Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: P4bSvv8Y3RB5NiIELYCTpxL2Z9/lZRh0uqNlWWt5SGM=
Subject key identifier: BD:86:37:43:0C:15:D9:2D:62:1F:8E:1F:5D:F2:01:4E:84:5C:FF:C3
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 01A13ECB4E88B5D7F4CD125D15ECF7BCBDD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 080C
Signing time: Thu 15 Oct 2026 09:01:13 +0000
Manifest this update: Thu 15 Oct 2026 09:01:13 +0000
Manifest next update: Fri 16 Oct 2026 09:01:13 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: BhbWv5nbIWd/fW10pdZmYWfd7uxvjwrhRcJeWPIsCn0=)
2: P-p2NxW9TFmZAwW03gw6xGVVFZc.roa (hash: VYJ/qjVSy2HmGtgmvHoLOPXTUBBAf8syxAzQSjcRmvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:4e:88:b5:d7:f4:cd:12:5d:15:ec:f7:bc:bd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Oct 15 09:01:13 2026 GMT
Not After : Oct 16 09:01:13 2026 GMT
Subject: CN=bd8637430c15d92d621f8e1f5df2014e845cffc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:fa:ca:b0:2f:04:ae:33:c8:64:f0:64:d1:
92:ab:50:1c:29:50:e1:1a:3c:74:c6:f1:de:19:a6:
56:82:72:d1:6d:31:ce:7a:f2:60:4e:82:36:50:b5:
b5:d3:d1:49:27:3f:5b:7c:37:f5:ae:ee:a2:1d:aa:
b0:93:31:e2:3a:fd:62:57:f8:cc:db:f1:8a:bf:b8:
02:8d:40:e9:4d:48:43:8e:5b:26:d4:ed:f0:ad:54:
6f:b2:d9:ba:61:b2:b9:5e:f4:42:a1:84:18:1a:90:
08:a1:9f:20:12:e8:68:bc:56:46:a4:1b:13:3d:ac:
0f:bb:af:06:e1:fe:b6:e4:33:b0:6f:5c:d0:cb:35:
c4:67:f8:5b:65:6a:64:50:26:15:cc:f9:32:fe:cf:
8c:d6:97:c6:99:65:cc:bf:ca:57:d5:17:b5:71:f1:
ba:2a:76:11:e6:30:93:8b:20:12:b1:ba:a4:97:c6:
1e:56:94:83:f4:e7:e8:0f:08:c6:7b:a8:b3:16:be:
b4:d3:5b:a1:40:79:ac:7a:78:d0:19:f1:5b:3b:57:
86:45:c3:8e:4f:63:6c:28:5d:71:f6:b0:9b:42:9b:
f5:ad:98:f9:28:02:24:33:f8:3a:63:29:08:7a:ac:
c6:42:46:71:ba:98:21:46:c9:b2:46:ba:e1:12:e9:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:86:37:43:0C:15:D9:2D:62:1F:8E:1F:5D:F2:01:4E:84:5C:FF:C3
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3f:a4:25:b3:be:14:75:fb:92:63:ad:1f:ff:00:24:c5:ec:
db:0c:26:79:4e:f5:5c:1e:96:bf:9d:80:e9:a9:37:1c:7f:bf:
0c:0d:16:f7:71:5f:dc:00:c5:9e:ce:58:b3:cf:5d:ac:8c:64:
d1:27:94:8b:bc:75:17:2b:21:58:4b:1e:c1:2c:ca:09:75:9d:
12:bf:d2:b6:d5:8e:e8:2e:d7:09:82:8c:0d:5c:1e:6b:c6:cd:
44:fc:d3:fc:23:05:cd:30:50:2f:c5:7b:07:e6:0f:1c:fd:d5:
67:9d:0b:84:ab:dc:ef:37:3c:07:3f:ca:ae:5a:9b:ac:12:04:
40:86:14:d4:b8:1a:5f:ec:c3:9f:aa:fc:15:17:82:98:77:11:
93:0c:17:94:09:74:51:b4:bf:e2:23:08:12:a3:76:02:70:8e:
92:ce:95:23:c3:0e:07:bf:da:d9:a8:17:bf:b6:8c:05:2f:95:
c2:cf:76:6a:a3:12:16:04:bc:eb:b7:3f:82:1e:b9:00:57:e0:
ea:ae:72:67:48:36:fb:56:74:55:84:ee:e1:5f:b5:d7:85:2e:
21:2b:5e:4e:8f:c2:ce:19:93:21:6e:1b:83:7d:80:42:5f:a1:
b7:91:5b:67:85:28:fd:e6:3e:f0:31:7b:ac:67:c8:87:13:09:
98:5a:d4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:36:16 2026 by rpki-client