Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
File: D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json)
Hash identifier: lHopya1FcrQwBKQuLaE5rsZGz7rFAzgj+wkUYdrWAJs=
Subject key identifier: EC:36:23:CB:EE:CB:6E:82:E4:9A:42:34:D0:1F:B2:47:84:FB:A0:7A
Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Certificate serial: 01A13F020ED6F06088B91E454392FF5C2D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
Manifest number: 07F3
Signing time: Thu 15 Oct 2026 10:01:01 +0000
Manifest this update: Thu 15 Oct 2026 10:01:01 +0000
Manifest next update: Fri 16 Oct 2026 10:01:01 +0000
Files and hashes: 1: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: hAtCnrHKq1M0lWQpbMTh02893ZXFRCzxfNEJ0eCbJuo=)
2: F5S7c_lGCVk-Ybkd9IbxnVLn3vg.roa (hash: eVI8yrXfhvYwE0S/KV9hYg3kBr3HBxAmGlH35T90T1Y=)
3: tR9QLvg32zRpvf2oKCE6RFQVW0w.roa (hash: 9iUcyr09RC9S3vOC8uu0ZwV6C+S87j6TwJKmC2Yyv1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:0e:d6:f0:60:88:b9:1e:45:43:92:ff:5c:2d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a
Validity
Not Before: Oct 15 10:01:01 2026 GMT
Not After : Oct 16 10:01:01 2026 GMT
Subject: CN=ec3623cbeecb6e82e49a4234d01fb24784fba07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:f4:ee:a7:f4:99:6b:d1:e1:f6:73:3e:dc:
22:80:1e:c6:df:ab:76:e3:f5:7c:0f:d9:71:80:a6:
b3:c4:17:44:af:0f:9b:4c:b3:d5:2b:23:f3:a0:a8:
0f:b6:d1:9b:76:80:4f:24:5d:f4:84:b0:42:bc:01:
3b:aa:94:b1:da:b5:f8:2e:f5:e0:b6:7b:86:55:1e:
f6:ce:c2:c9:83:ad:d8:0a:7f:3c:5b:6a:1c:0b:fe:
3b:04:1b:60:12:b3:9a:a3:85:1a:7c:b6:3e:4d:a7:
13:4d:97:68:16:fd:fd:1b:b9:f5:a3:fe:b1:94:40:
6c:77:27:54:b2:89:ba:7c:16:d7:9d:82:6f:7b:19:
ad:17:79:a4:88:09:f1:3c:a7:bf:24:25:a0:3b:74:
b2:e9:9b:14:d6:83:15:a3:12:b5:25:42:75:87:7e:
69:fe:3a:9a:45:f0:b8:e4:1e:4f:22:d4:33:22:02:
45:19:1f:cb:04:e0:a5:42:6f:68:40:a3:a0:b6:ab:
09:09:00:42:62:a7:e2:9c:3a:ae:3a:16:07:bb:84:
63:4e:bb:e4:3a:66:3d:6f:68:f5:6e:9e:01:01:bb:
c2:4c:e0:ab:86:e3:71:48:8b:c4:5b:5e:cd:70:07:
81:a1:6e:86:d9:dc:e9:ac:1d:ab:26:ba:5f:7f:84:
f8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:36:23:CB:EE:CB:6E:82:E4:9A:42:34:D0:1F:B2:47:84:FB:A0:7A
X509v3 Authority Key Identifier:
keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:21:a5:dd:4c:66:87:8e:1c:ed:4e:e3:4b:2e:c2:00:b4:92:
f9:19:cd:54:cc:c5:d7:65:79:16:57:1c:81:60:cd:44:cb:7d:
66:f2:be:9e:99:31:93:44:01:9b:e3:c3:c1:45:b3:dc:cd:29:
90:ef:5d:c3:62:60:c8:91:49:23:15:19:cc:95:6c:03:f0:b2:
22:a4:28:ef:26:c0:85:22:26:84:fb:1f:84:2f:8c:7a:2e:3a:
68:d6:88:29:b6:2e:4c:21:8c:63:07:2f:5a:ea:0b:30:97:a0:
ac:c9:91:88:1d:b5:fb:de:fd:39:13:6e:4b:6d:e5:e5:89:ce:
0f:64:0f:ef:e1:19:6f:49:01:82:cb:38:e1:cd:8a:54:1b:f5:
b0:3a:97:e8:0a:37:19:1e:75:40:08:8e:27:4c:78:fa:9e:34:
96:47:f1:1e:13:83:d2:02:d4:5f:81:6d:86:28:ee:18:d4:b6:
c6:5d:86:95:10:cb:f9:56:bc:e9:40:24:b6:57:a5:e3:dd:d0:
7a:3e:55:80:17:08:62:94:e3:6a:79:68:ca:25:9e:9e:25:61:
1d:ad:96:41:a6:c8:fe:fc:4e:63:de:dd:55:0a:44:bb:93:c5:
93:31:2a:48:5b:65:9e:a4:5f:7b:c9:b8:f8:2d:51:b8:cd:14:
68:b8:21:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:23:10 2026 by rpki-client