Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
File: D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft (raw, json)
Hash identifier: P66fNS2d2NUxUq7iVfXCr7edtaEH3sAtrLw2Flv3+xU=
Subject key identifier: E8:91:DB:41:35:34:01:4C:B1:C0:21:A7:06:6A:F4:89:2F:2F:65:11
Authority key identifier: 0F:A7:C7:D8:61:72:67:5F:78:E9:55:4A:D6:73:54:CE:BF:18:D2:90
Certificate issuer: /CN=0fa7c7d86172675f78e9554ad67354cebf18d290
Certificate serial: 01A147CE8957DF1B9677FC0F4545002B1DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6fH2GFyZ1946VVK1nNUzr8Y0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
Manifest number: 0123
Signing time: Sat 17 Oct 2026 03:01:20 +0000
Manifest this update: Sat 17 Oct 2026 03:01:20 +0000
Manifest next update: Sun 18 Oct 2026 03:01:20 +0000
Files and hashes: 1: 2UUE-Rf-2WGceuB-WkLEF7WoUTg.roa (hash: 4bgTyI2sRmPi6hIWWdFcnzZt2fLQPiRH1Jt4gV4iEG0=)
2: D6fH2GFyZ1946VVK1nNUzr8Y0pA.crl (hash: WAZXHE+rbJ/HlMNin9vK7BFSvpBVjXdJOuox3e+l6sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6fH2GFyZ1946VVK1nNUzr8Y0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:ce:89:57:df:1b:96:77:fc:0f:45:45:00:2b:1d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fa7c7d86172675f78e9554ad67354cebf18d290
Validity
Not Before: Oct 17 03:01:20 2026 GMT
Not After : Oct 18 03:01:20 2026 GMT
Subject: CN=e891db413534014cb1c021a7066af4892f2f6511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cd:55:43:81:d9:24:29:88:5c:65:5e:25:6f:
e9:b7:12:37:48:bd:25:98:73:21:c3:76:d5:b7:68:
31:3f:5c:6b:0e:41:8c:75:cb:14:4e:03:ea:c2:65:
e5:c6:5e:d7:da:e3:39:a2:11:78:a9:08:79:6e:45:
8a:ac:41:6a:3f:f3:9c:55:b4:af:fc:56:4a:8c:62:
d6:04:f0:7f:9b:69:c6:49:b5:98:53:7d:ba:5f:8e:
59:e6:d1:68:9f:1b:48:eb:c1:09:77:4d:d2:6a:f1:
de:dc:94:d4:dc:12:9d:bd:20:a2:dd:69:fd:d4:a4:
33:03:47:f1:a8:6f:86:20:54:75:3c:28:81:51:72:
c2:1a:cb:6d:b5:de:53:42:23:32:3a:09:9c:bd:81:
28:85:5f:75:4d:dd:f2:c2:08:b9:f8:07:77:46:35:
8b:a4:59:ca:d8:41:30:7c:d8:0a:70:f0:ad:9d:17:
12:ba:a4:32:a5:59:13:6a:53:9e:0b:b0:9b:82:3b:
05:1a:69:45:80:9b:87:dc:b9:49:a9:b0:f9:8a:37:
2f:3e:2d:da:28:13:0b:da:8a:5a:6c:86:a9:04:0f:
d4:dd:e7:0c:c8:3b:b2:c9:2f:93:8a:8f:07:67:c5:
c5:7a:7a:56:fc:9f:fd:1f:f4:d0:10:d8:12:30:a4:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:91:DB:41:35:34:01:4C:B1:C0:21:A7:06:6A:F4:89:2F:2F:65:11
X509v3 Authority Key Identifier:
keyid:0F:A7:C7:D8:61:72:67:5F:78:E9:55:4A:D6:73:54:CE:BF:18:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6fH2GFyZ1946VVK1nNUzr8Y0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e4:59:4e:43:17:de:86:b9:53:a3:0e:e6:7e:43:95:b4:34:
aa:a0:78:c9:21:2b:d7:c8:09:6e:da:4d:e7:25:eb:11:61:30:
34:5a:23:d7:7a:87:76:b1:9b:bd:c7:f4:e9:24:38:2f:99:17:
21:11:ea:78:a2:72:0e:2a:ab:4d:a6:5a:e2:a4:bd:ca:99:d6:
e9:df:c9:59:bd:f6:ad:88:f4:20:54:39:1b:92:29:30:4d:7c:
76:0f:24:30:3b:15:78:23:83:93:74:4d:58:bb:35:70:d9:b2:
1e:54:b6:92:eb:6f:cc:66:a7:ef:d1:59:a7:d3:ed:f6:12:2c:
51:dc:a0:42:50:90:87:8d:b0:5e:6b:6a:e1:87:2a:ec:9d:fc:
4d:e4:87:72:f6:8c:a1:95:fa:3d:0d:f7:55:9c:70:93:7c:a9:
e7:b2:05:22:63:61:77:6e:0e:75:1a:a2:80:cf:16:3f:94:67:
9a:2e:91:57:0e:ff:66:c8:98:66:55:2a:ae:71:5a:94:84:82:
ad:29:4c:dd:a4:ed:ce:e1:f6:82:b5:88:e1:8a:9b:b9:de:85:
60:e5:05:e4:1a:d9:c4:6a:ee:15:c9:c4:40:5d:e4:db:40:ed:
be:4a:28:f7:9e:d8:14:58:20:4f:7f:d7:43:4f:df:ef:ec:c6:
37:15:b3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:42:07 2026 by rpki-client