Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
File: mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft (raw, json)
Hash identifier: Tt3q0SdHwfEY21ExthLrX9xB2aHaWoHoW5IaM3bx5RU=
Subject key identifier: 82:7C:64:0F:9E:32:8B:E0:A6:74:C8:A7:A6:E6:ED:BA:ED:CF:CC:81
Authority key identifier: 98:37:50:F2:47:06:96:79:B8:3E:ED:FD:7B:D5:65:EA:46:78:9A:60
Certificate issuer: /CN=983750f247069679b83eedfd7bd565ea46789a60
Certificate serial: 01A0889EBF3EFFE5A957C83A8906872E686A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
Manifest number: C0
Signing time: Thu 10 Sep 2026 00:01:39 +0000
Manifest this update: Thu 10 Sep 2026 00:01:39 +0000
Manifest next update: Fri 11 Sep 2026 00:01:39 +0000
Files and hashes: 1: P9PKZAt5djm7FdGsrSvgtxYkacg.roa (hash: ugWkvKLaNhrHSnXEVwNyBj9pWu4yB48C3daCoDS8DQk=)
2: mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl (hash: 39RhWznzEHGS0syMmRE6bT7cSe5XV+0B5HYZ8whuTT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9e:bf:3e:ff:e5:a9:57:c8:3a:89:06:87:2e:68:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983750f247069679b83eedfd7bd565ea46789a60
Validity
Not Before: Sep 10 00:01:39 2026 GMT
Not After : Sep 11 00:01:39 2026 GMT
Subject: CN=827c640f9e328be0a674c8a7a6e6edbaedcfcc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:60:56:da:4e:63:3c:75:e4:8e:28:a6:9d:
7d:81:e9:18:8a:f4:54:47:92:7c:35:a5:84:9f:b6:
bc:da:bf:c5:ef:94:de:34:de:ee:1e:da:10:81:f7:
b6:73:c9:4a:20:bb:f4:e9:5c:89:09:09:63:f9:df:
40:4b:6e:e5:19:72:ff:3c:db:d9:3e:18:1c:ca:5c:
1d:ba:dc:da:9a:65:2e:d9:4a:d2:4f:0b:b9:a5:19:
a4:c5:69:77:23:37:fe:31:c2:89:e7:1d:21:e2:a1:
74:67:54:0c:2a:ba:66:fa:14:3c:16:40:c4:2a:45:
e6:6b:f9:a2:3d:2a:f6:51:63:07:6a:57:23:8f:b9:
69:0a:c1:47:9a:b3:d8:30:3f:32:76:4d:25:e6:ed:
37:82:fe:7e:0a:b7:f8:be:97:de:0e:b3:f6:ae:5e:
d4:b2:2a:af:48:9b:f9:48:76:6f:71:be:58:50:c6:
da:97:37:77:12:74:a0:9d:0e:07:d1:9b:0a:66:4e:
cf:77:4a:b3:9f:c1:6e:fa:37:e6:33:99:ea:23:35:
f1:27:f2:da:30:1c:3f:fe:34:54:47:7a:bf:4f:e1:
3d:61:72:99:26:8b:8d:da:47:03:04:4a:d5:b3:95:
19:48:ab:ba:da:b7:47:97:f3:b8:67:5f:8f:a3:a4:
2a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7C:64:0F:9E:32:8B:E0:A6:74:C8:A7:A6:E6:ED:BA:ED:CF:CC:81
X509v3 Authority Key Identifier:
keyid:98:37:50:F2:47:06:96:79:B8:3E:ED:FD:7B:D5:65:EA:46:78:9A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/mDdQ8kcGlnm4Pu39e9Vl6kZ4mmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8a:24:85:04:b1:d8:77:93:42:0f:fd:2c:51:1a:ef:5c:a0:
fa:4e:cf:27:1f:b8:5a:99:0b:11:bd:1a:fb:37:25:21:82:69:
94:60:0d:43:5a:a7:bc:64:74:5a:d6:ec:f5:f5:b3:5a:bb:73:
ca:7c:29:58:91:75:4c:16:61:d9:ed:31:57:de:d3:3e:dc:18:
a6:e5:6a:6c:48:85:c4:3f:eb:2c:5d:77:ea:5d:cd:b4:9f:f4:
91:ca:df:37:83:5d:05:1f:b0:45:29:63:3f:5b:b6:1f:34:3e:
48:cd:bf:3f:df:1f:b0:d4:18:82:91:19:16:d4:df:42:5c:70:
0d:7a:bb:c9:83:e4:62:6a:4e:e7:18:4a:cc:9f:34:1c:12:db:
7b:46:15:06:4f:3b:80:f1:1f:af:3c:1b:2a:5c:97:4b:f8:07:
35:3d:18:e9:8f:88:a5:75:a2:62:21:b9:61:52:b0:2e:4e:a9:
1a:99:45:9c:cb:0d:ce:b5:90:e5:1b:78:60:a0:1f:80:f7:b6:
68:b7:e0:0e:71:c7:3d:cf:5a:8b:00:17:69:01:1a:17:ad:57:
b6:f9:12:56:ea:0a:52:68:c2:0d:cd:81:37:28:f3:85:79:24:
18:05:61:55:e6:fa:41:53:21:f0:d9:72:aa:45:8d:95:f5:72:
58:e0:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:21:35 2026 by rpki-client