Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/f8c48c-312d-4ce0-bc63-74dfa7d6737e/1/D-82fFyflKoZ4jakdq40Iby-8sg.mft
File: D-82fFyflKoZ4jakdq40Iby-8sg.mft (raw, json)
Hash identifier: gtJ5s8nJFcvKBYU9Yz7kr4Je2soQjkvEGaQngvL/kpk=
Subject key identifier: 9C:97:8A:4A:0C:48:45:3F:0E:72:2C:FE:69:A6:31:9A:2A:6C:D3:CE
Authority key identifier: 0F:EF:36:7C:5C:9F:94:AA:19:E2:36:A4:76:AE:34:21:BC:BE:F2:C8
Certificate issuer: /CN=0fef367c5c9f94aa19e236a476ae3421bcbef2c8
Certificate serial: 01A18262743DDBB57642642E3EC1B75C8581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-82fFyflKoZ4jakdq40Iby-8sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f8c48c-312d-4ce0-bc63-74dfa7d6737e/1/D-82fFyflKoZ4jakdq40Iby-8sg.mft
Manifest number: 6F
Signing time: Wed 28 Oct 2026 12:00:52 +0000
Manifest this update: Wed 28 Oct 2026 12:00:52 +0000
Manifest next update: Thu 29 Oct 2026 12:00:52 +0000
Files and hashes: 1: D-82fFyflKoZ4jakdq40Iby-8sg.crl (hash: PPOn67/BXbFHTQtufRYo3xWMUztg7hv6YlwFiY6rnTY=)
2: cfdScoVbfGnm8PrQAjjSVihBdBE.roa (hash: u2u6g2f7zgS6dtrxtWCLCAPHY0gP0gHN1Z+mzxulnYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f8c48c-312d-4ce0-bc63-74dfa7d6737e/1/D-82fFyflKoZ4jakdq40Iby-8sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f8c48c-312d-4ce0-bc63-74dfa7d6737e/1/D-82fFyflKoZ4jakdq40Iby-8sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-82fFyflKoZ4jakdq40Iby-8sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:62:74:3d:db:b5:76:42:64:2e:3e:c1:b7:5c:85:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fef367c5c9f94aa19e236a476ae3421bcbef2c8
Validity
Not Before: Oct 28 12:00:52 2026 GMT
Not After : Oct 29 12:00:52 2026 GMT
Subject: CN=9c978a4a0c48453f0e722cfe69a6319a2a6cd3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8c:7d:2d:1e:7a:ca:ba:a5:81:75:7c:d1:81:
82:36:a0:86:d6:1f:8c:27:94:94:a8:4c:9e:3b:32:
ab:a7:95:89:9a:a3:fd:5d:62:4d:25:cb:0f:4c:52:
5e:a6:12:9c:44:32:99:c5:6b:f7:54:1b:29:8f:54:
15:bc:e2:3f:5c:5b:53:6f:62:a2:31:12:1b:89:47:
6d:cb:d3:fa:08:9c:d6:f0:83:49:1e:cc:82:57:58:
1e:41:5b:f8:96:6c:75:96:44:f2:56:36:8c:6f:11:
1e:be:f2:66:e0:35:9d:8c:3a:0f:6e:9b:18:49:b6:
ec:2c:52:9b:d4:4c:d9:09:d2:ee:b3:42:4e:2b:c7:
27:5d:89:f5:e6:f0:8d:68:a8:b2:9d:0e:43:c6:0c:
d4:67:35:40:8d:c1:fa:91:d0:2a:8e:41:29:6b:08:
8f:15:52:a8:16:fc:84:de:b7:7d:59:0e:d3:d0:3a:
12:87:57:01:04:aa:63:17:50:18:3f:78:9b:72:4c:
ef:62:dc:2d:cd:7b:37:7e:ba:6a:32:f4:73:fd:a9:
d9:a1:a9:e7:3a:56:0f:67:42:38:02:d2:3c:06:44:
1a:92:26:d9:8a:67:e3:6f:ab:a7:f7:d4:60:bc:a6:
0e:ac:ff:90:fe:5a:5f:34:ee:f4:26:4d:ab:0a:37:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:97:8A:4A:0C:48:45:3F:0E:72:2C:FE:69:A6:31:9A:2A:6C:D3:CE
X509v3 Authority Key Identifier:
keyid:0F:EF:36:7C:5C:9F:94:AA:19:E2:36:A4:76:AE:34:21:BC:BE:F2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-82fFyflKoZ4jakdq40Iby-8sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f8c48c-312d-4ce0-bc63-74dfa7d6737e/1/D-82fFyflKoZ4jakdq40Iby-8sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f8c48c-312d-4ce0-bc63-74dfa7d6737e/1/D-82fFyflKoZ4jakdq40Iby-8sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a2:2f:22:5f:fb:44:60:62:c9:a8:65:ce:e3:67:f8:9b:3a:
3c:53:1f:fb:bc:ac:3b:93:72:61:d4:da:1c:cb:dc:08:6b:8f:
e4:cf:04:f6:1d:46:59:4a:16:dd:b1:ed:cf:aa:89:a9:8c:6f:
b9:ed:5a:bc:6c:48:79:80:12:d1:c3:ef:49:9a:88:25:63:cb:
20:1d:ac:34:93:87:6d:eb:cf:ad:4f:db:8a:1e:70:eb:80:c7:
51:0e:a9:cd:27:03:2b:ae:52:f8:64:8a:aa:41:36:ae:5b:3f:
e0:c3:ed:9e:24:d7:87:4f:cd:2a:dd:b3:0d:c0:68:71:f3:24:
dd:35:3b:e8:4e:3c:c7:d4:4d:7a:9d:5d:f6:99:3e:7f:68:84:
99:9c:f5:47:7d:1c:53:d2:c1:f7:08:f8:45:88:60:5e:94:67:
7d:5f:0a:be:98:8c:12:b4:9d:1b:35:12:a9:78:bc:8c:ae:ea:
cc:e3:5d:5c:e0:99:44:f8:84:ec:c4:90:79:6a:8c:c7:1a:40:
6e:13:fc:58:6c:d2:74:da:5a:3e:c4:61:77:30:22:0c:6c:20:
86:66:b0:1e:ca:1f:cc:8c:a2:55:ac:2a:9a:77:75:2f:ce:27:
b5:6b:0d:8c:57:ca:a9:dc:f4:4c:fc:eb:00:e0:36:28:97:e1:
85:1a:d2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:29:55 2026 by rpki-client