Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier: sLTyZE+O+J0XIQi7dLBA7qBzdbKL4AqmeyAfpqlAzlU=
Subject key identifier: 95:55:28:BD:08:CB:76:D4:DD:D0:A2:8B:33:08:9B:1E:1B:4A:AD:05
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 01A13F025E800C4CB987C8C983694476A9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number: 1AAD
Signing time: Thu 15 Oct 2026 10:01:21 +0000
Manifest this update: Thu 15 Oct 2026 10:01:21 +0000
Manifest next update: Fri 16 Oct 2026 10:01:21 +0000
Files and hashes: 1: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: OlggAppLayQ05iYz0eQefSiynCv6Tm05IA5KtBg+qJw=)
2: anGfaLD7Sw-uBHUL7ZCjm1E0Zuo.roa (hash: odjCBhO2fg7tVXSaHs+W/QeZyJocuWu2JrcGva0i788=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:5e:80:0c:4c:b9:87:c8:c9:83:69:44:76:a9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Oct 15 10:01:21 2026 GMT
Not After : Oct 16 10:01:21 2026 GMT
Subject: CN=955528bd08cb76d4ddd0a28b33089b1e1b4aad05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f9:32:dc:c5:f9:ff:64:e6:1a:5c:e7:57:2a:
9b:49:4c:73:fa:6d:f5:b3:11:5a:ad:91:b2:dc:6c:
d3:d6:53:dd:ad:0e:71:b2:fd:b6:91:13:f9:18:25:
b0:ed:fd:2e:90:84:a9:5a:63:e8:aa:a4:f0:ee:f0:
b8:4f:a5:91:47:38:e7:2c:29:f0:f0:1b:f2:04:b3:
c2:e7:8c:4e:76:f9:94:9d:b0:5b:f0:1f:e9:20:02:
f4:08:ce:a7:64:47:da:d1:b9:20:d1:87:95:ad:69:
51:05:cf:4c:97:d2:e6:3d:a8:e7:a4:79:6c:a6:8b:
08:ed:5d:14:9d:99:61:42:02:ba:bc:2b:08:cc:cd:
8c:44:f9:30:f2:b7:bd:44:c1:68:30:3c:0a:0f:0f:
8e:30:43:94:3d:50:8e:f7:ff:84:81:98:8b:09:a1:
14:95:1b:e4:5e:be:0d:a1:04:2d:0d:96:f6:20:ba:
15:40:67:ed:66:28:67:9d:20:ea:bb:d0:7f:37:da:
55:3d:28:35:32:1a:7a:e2:db:71:7f:70:72:5e:af:
41:03:a9:25:03:a2:b7:cb:ca:a1:7d:5e:44:5b:9f:
3c:bd:d8:61:08:5d:70:7d:fd:1a:50:cb:41:2c:db:
ce:83:a9:12:2d:5b:0a:e3:89:36:cc:66:62:bb:67:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:55:28:BD:08:CB:76:D4:DD:D0:A2:8B:33:08:9B:1E:1B:4A:AD:05
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c3:c9:91:76:df:1a:d4:e1:4e:ec:4f:62:99:8f:91:a2:bf:
51:c6:3b:4a:c4:12:e3:77:ce:11:ee:68:af:f1:dd:5b:71:04:
fc:8f:bd:27:c3:fb:92:66:cc:f2:30:9a:07:6b:86:42:79:28:
80:6c:a2:79:6c:87:68:f9:23:43:6f:60:b6:10:6f:a8:e4:c1:
b8:81:ef:f3:d3:1e:6c:54:1b:a7:d1:bb:e4:13:82:34:e2:39:
a7:db:e7:f9:33:d3:44:c0:7d:1e:2a:3c:01:21:47:c6:5e:cc:
6b:f1:ad:ad:bc:c2:d2:ac:8d:dd:8f:05:4e:79:b3:de:d9:23:
72:60:30:3c:89:e4:fd:00:4e:8a:e3:5e:8d:98:77:53:3c:ec:
67:9b:3e:2e:1a:7a:ae:6e:41:3b:a7:3b:b0:7a:e6:e1:ec:26:
ce:d8:98:0b:eb:cf:fe:e1:8d:63:46:30:98:f1:a1:ec:22:19:
fd:b6:f4:00:6e:28:45:41:e4:ac:fc:e3:21:e7:dd:15:b6:c7:
a8:a4:3a:7a:a5:19:af:6e:51:7e:16:30:88:20:e1:b4:14:b4:
03:f0:c3:d5:d3:90:bf:2e:82:c0:90:04:b6:00:64:a2:4b:15:
07:60:bb:59:e9:aa:08:22:72:ad:5a:c5:26:e5:13:c6:09:b8:
3d:a0:4d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:46 2026 by rpki-client