Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
File: 1873Xgl6YxiGszyB9kql67wMMqA.mft (raw, json)
Hash identifier: ValhClgtlGqhlhLh5VegfZQ3CLTU5+2fgTAyVG/W8BE=
Subject key identifier: CD:3B:A4:43:B8:81:D7:9A:31:7F:8F:A7:37:99:7A:C1:A9:16:AF:90
Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
Certificate issuer: /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Certificate serial: 01A13E26207785FEDA2C0B3285B9CB1F2EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
Manifest number: 08D5
Signing time: Thu 15 Oct 2026 06:00:48 +0000
Manifest this update: Thu 15 Oct 2026 06:00:48 +0000
Manifest next update: Fri 16 Oct 2026 06:00:48 +0000
Files and hashes: 1: 1873Xgl6YxiGszyB9kql67wMMqA.crl (hash: x5jk7XJTMlNK8dymlfp4mc8ZzgTfpSNiW46ppWF5om8=)
2: Lljg_xH1KTEyF8YtQpFDhU2fq9M.roa (hash: G0j8nubF5nQiwgPwwabVEZQZZTMIJxsI563KIITxMI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:20:77:85:fe:da:2c:0b:32:85:b9:cb:1f:2e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Validity
Not Before: Oct 15 06:00:48 2026 GMT
Not After : Oct 16 06:00:48 2026 GMT
Subject: CN=cd3ba443b881d79a317f8fa737997ac1a916af90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:86:4b:3c:fc:ac:10:1c:87:12:a5:8f:8c:
6a:50:e0:69:6f:6c:38:0e:3b:9e:0a:dd:86:1f:61:
2b:16:7b:7f:e7:59:4c:7a:5d:74:2b:d6:c7:4b:7c:
8b:b5:7f:ce:77:19:d5:eb:f2:de:8e:ee:44:ce:41:
84:8c:28:93:96:eb:7a:7e:c9:6f:ac:99:ad:44:f5:
48:27:5b:4e:23:ca:37:33:6d:14:c2:88:a2:e6:1e:
9b:1f:ec:3e:1c:1e:fe:06:05:62:91:59:d7:c9:16:
c4:79:02:d7:aa:a5:17:40:41:9b:c4:ea:e8:1c:c7:
db:49:5f:89:77:48:a8:19:0e:68:d1:a7:9e:5e:2b:
32:73:32:15:86:ec:d9:3e:45:9a:81:d1:4b:fe:e3:
a9:e1:28:d9:64:32:44:5f:44:c4:10:35:ea:aa:4e:
56:1c:0d:41:46:a9:ba:e8:7f:1c:37:b0:6f:80:6d:
34:74:15:dc:5a:77:99:f6:9f:ac:5f:f0:ae:a8:a6:
91:cb:2c:d9:ec:61:f2:24:c9:90:0b:07:20:cc:d4:
30:4f:c0:dc:36:c4:fc:73:d3:f9:40:a8:ef:37:44:
35:e2:22:e1:15:19:75:e3:da:0a:55:4b:05:c5:c0:
4f:f4:6d:07:f9:18:4e:71:02:e9:d6:d7:fd:25:f9:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3B:A4:43:B8:81:D7:9A:31:7F:8F:A7:37:99:7A:C1:A9:16:AF:90
X509v3 Authority Key Identifier:
keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a3:6a:3a:b7:56:5f:9c:88:a3:90:b0:e1:22:b7:10:cd:49:
49:82:0b:88:22:ea:63:b8:64:fc:df:84:a4:aa:49:a0:aa:54:
4d:69:eb:d0:14:bb:97:5c:18:48:a1:1d:d1:d0:8c:37:fc:d1:
86:ed:55:55:bf:60:7c:9d:fe:03:ea:4e:44:c2:b5:fb:82:89:
bb:53:16:7f:0e:16:6c:cc:b9:20:a5:53:dc:0d:78:7a:fe:5b:
33:4f:2e:2a:91:19:b6:eb:df:28:ca:b4:ac:a5:25:97:ec:4b:
be:df:2a:af:98:bd:bc:1d:81:a0:22:32:88:79:cd:5c:34:87:
1c:9e:3f:91:ae:1d:83:46:55:f7:1d:6c:78:a4:5e:1e:2e:20:
0e:96:20:1e:eb:98:69:29:c9:d7:28:40:99:4e:20:e7:a3:08:
29:ec:69:55:dd:16:f5:bf:f8:17:61:aa:40:3b:91:14:10:6c:
d4:5f:1a:d6:62:d7:39:a7:c9:10:fe:6c:c1:cb:c4:21:d6:41:
7c:cc:d5:d2:d9:c8:55:aa:27:89:81:e9:85:df:61:a2:76:a8:
12:a4:8e:27:6d:19:97:8c:bc:eb:82:b8:8d:d6:0c:c7:d5:33:
cd:ae:27:47:76:39:e4:55:cc:56:e0:4d:c6:5f:bb:34:ce:68:
bf:0b:25:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:49 2026 by rpki-client