Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: 4li2iMFL5Mk/fETHJzi95sYFiel5ri3KGj07c1hgFdI=
Subject key identifier: CC:9D:49:9D:28:23:CB:C8:E9:91:DB:32:11:F5:2B:3E:2E:92:3C:62
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 01A15B8C954357E903E8D33440313F335874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 100F
Signing time: Tue 20 Oct 2026 23:01:42 +0000
Manifest this update: Tue 20 Oct 2026 23:01:42 +0000
Manifest next update: Wed 21 Oct 2026 23:01:42 +0000
Files and hashes: 1: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: oRLfadmopxW1HnASRFRchw/K6koxNxiQcCdxCOmkhNI=)
2: gabLNz-9haR8x0JVvUH9RWZfT3o.roa (hash: elMsH5/2kflaBwBGb1wo4RBVBbTZ4kW2OpPSbwpINts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 23:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:8c:95:43:57:e9:03:e8:d3:34:40:31:3f:33:58:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Oct 20 23:01:42 2026 GMT
Not After : Oct 21 23:01:42 2026 GMT
Subject: CN=cc9d499d2823cbc8e991db3211f52b3e2e923c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:52:48:d8:97:b0:d8:81:14:d6:4d:4c:01:
3f:c5:9c:55:d1:fa:1b:3b:ef:d5:87:fa:db:41:dd:
57:ba:61:da:7c:3b:42:dc:6f:4c:63:ce:37:20:79:
8c:d7:96:cd:57:81:24:bd:5c:e8:62:c3:7a:b7:51:
93:0b:37:a1:1c:73:66:81:6a:ea:c5:67:10:50:55:
a6:45:e8:25:d3:6c:4b:6c:97:25:84:59:df:9e:08:
80:4b:9c:b8:93:42:52:ef:51:7c:13:c5:52:3f:03:
8d:37:0e:9f:9f:27:ad:62:22:82:63:52:4b:a8:72:
9c:9b:27:61:80:d7:4d:92:e3:ed:82:ce:76:99:88:
e4:3f:dc:d3:20:8c:13:c8:70:ad:ab:d1:84:4f:a6:
2e:79:00:e0:31:f1:5a:da:92:d4:8c:34:8f:c3:6a:
1b:77:b5:a1:30:dd:92:ac:a7:4f:61:c5:a4:ba:f6:
46:2b:bf:40:b2:79:ef:fa:f8:1f:51:0b:9d:52:8b:
a8:28:ed:f4:6c:eb:9d:ac:ee:f8:29:ea:3b:a3:dd:
67:e2:76:fd:db:56:34:47:69:15:f3:bd:f8:96:b1:
fe:8a:c7:cb:52:65:ce:55:d6:1e:5f:4f:61:39:6a:
1c:38:3e:9b:20:8b:f4:9f:a9:c7:1e:39:e4:c3:0b:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9D:49:9D:28:23:CB:C8:E9:91:DB:32:11:F5:2B:3E:2E:92:3C:62
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b6:77:f4:54:80:ca:f6:0c:10:d4:5d:aa:4e:9d:48:7d:4b:
d3:26:ab:a0:ac:12:d1:58:62:bf:8d:88:1b:a5:18:d5:31:bd:
45:a9:bc:ac:1b:08:99:b4:0e:b4:05:6f:4a:74:21:d0:d6:51:
ad:7f:f3:91:5a:38:fb:64:62:3d:31:72:cb:ef:4c:03:e4:cf:
fd:2f:6f:b9:c4:ed:e3:d2:a8:a1:31:ed:d5:b6:56:5f:94:a3:
95:27:75:3d:26:66:03:ae:20:63:88:03:75:a4:51:2d:de:70:
99:e5:b0:bf:f9:69:9d:bc:61:38:21:e3:03:56:fb:e1:a1:ae:
8e:35:24:47:6c:5c:61:06:84:ae:91:07:c5:b7:bf:26:74:66:
62:b7:61:16:72:5b:6c:31:69:4e:7e:70:bf:e7:61:4f:b3:8e:
26:40:11:25:73:d3:80:5b:ea:c0:c8:d1:6a:eb:e8:3b:30:ad:
ab:5f:2d:06:05:05:ac:a7:9c:28:de:e3:40:be:9b:a6:d4:ba:
ab:00:3e:9e:11:62:4b:c9:0e:6b:ad:80:28:90:91:a3:36:79:
9a:49:96:4f:b9:42:7e:64:a9:21:65:ff:bb:25:49:80:5b:4d:
54:7b:fe:c6:b6:5b:39:c0:41:37:95:ac:cb:3c:51:e2:50:2c:
ce:41:5b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:06:11 2026 by rpki-client