Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
File: bd1AUuD8dlNjYcu9x3UId93zYK0.mft (raw, json)
Hash identifier: PrO1YUq/ymdx2VWAAQ/V9sl1HbEL5svrOcwvKhC6HFA=
Subject key identifier: 0A:43:A8:95:B3:68:19:C5:A9:DD:20:0E:63:D1:9A:82:FC:3F:3B:A9
Authority key identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
Certificate issuer: /CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Certificate serial: 01A17B4D89E6B1CA6DBAB0854AB694707AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
Manifest number: 13D4
Signing time: Tue 27 Oct 2026 03:00:41 +0000
Manifest this update: Tue 27 Oct 2026 03:00:41 +0000
Manifest next update: Wed 28 Oct 2026 03:00:41 +0000
Files and hashes: 1: bd1AUuD8dlNjYcu9x3UId93zYK0.crl (hash: wuhDFmJ8vHqac68Kjriqel12qB61Ls5lvs5b72KoQeM=)
2: v-QuOOYMf4HsWM21RDZIDik1F8Y.roa (hash: tkB5JnPvXNK8KkYHS1hN95y7jCOIV01txTm1VSy3JoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:89:e6:b1:ca:6d:ba:b0:85:4a:b6:94:70:7a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Validity
Not Before: Oct 27 03:00:41 2026 GMT
Not After : Oct 28 03:00:41 2026 GMT
Subject: CN=0a43a895b36819c5a9dd200e63d19a82fc3f3ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:b2:9b:0a:38:8e:a5:7f:fe:ff:9e:21:61:
5d:15:8d:10:64:bf:60:db:c2:ec:06:a3:a3:b6:df:
8b:fd:cd:3b:d7:77:a3:e7:5a:91:00:db:63:af:42:
9f:fe:26:48:d6:9a:be:02:ce:0c:60:b6:79:62:db:
c8:f9:97:28:c3:b0:4b:af:12:bb:d9:ee:a8:93:6d:
e1:87:53:24:eb:9a:21:08:5d:ef:a8:24:79:90:71:
1b:e5:29:91:50:81:b6:45:f8:f8:23:4e:1d:cc:ec:
08:3f:81:0a:4f:d0:e7:c1:ac:95:45:89:bb:41:60:
26:66:2b:b8:2d:b0:31:16:31:b0:46:36:c8:34:25:
ba:c0:f2:9e:c2:09:6c:72:4e:6d:83:6c:3c:a4:dd:
0f:d5:a6:f4:38:27:51:de:05:c9:6b:50:69:fb:fa:
79:a6:8d:c9:eb:16:bf:cf:f3:58:8b:79:64:e4:df:
d7:dd:4b:d4:5b:ba:47:94:51:dd:3d:a8:13:ad:0b:
7c:b9:3c:1c:5f:7e:15:38:46:8c:f4:95:5d:9a:c9:
2f:63:34:9a:91:8b:7b:ca:1a:de:eb:21:3f:d0:20:
05:2d:73:bd:e8:ce:1b:73:29:a3:69:e3:33:ac:7e:
d4:88:a8:b1:9f:ef:7f:4e:90:e8:f7:15:14:e0:22:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:43:A8:95:B3:68:19:C5:A9:DD:20:0E:63:D1:9A:82:FC:3F:3B:A9
X509v3 Authority Key Identifier:
keyid:6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c5:18:e8:3b:03:39:87:6d:53:18:97:d7:f2:a3:68:67:e1:
18:71:e1:84:7e:a8:9b:56:71:e9:31:a2:d5:f7:9a:55:a5:c1:
b4:17:81:7d:0f:2d:4c:f2:8b:fd:43:17:df:4e:91:bf:83:84:
e8:b8:46:c3:65:50:cd:6f:24:e4:22:2f:61:55:1b:a1:02:e5:
bd:a2:f4:7a:6b:c2:3e:b5:01:a6:0e:ef:a0:f6:08:1f:9c:73:
56:4b:59:31:10:32:e3:0e:d6:c2:be:58:74:9d:a3:b9:d1:49:
f4:df:9f:52:bb:3f:4a:b8:47:6f:50:7d:d3:c9:b4:d3:8c:e8:
b3:55:48:9d:77:b2:0e:98:b9:16:e6:fa:a7:20:f4:d6:05:e8:
b8:ea:77:2a:86:a2:45:b8:f7:78:10:b4:8a:b0:46:90:a1:87:
af:80:97:f0:45:a9:08:ad:33:f7:86:5d:1a:9f:6f:4c:b4:17:
1c:3e:c0:f1:1f:5e:47:d4:fe:f2:ae:a4:48:29:8a:cb:30:e4:
c4:bf:1a:ae:8d:e9:d9:b3:9e:de:72:3c:b8:68:e0:df:cd:69:
30:db:70:81:f5:12:78:0d:c8:39:a8:ab:c4:5c:28:90:78:19:
60:dd:49:4d:83:b7:80:37:6b:c1:72:0f:0b:50:cd:0c:c4:86:
3f:08:4c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:10:24 2026 by rpki-client