Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
File: 20bM9fil_kT0v9m6ZrpRJG2osYQ.mft (raw, json)
Hash identifier: DpT7rjz1rK8GMXoAawOi2wd7hp2kEFAV9gA3D+tFJFM=
Subject key identifier: 71:B9:F8:8D:BF:B5:F6:B7:19:27:27:E5:56:53:39:DF:75:15:FB:60
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 01A147CEEDE5B5F0CFF226977222B5A43B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
Manifest number: 186E
Signing time: Sat 17 Oct 2026 03:01:45 +0000
Manifest this update: Sat 17 Oct 2026 03:01:45 +0000
Manifest next update: Sun 18 Oct 2026 03:01:45 +0000
Files and hashes: 1: 20bM9fil_kT0v9m6ZrpRJG2osYQ.crl (hash: xtkmxivREtOC7bajBvn4u911kB6u3QJ82PwmO3fDtKY=)
2: 7kzK7-E42Pa8w63nDviF_cLjzRw.roa (hash: UZPrhRmZER1+q3579qQlJmn/mR5/oV526WWY7+wNVgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 03:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:ce:ed:e5:b5:f0:cf:f2:26:97:72:22:b5:a4:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: Oct 17 03:01:45 2026 GMT
Not After : Oct 18 03:01:45 2026 GMT
Subject: CN=71b9f88dbfb5f6b7192727e5565339df7515fb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:1f:9f:06:3f:c6:64:e1:62:8a:e9:ff:9b:
69:40:64:3e:2e:03:13:7a:93:69:f2:0d:ef:2d:37:
2d:81:40:e7:4d:3b:27:0d:7d:4b:71:4e:7e:28:da:
92:60:84:de:65:55:02:3d:62:55:45:ee:b4:03:81:
5c:d2:51:8e:ef:ef:97:51:9e:54:54:78:48:e0:36:
a3:91:b7:be:fe:24:e7:61:ca:28:49:d4:19:29:7e:
a8:07:d1:05:20:70:57:05:b7:70:90:cc:ce:32:c2:
a1:93:5b:a0:93:59:56:c7:f2:44:9c:ff:e9:be:cd:
2a:17:a4:dd:e4:1c:7c:bb:76:aa:f7:1b:38:74:12:
3d:d2:7c:af:16:26:f7:98:ab:21:d9:76:69:2d:8c:
cc:47:ad:fb:28:df:2e:84:5d:a5:07:a2:1b:33:de:
c7:ad:16:28:19:e2:27:6c:a3:82:07:c8:48:30:25:
34:63:70:07:1c:95:56:80:21:6f:94:1e:ca:7c:01:
75:db:fc:6d:50:e7:31:0a:d1:20:4c:89:7d:27:7b:
c5:eb:ff:1a:ad:7b:9e:b2:fe:ec:68:ad:7c:e9:66:
f5:e3:72:37:12:eb:d4:6e:f5:03:22:d9:af:58:ea:
9d:65:e6:5a:0f:f6:41:9e:42:07:67:08:ae:5f:bf:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B9:F8:8D:BF:B5:F6:B7:19:27:27:E5:56:53:39:DF:75:15:FB:60
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:10:6e:db:6a:27:86:78:97:b5:f9:2a:50:ad:31:5f:2e:e0:
b4:14:33:a9:d7:19:a1:cd:ab:28:e5:45:02:b2:ca:ec:d4:65:
88:31:75:28:9e:4e:62:d8:aa:35:b8:c3:67:5d:e7:3e:4b:30:
83:fa:d6:ea:89:3e:48:fa:d9:b2:ec:26:d0:f6:ab:0e:71:71:
43:64:f5:3e:d1:f5:03:47:f3:c2:40:4e:f3:41:fb:3f:d6:66:
14:1c:0a:bd:51:87:9a:1b:7e:8c:d9:cd:c9:09:0a:43:63:8a:
07:e6:b7:d8:d9:8f:45:22:80:c7:0c:47:8e:17:a0:a4:01:68:
08:81:68:74:12:12:ad:38:a7:2d:22:1a:24:22:75:ff:a3:61:
7a:06:9e:04:17:e4:c5:df:fc:f5:8b:32:19:e4:cf:4a:d2:ab:
a6:02:01:61:57:a9:e6:6d:da:02:1e:ca:ec:d3:4b:63:cf:4d:
5e:d1:b9:90:8f:b8:1f:3f:17:3f:b6:42:56:56:42:78:99:76:
df:99:24:4d:7d:d6:2e:7a:13:68:fc:bb:84:b6:b3:29:ed:83:
03:75:d0:25:b2:ff:86:78:06:ef:82:1d:19:b8:72:25:b8:4f:
1d:a5:ec:4d:78:ea:6e:45:d9:5f:64:23:82:a4:ff:32:4c:cb:
a8:69:bd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:21:43 2026 by rpki-client