Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
File: dBmPcCK5VgUB20SK9gMB-ihekjY.mft (raw, json)
Hash identifier: ch423bjo+K8ASJAlpic9fdc9QXy5Q7oH0K7gaASm3+Q=
Subject key identifier: 6D:17:06:57:9A:31:B8:47:82:A4:25:05:67:B8:88:F8:69:D0:E9:E7
Authority key identifier: 74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
Certificate issuer: /CN=74198f7022b9560501db448af60301fa285e9236
Certificate serial: 01A08C7B5C6E005B445F68133F8CC6EDA117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 18:01:29 +0000
Manifest this update: Thu 10 Sep 2026 18:01:29 +0000
Manifest next update: Fri 11 Sep 2026 18:01:29 +0000
Files and hashes: 1: dBmPcCK5VgUB20SK9gMB-ihekjY.crl (hash: LEonjUkpp5lUPUdHKWc7adqNtn0OGW7EkRG/DQvLUZo=)
2: x-8swSoHWXn2gEZTtgRDy-vs_DM.roa (hash: ylAYgviMfyC3A9eoEgIb+VgNLg1iORRgtmKdI3QPLJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:5c:6e:00:5b:44:5f:68:13:3f:8c:c6:ed:a1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74198f7022b9560501db448af60301fa285e9236
Validity
Not Before: Sep 10 18:01:29 2026 GMT
Not After : Sep 11 18:01:29 2026 GMT
Subject: CN=6d1706579a31b84782a4250567b888f869d0e9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:74:ec:d5:94:3e:76:cc:d2:6d:3f:26:5f:
a2:fb:a5:dd:9b:dc:14:cc:f0:36:58:fe:dd:54:ec:
2e:f7:3d:51:7f:77:cb:95:7b:19:bf:41:fd:22:12:
11:11:c2:58:69:d0:eb:5d:13:35:f9:bf:fe:92:fc:
8d:ad:19:ee:84:c9:42:b1:09:8d:77:7d:73:40:e1:
87:5e:3a:f0:22:47:71:bb:72:5c:f9:d9:a2:80:16:
84:97:93:90:67:ca:98:da:3c:32:65:c7:1c:b3:65:
54:0c:0b:55:4c:62:02:8b:d5:cd:c3:28:79:59:f4:
a1:d9:1e:58:87:ad:45:22:3f:f3:2b:00:73:9f:2e:
77:aa:79:1c:30:86:44:e9:d6:70:8a:84:2f:8c:11:
9b:75:b6:cb:07:58:22:1e:b7:12:4a:79:30:52:e3:
96:7a:b3:68:c1:d4:63:48:8c:94:58:b9:15:22:f5:
8a:ee:8e:1e:1c:12:86:ec:4f:44:00:6f:a6:2f:09:
f8:b7:2c:19:45:cd:eb:a7:83:0a:c2:59:27:2b:b4:
53:a1:56:78:b1:f2:1b:99:d5:98:71:3f:75:b5:73:
5c:85:78:bb:ca:2c:fe:79:90:fa:72:d8:20:91:00:
b8:d3:4b:06:8d:a6:7e:41:00:6a:2b:ee:75:fb:22:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:17:06:57:9A:31:B8:47:82:A4:25:05:67:B8:88:F8:69:D0:E9:E7
X509v3 Authority Key Identifier:
keyid:74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:92:ad:ff:51:5b:79:9d:1f:20:74:79:f5:1d:24:27:b5:4c:
d3:3f:51:72:26:e0:84:ff:ce:0e:6d:9f:b4:f5:26:49:3c:3b:
38:bb:26:cb:ac:f5:a2:e1:b5:93:a4:b9:51:20:e9:70:47:11:
ca:28:3e:56:6c:bc:a2:7c:ff:1e:63:de:00:66:21:e0:85:06:
d9:50:cb:87:1d:a8:41:1f:9e:79:76:ab:76:68:ae:e0:4f:2c:
97:86:3e:69:e1:5d:71:58:e3:0d:de:5c:30:b0:f3:fa:0e:69:
b5:a3:28:0a:51:ec:a9:a1:ca:a2:54:d6:62:ba:3c:ba:1a:e5:
aa:4f:cd:d3:eb:63:f0:e5:59:f9:f0:43:d6:00:8b:b5:95:18:
d7:91:ef:c0:e8:9a:ec:e1:5d:30:3f:55:c7:c9:6b:bb:cd:e1:
0d:3d:e0:e5:55:0b:a6:e3:f4:e0:3c:4a:b8:08:66:fd:9c:25:
c9:72:5b:df:53:21:a2:04:4c:54:e6:c2:54:dd:ad:13:87:9d:
f6:13:a4:fa:28:fe:15:e7:27:30:02:6e:9f:52:28:e3:7e:7d:
3c:a7:c7:74:b7:9f:32:3c:65:81:17:66:d2:bd:6c:3f:b3:d1:
54:e6:2f:08:03:24:48:9b:c9:f1:e9:0c:90:3b:e6:b2:8e:5a:
fe:67:0c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:34 2026 by rpki-client