Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
File: D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft (raw, json)
Hash identifier: zVH31LOyFFs88MLlj4X0JJRBSj0rUXam2QuhLirZfR8=
Subject key identifier: 40:F6:9F:43:A0:BC:E4:EF:E9:88:0D:4C:65:75:58:FC:09:9C:3F:4D
Authority key identifier: 0F:A7:C7:D8:61:72:67:5F:78:E9:55:4A:D6:73:54:CE:BF:18:D2:90
Certificate issuer: /CN=0fa7c7d86172675f78e9554ad67354cebf18d290
Certificate serial: 01A03F3C04E2A8D7F44D87EF77B8D6C42EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6fH2GFyZ1946VVK1nNUzr8Y0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 18:01:32 +0000
Manifest this update: Wed 26 Aug 2026 18:01:32 +0000
Manifest next update: Thu 27 Aug 2026 18:01:32 +0000
Files and hashes: 1: 2UUE-Rf-2WGceuB-WkLEF7WoUTg.roa (hash: 4bgTyI2sRmPi6hIWWdFcnzZt2fLQPiRH1Jt4gV4iEG0=)
2: D6fH2GFyZ1946VVK1nNUzr8Y0pA.crl (hash: TB4AsgwXPYxrokPuqePAgdBsqVbplQDEmUbA03lAOLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6fH2GFyZ1946VVK1nNUzr8Y0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3c:04:e2:a8:d7:f4:4d:87:ef:77:b8:d6:c4:2e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fa7c7d86172675f78e9554ad67354cebf18d290
Validity
Not Before: Aug 26 18:01:32 2026 GMT
Not After : Aug 27 18:01:32 2026 GMT
Subject: CN=40f69f43a0bce4efe9880d4c657558fc099c3f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:6a:4e:13:3a:d5:0f:c3:94:56:38:1e:67:
00:c8:3f:45:55:b9:da:79:94:c2:0b:6f:da:24:62:
f5:86:5f:92:a1:60:51:99:e0:29:5f:9d:b9:32:3a:
ed:8b:60:fe:ef:98:10:f6:9c:8c:da:63:09:0b:56:
9f:db:72:ba:da:70:f5:a5:a1:80:2f:09:6a:c6:23:
33:7c:10:72:23:0c:4a:f4:ed:ab:0c:c6:95:18:c6:
2d:1c:c0:ca:bf:bf:b8:8c:16:6a:42:f6:14:82:c9:
39:9d:e2:18:72:6a:b3:e8:04:b2:e2:d1:75:9a:0a:
95:b6:f9:a0:fd:84:b3:2b:29:c1:45:dc:6d:b4:d5:
ea:d6:16:9c:42:25:66:a6:7c:40:94:c0:4a:c0:ba:
aa:de:37:27:67:2c:14:75:95:b6:18:dc:ba:dd:50:
b1:8b:bc:17:eb:d1:29:fa:d6:3a:5b:54:c8:b0:be:
38:b7:5d:ee:89:ae:f3:69:96:72:26:d6:e2:9e:ed:
2b:18:b5:47:5b:47:db:60:3f:b0:78:61:7c:dc:61:
75:b4:30:1b:6b:db:dd:97:84:f0:e7:d1:e3:e8:40:
13:a6:cb:cb:bd:39:4a:2e:a7:4a:57:34:1d:f7:27:
8d:dc:db:45:85:da:80:f9:d4:cd:51:2e:fe:a2:98:
3f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F6:9F:43:A0:BC:E4:EF:E9:88:0D:4C:65:75:58:FC:09:9C:3F:4D
X509v3 Authority Key Identifier:
keyid:0F:A7:C7:D8:61:72:67:5F:78:E9:55:4A:D6:73:54:CE:BF:18:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6fH2GFyZ1946VVK1nNUzr8Y0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a2:dc:8d:22:1e:89:6c:99:5a:54:c4:3a:26:89:7d:6d:16:
55:bc:3f:f7:82:54:87:65:d6:21:05:b8:6a:b0:2a:c8:0f:39:
58:ba:10:3c:91:6b:e1:d4:51:79:50:9f:19:43:d2:a2:24:d2:
4f:74:d2:b5:39:db:28:67:7b:81:07:e3:40:2f:72:77:78:d4:
85:3c:d1:08:2f:ad:12:bb:a2:2e:94:86:89:34:f2:42:b7:6f:
6b:1c:97:0d:25:97:21:91:70:10:43:5c:92:39:e5:57:1f:1f:
0b:1b:ea:ff:6d:8a:67:d6:c8:40:81:e4:fb:b8:e4:9d:a9:98:
0f:c4:6e:bc:dc:b0:f7:d0:d3:66:3e:c4:cb:14:59:dc:86:0d:
c7:86:80:7f:c9:41:97:04:84:db:5d:46:33:db:b1:3c:37:72:
65:68:72:d3:8a:f9:46:65:f7:20:a5:2a:86:98:21:fb:75:5d:
04:45:25:65:66:ca:9a:83:0b:6a:73:cb:df:35:e6:f2:f7:86:
6e:64:68:f8:b0:aa:4a:0e:59:d2:e8:3d:ef:53:93:ab:8a:88:
25:43:0d:55:26:0d:3c:5a:6f:9a:56:40:e6:23:61:69:1f:eb:
06:88:13:97:ac:a6:b1:78:75:2e:f9:7d:dc:dd:ef:4b:42:36:
2a:9f:93:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:40 2026 by rpki-client