Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
File: DbPDFk09jCZEzymzI2dhpXHuWLo.mft (raw, json)
Hash identifier: lcipK4+mWm2W0/r0tAHBgDCg3S1SbD/xAQUfRWqF8tI=
Subject key identifier: C9:7F:C2:26:F9:AA:1F:A4:10:3A:0F:4D:EE:4E:89:99:1F:9E:74:DF
Authority key identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
Certificate issuer: /CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Certificate serial: 01A13F02A19FF0FAF8E3471B974992BEFD81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
Manifest number: 10AC
Signing time: Thu 15 Oct 2026 10:01:39 +0000
Manifest this update: Thu 15 Oct 2026 10:01:39 +0000
Manifest next update: Fri 16 Oct 2026 10:01:39 +0000
Files and hashes: 1: AV8o_HRJCYQ0OsTpD-wRX5B7CZE.roa (hash: IbeU1AeOys6rseJf5ugRnLAWWP/7mZIxuUtqX7netkk=)
2: DbPDFk09jCZEzymzI2dhpXHuWLo.crl (hash: l2M+y22S5aDCVJN5p2gDicPRMh7s9ha5blycPUYz2EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:a1:9f:f0:fa:f8:e3:47:1b:97:49:92:be:fd:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Validity
Not Before: Oct 15 10:01:39 2026 GMT
Not After : Oct 16 10:01:39 2026 GMT
Subject: CN=c97fc226f9aa1fa4103a0f4dee4e89991f9e74df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:ff:3a:fa:ff:88:16:64:3a:b3:cd:14:0a:
06:c8:e1:06:9a:8d:c5:b3:b0:bf:a9:cf:1b:c9:39:
d1:6f:4d:a1:1e:af:4a:43:f7:91:c0:ae:de:88:a1:
ad:09:94:86:98:fb:34:1d:d3:d5:43:15:01:01:c2:
0d:41:56:d1:95:ab:9a:62:90:6d:29:e3:f3:b1:c3:
16:c3:33:e5:66:b1:d6:bb:ac:f2:df:8c:fe:40:15:
06:bf:61:67:ef:43:f7:37:5c:8b:2d:42:18:b4:ef:
04:b6:06:64:e3:bd:df:7b:3e:24:be:84:53:10:60:
cb:10:df:23:0d:dd:0f:84:81:7c:02:9f:67:06:ff:
e6:5a:6e:27:91:f9:44:50:c7:cd:cf:a7:99:e2:e8:
ab:04:3b:d4:e6:a2:0e:7a:74:ea:15:a1:6d:f5:9e:
d4:02:3d:27:1e:2e:5d:f6:fc:8b:41:7a:cc:d3:61:
a3:2f:bc:b9:2c:8b:b4:9d:12:53:d1:62:49:c6:09:
d0:ef:b3:07:70:10:a0:51:7a:27:c3:08:67:61:cf:
26:fd:a9:95:29:51:58:5a:2e:98:e1:92:dd:85:35:
ae:57:20:2b:2b:78:11:f1:9b:2d:99:bf:4e:1f:c4:
b4:72:b2:91:b6:74:f4:c6:b8:37:c2:c4:4d:df:95:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7F:C2:26:F9:AA:1F:A4:10:3A:0F:4D:EE:4E:89:99:1F:9E:74:DF
X509v3 Authority Key Identifier:
keyid:0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c6:88:c4:88:95:8f:64:c6:08:c8:ff:14:14:a1:37:cd:7e:
1b:cc:b1:b6:87:87:9a:b6:06:b3:51:1f:00:73:62:6b:a0:79:
79:50:91:bc:8c:c3:04:d8:61:00:20:4f:91:d7:13:5b:3c:3a:
c8:32:3c:b8:ae:cf:2b:64:6b:21:97:4f:3f:ad:a5:94:de:69:
e3:8a:75:a1:ee:69:9e:16:e4:e7:59:f1:57:91:89:87:5d:69:
b7:a3:96:5b:ec:01:cf:6b:17:27:34:cc:ff:98:25:8d:0f:87:
44:3c:d6:7c:4f:25:73:0f:a4:d5:36:00:b4:27:58:ca:42:d9:
7a:8d:d7:67:a9:da:b2:7b:85:8c:fa:e3:2d:9f:a6:be:55:0d:
22:c0:e9:2e:be:00:a6:8d:91:f8:b8:d7:35:4a:7f:a8:c2:35:
a7:11:e3:fe:25:0f:af:c1:b4:d8:f6:0a:72:a7:94:a4:58:bb:
88:d9:7e:bd:15:ba:c3:45:28:6c:00:e6:9f:4d:57:31:25:b7:
ec:3b:32:b1:b2:e5:6d:4f:4f:14:ba:b5:84:89:33:cc:d1:49:
78:e0:c3:84:27:c7:f7:d4:b6:94:68:50:c8:8e:db:b8:ad:89:
c1:28:21:f0:3b:32:fb:ff:ad:45:f8:c0:72:5a:1f:d5:b7:8d:
0e:9b:fb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:54:52 2026 by rpki-client