Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
File: DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft (raw, json)
Hash identifier: 5l8HAmLgdoGSt/OH4b3L5H9hztu2T3q+TBbu/oJh7Fo=
Subject key identifier: D0:38:AB:D8:2E:06:B1:4D:45:92:6E:6F:B7:01:28:A3:76:51:09:3C
Authority key identifier: 0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
Certificate issuer: /CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Certificate serial: 01A0DBA9F58F9162A36BC83787017BBB8B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
Manifest number: 026C
Signing time: Sat 26 Sep 2026 03:02:23 +0000
Manifest this update: Sat 26 Sep 2026 03:02:23 +0000
Manifest next update: Sun 27 Sep 2026 03:02:23 +0000
Files and hashes: 1: Atp7ou_dWLqF9yrUFBSaGu8i1NQ.roa (hash: iX6v9+WjPW25JV4dSQdrR9Ylqr6/LIAKembF0Rx+4SM=)
2: DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl (hash: LJKUSCivEsE64ufGnfGi5e7pSOSdd2XyL3+L2yRAIpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 03:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:f5:8f:91:62:a3:6b:c8:37:87:01:7b:bb:8b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Validity
Not Before: Sep 26 03:02:23 2026 GMT
Not After : Sep 27 03:02:23 2026 GMT
Subject: CN=d038abd82e06b14d45926e6fb70128a37651093c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:df:05:cb:62:d4:1e:95:89:3f:51:bf:64:
a8:84:64:fc:e6:f8:63:85:d0:9e:32:8c:6b:15:80:
98:c2:42:bf:b8:05:dc:b1:ab:b6:ae:c9:41:ff:cc:
b0:6e:76:03:08:9d:10:aa:9c:05:82:2f:03:db:56:
b2:67:6a:ad:da:7e:a9:ec:27:6a:de:8d:38:97:92:
40:bb:73:3c:e0:89:3d:81:01:c3:1b:9a:a2:5e:c1:
be:45:9f:19:32:ab:b3:0a:bc:08:da:25:72:48:24:
a9:cc:d7:36:76:f1:9a:4a:23:dc:1f:27:38:03:df:
86:43:f4:88:d4:9d:b5:c9:4a:f8:c9:df:11:a3:40:
18:b2:23:18:0e:e4:da:c8:15:23:8d:19:8d:e3:30:
a8:f8:78:46:6a:53:a9:30:8e:50:1b:f8:17:8d:f5:
c1:fe:9c:6b:e7:d1:53:6f:6c:7b:e8:8d:ec:c9:c9:
06:3e:50:28:f0:e6:c6:91:59:60:f2:95:2b:af:4a:
78:96:1f:27:57:19:6e:e1:cb:43:fc:6a:de:c6:13:
5b:ae:dd:df:dc:9d:df:cd:7d:09:85:fc:3e:9e:de:
03:23:40:80:1f:fd:56:ec:15:68:73:a0:e0:79:8b:
b4:17:69:51:89:b5:71:71:d9:d3:0f:cc:32:50:92:
60:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:38:AB:D8:2E:06:B1:4D:45:92:6E:6F:B7:01:28:A3:76:51:09:3C
X509v3 Authority Key Identifier:
keyid:0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:87:f8:89:e2:e2:a7:e4:29:07:1f:32:f5:03:a3:73:df:09:
3b:ac:2a:ee:4d:8a:ed:9f:25:e7:37:88:c3:3f:cc:46:43:ba:
72:ab:1f:f7:49:f4:db:87:5e:69:fd:d9:cb:f2:82:0b:a8:70:
59:d6:f4:bb:bf:bb:08:5c:8e:8b:cd:38:2e:7e:96:09:05:34:
4d:15:df:f7:ab:ee:90:cc:97:3d:28:e9:bc:9f:b7:d4:ad:b3:
44:18:5e:ee:10:07:b0:bf:65:19:d8:d4:43:95:0f:cd:c7:72:
57:08:f0:38:3e:e9:31:ee:5a:00:08:2b:8e:22:27:6d:d3:b5:
f4:d3:ed:eb:e4:4d:7a:4a:4b:1d:92:b9:3a:64:40:49:44:16:
0c:d5:d3:36:a5:80:d5:4a:25:db:ea:7d:13:01:ec:cc:31:dd:
06:ec:66:c4:19:48:ad:16:d8:5f:96:3f:54:14:fd:5c:fc:e2:
8f:e4:79:e6:c4:66:03:23:ad:ec:74:19:11:d5:2f:28:2b:7e:
76:99:1a:1f:c5:3c:e4:1f:4c:9c:63:b8:96:06:db:51:76:5d:
c3:71:a3:e5:d0:11:6c:9f:f3:49:17:5d:0a:24:e7:6f:10:07:
0f:b4:c2:ae:f5:88:7b:f3:39:d0:21:c6:72:68:e8:52:fd:74:
4e:62:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:59:45 2026 by rpki-client