Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
File: d9Vhc4owymkonMhFMN5d73SjqYI.mft (raw, json)
Hash identifier: tRFQSma9fh4w2dGvdVSXPJkzC4q15Pj4eanqmmjUtnE=
Subject key identifier: B6:15:EC:A8:45:B0:A8:C1:D9:4E:E7:6E:59:52:B7:81:E6:D4:0C:20
Authority key identifier: 77:D5:61:73:8A:30:CA:69:28:9C:C8:45:30:DE:5D:EF:74:A3:A9:82
Certificate issuer: /CN=77d561738a30ca69289cc84530de5def74a3a982
Certificate serial: 01A004DE4C8D7EFFAFB37E268FE98E5529EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
Manifest number: 01DB
Signing time: Sat 15 Aug 2026 10:01:12 +0000
Manifest this update: Sat 15 Aug 2026 10:01:12 +0000
Manifest next update: Sun 16 Aug 2026 10:01:12 +0000
Files and hashes: 1: d9Vhc4owymkonMhFMN5d73SjqYI.crl (hash: LeKs2pF1YkHADkRV9hRa4q4qPuo8ovvNOh+0MZgDaKk=)
2: wBGjgdfu_nLRR4DjOBdo0PtKJMM.roa (hash: PPK9ixZ6Q7KuFLEJo2Wk9bDSxb6ZvTbGERhmOzUiZuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:de:4c:8d:7e:ff:af:b3:7e:26:8f:e9:8e:55:29:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d561738a30ca69289cc84530de5def74a3a982
Validity
Not Before: Aug 15 10:01:12 2026 GMT
Not After : Aug 16 10:01:12 2026 GMT
Subject: CN=b615eca845b0a8c1d94ee76e5952b781e6d40c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:a3:95:7e:5b:9b:19:86:44:73:08:c9:8a:
4e:49:f1:1e:67:91:da:d3:05:c5:d4:a0:e6:f6:4f:
0c:01:3a:02:d1:72:43:1e:b5:c3:d8:73:1e:f2:2a:
d7:e3:87:b6:65:27:47:5f:61:cb:48:1a:b1:e5:43:
5a:d1:34:a4:f0:d1:df:a5:83:fa:b6:f2:3b:41:ff:
41:8f:d9:a6:28:3f:5f:6e:4f:1e:4d:6b:08:1e:83:
ae:67:5f:e7:e1:e3:8e:3c:78:c9:52:bc:7e:eb:c6:
4e:a4:ae:da:cf:30:bb:b1:ec:23:25:99:f0:90:54:
32:68:67:bc:e4:05:49:7e:0b:3c:33:1d:83:eb:be:
64:93:95:20:a2:8b:81:9f:07:52:26:d1:7c:99:ed:
26:f0:55:95:10:73:b6:35:27:7b:97:e1:ab:95:57:
8e:c7:1a:06:b9:b2:2e:d3:67:9d:a1:fa:d9:29:f3:
1c:ad:69:ca:06:e0:48:85:62:75:93:d8:6f:44:6d:
14:6c:00:82:f4:06:20:ed:ef:58:fc:11:cd:71:09:
4a:7f:42:cb:f6:51:3d:da:a9:79:cd:b2:cf:69:4f:
3a:80:c6:0b:46:32:87:72:8b:79:f9:3b:9a:07:f0:
e3:aa:b6:23:18:b8:03:4a:66:6b:ea:e6:5d:9b:20:
10:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:15:EC:A8:45:B0:A8:C1:D9:4E:E7:6E:59:52:B7:81:E6:D4:0C:20
X509v3 Authority Key Identifier:
keyid:77:D5:61:73:8A:30:CA:69:28:9C:C8:45:30:DE:5D:EF:74:A3:A9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:62:29:37:8c:d2:af:80:a2:e0:c8:80:7a:c3:78:f7:15:5a:
73:b9:d2:b4:39:07:45:c1:cb:ff:87:ea:03:99:db:93:e8:18:
96:9b:b0:ee:d6:3f:e4:5d:2c:fe:d9:77:74:ba:f6:32:58:fb:
d3:5f:dc:ce:33:05:3f:a2:5a:34:ce:e1:4a:4d:4c:f2:b9:ae:
86:c1:e4:77:30:84:2a:14:52:37:a4:ba:f0:6d:c2:2a:e7:8f:
0d:ba:52:bd:83:7c:25:9e:a3:ee:0e:df:c6:4e:04:4e:3e:de:
dd:3a:26:18:da:20:9a:fc:f2:ad:2f:09:62:6f:82:63:33:52:
75:ac:1c:b2:6e:37:8d:ad:6f:13:b4:a4:e4:fd:f6:28:8a:1b:
44:ea:34:07:97:92:d6:73:dd:59:3b:95:73:94:99:86:02:24:
73:69:3b:a9:23:de:a5:fe:82:02:62:34:6a:95:33:d3:b9:a3:
1d:8f:d0:7b:b1:58:60:d4:e4:11:d8:74:84:39:65:89:01:5c:
c1:01:8b:2f:f2:72:87:c0:bb:c9:4c:f5:5f:57:8d:ef:d9:24:
a8:9d:6e:59:54:c0:9c:d2:92:52:bb:7d:38:ef:21:80:98:60:
d7:ea:3d:17:41:ba:a3:96:d2:5e:7a:47:82:f0:e1:f3:67:ce:
0a:8a:87:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 15:21:19 2026 by rpki-client