Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
File: D8T3CpLUasAsjf5_l1vkir1i56Q.mft (raw, json)
Hash identifier: pZNr40uoCunhm1pZ+WSMvWH2OHFEUoiZWdiMA6c8DX8=
Subject key identifier: 05:49:A7:47:02:11:B8:06:76:5A:E7:26:FD:9B:E1:15:99:81:D2:82
Authority key identifier: 0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
Certificate issuer: /CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Certificate serial: 01A00093088E37C18A75CD6089EAE625D13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 14:00:30 +0000
Manifest this update: Fri 14 Aug 2026 14:00:30 +0000
Manifest next update: Sat 15 Aug 2026 14:00:30 +0000
Files and hashes: 1: D8T3CpLUasAsjf5_l1vkir1i56Q.crl (hash: 5ovEJSh5QoSkDQNS27sIQXZ0xmidljupprzjrIEN55w=)
2: kMUpaCiTkh2kJr0mhaoFnVyiC30.roa (hash: SYX4r9LuobOamN0k+QFcLKBI8j/NR9w+wByXAqgbr74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:08:8e:37:c1:8a:75:cd:60:89:ea:e6:25:d1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Validity
Not Before: Aug 14 14:00:30 2026 GMT
Not After : Aug 15 14:00:30 2026 GMT
Subject: CN=0549a7470211b806765ae726fd9be1159981d282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:09:06:e5:16:c5:68:28:a1:98:92:0a:c7:
8f:bf:a2:8d:c5:e6:1f:96:7b:fc:7d:bc:46:07:a8:
16:75:30:ff:0c:e9:aa:a1:fd:32:48:7e:99:9f:bb:
a2:89:9d:87:09:68:d3:83:81:b7:44:49:55:f4:a8:
82:e2:05:fe:d6:1e:13:00:f1:0b:7b:eb:53:38:30:
de:8f:f9:61:56:f6:7c:74:fd:a2:07:9f:0f:99:5d:
16:8d:58:6e:e6:b1:e9:8a:b5:eb:ba:71:8d:6c:af:
13:ca:54:47:ae:77:cf:9e:f0:e6:ff:7f:0c:30:b5:
03:d4:35:2f:b4:41:e8:9c:2c:9d:bb:ec:92:09:72:
3c:78:a3:38:90:ad:b6:6b:69:18:c3:e6:67:09:bc:
96:e9:84:39:6d:96:3f:11:e8:b9:85:71:15:19:5d:
51:bd:6c:50:80:61:8c:0f:e3:6b:47:d8:8a:a1:94:
a7:b5:1e:cd:34:af:a4:5d:d9:1a:9a:8b:8f:7e:e6:
db:4d:b1:bc:71:9d:18:ad:be:72:4c:26:35:ab:37:
45:92:c0:0c:21:ab:c2:df:00:e7:85:85:6b:3e:8c:
76:24:1e:a8:e2:59:4d:61:fc:90:26:bf:6f:69:5c:
cf:20:f2:70:a7:64:db:21:d1:03:63:00:c0:bb:66:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:49:A7:47:02:11:B8:06:76:5A:E7:26:FD:9B:E1:15:99:81:D2:82
X509v3 Authority Key Identifier:
keyid:0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3e:8b:34:bf:ae:16:35:6d:d4:13:2f:ac:b4:e0:07:56:7b:
30:3a:8c:be:aa:11:6e:73:3e:1f:9f:8d:1c:d5:d8:e3:62:f7:
04:e4:02:33:c6:e7:4a:d2:10:98:7b:61:cb:c8:b6:4a:73:42:
2d:a3:d9:a5:3e:44:ea:76:67:54:6d:ea:f8:30:c4:58:1c:a6:
b6:45:ef:d4:ee:2d:06:f7:53:4b:d7:c0:a6:fe:6b:24:28:fd:
43:86:0d:a6:a2:a7:a6:49:47:4e:35:2f:f0:82:43:68:8d:37:
b9:e2:ef:5f:a8:73:4b:b6:ec:80:46:21:19:2e:41:b0:5b:e3:
2a:5e:02:1b:0f:a8:3e:9b:e2:80:a9:b4:25:16:b6:e5:7d:e6:
e4:b5:fa:0c:91:a9:e8:f4:f0:b9:24:42:6a:da:a7:ac:25:f3:
3f:0a:21:25:02:39:81:e7:a6:96:99:53:2c:ae:0e:01:e6:8b:
51:d2:ae:08:d8:2d:dd:e2:6e:56:b9:43:f9:5e:d1:56:6b:fd:
23:75:26:5f:ab:36:92:99:d3:23:81:ec:4c:40:c8:58:fb:c8:
c2:38:3b:f5:ba:31:e9:21:4a:f9:c8:2d:51:47:73:ca:44:c5:
28:ca:f9:52:12:2f:7b:e1:b4:35:04:ce:34:a7:8c:57:f8:95:
df:f3:1b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:11 2026 by rpki-client