9d:39:e0:6e:
55:37:4a:f8:fa:e5:33:c7:45:d5:73:1d:64:6e:c5:
65:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:90:F0:C3:2F:4A:73:D3:F6:F7:D5:84:8E:89:3D:61:70:4E:B6:19
X509v3 Authority Key Identifier:
keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f0:6b:c2:db:52:5f:2c:45:90:da:78:e0:9f:ca:6b:97:71:
53:4a:32:9c:d8:c5:f9:77:ee:35:4a:d9:33:00:ec:48:e0:59:
4e:1f:ea:1d:7f:c7:38:c0:10:12:dd:64:b9:fb:34:ca:ce:d4:
1b:c3:ef:6b:f9:0e:52:3a:67:53:96:35:7e:e7:63:2c:4c:80:
7a:76:90:d2:b3:05:0a:24:44:e3:74:69:cf:13:e6:3e:34:17:
5c:5a:39:06:95:7e:96:97:d3:13:fa:67:dd:b4:a2:d6:0a:cc:
dd:db:2c:c7:f4:db:96:fe:f9:59:1d:8c:29:7a:b1:8b:bf:61:
a6:aa:39:fc:ee:3d:6b:84:7e:7f:2a:3b:56:e4:bf:f2:8f:48:
c1:d7:68:cd:fd:00:ac:1d:66:9f:2c:c9:ca:bd:08:b4:96:b5:
d3:fe:da:28:f2:34:e9:da:7b:0d:82:63:48:16:6d:1a:1e:bc:
04:43:d1:58:52:89:e8:c8:4c:15:61:de:14:f6:af:92:fa:22:
76:da:cb:5e:8f:d2:c4:a7:df:d2:e9:cb:db:8a:35:f4:14:98:
ae:fd:6d:1f:0d:90:0a:a1:dd:9f:65:3b:9c:6d:a9:00:2a:36:
74:20:90:58:05:fc:4c:88:5e:98:c6:74:f4:b7:0a:90:07:55:
e8:a6:88:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:09:41 2026 by rpki-client