Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: 3NVHCNXRKb2YtxcmI0eWqZTY4xrUQxYWs2BUT1kGBJk=
Subject key identifier: 04:81:8C:4C:8A:A5:4A:57:7F:71:14:BE:DB:E7:B3:0C:8C:4A:C0:7D
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 01A002138A33FDC0A10408395930B9F95066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 21:00:30 +0000
Manifest this update: Fri 14 Aug 2026 21:00:30 +0000
Manifest next update: Sat 15 Aug 2026 21:00:30 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: i22MU2GBEOChgTrT++vzDlXlW9ugZCRmszaW+e10wh0=)
2: qB9Z-zHdmjEFSIG2vfJGfIMdpA0.roa (hash: MxW4mBfsVBC2g/oHLcgSIPQNdBtdZMBf3Vv3p/+UNxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:8a:33:fd:c0:a1:04:08:39:59:30:b9:f9:50:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Aug 14 21:00:30 2026 GMT
Not After : Aug 15 21:00:30 2026 GMT
Subject: CN=04818c4c8aa54a577f7114bedbe7b30c8c4ac07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:d8:22:4c:77:d2:a4:e5:bc:e8:9c:53:0e:
1a:e4:81:1c:a7:70:c0:a4:35:b2:de:40:bf:ef:be:
50:94:3c:80:5a:da:d8:3f:b9:b6:dd:39:f5:f6:61:
63:50:0f:69:a2:1b:57:a8:7c:96:c6:73:cb:7d:5b:
20:0d:d7:6f:8c:5f:c1:b0:58:07:67:ed:4d:9c:69:
a4:9c:fd:a2:bd:52:cb:2b:66:f2:46:86:51:3b:07:
1f:71:7b:a3:08:f8:37:3b:4a:58:a5:c7:43:09:04:
7e:0b:0a:98:ff:79:22:f3:cb:17:a7:d0:3f:58:e7:
a2:68:25:5f:1b:e8:21:a5:a3:43:77:fd:f3:e8:e9:
2f:a1:2d:e1:67:fb:bd:8b:a7:1f:1f:46:55:29:8e:
27:93:97:9a:73:35:6e:4b:93:31:4e:68:70:82:89:
3d:9f:2b:d0:57:da:ea:6d:45:14:eb:98:d5:cd:17:
42:48:bb:02:9b:38:8d:69:1e:42:53:95:c7:df:1f:
44:aa:86:92:23:90:cd:8d:71:cb:1e:00:73:d5:f6:
b9:f1:28:e5:6a:c8:6e:ae:36:05:ca:b1:9a:06:5d:
02:41:b0:0c:af:c4:7b:8a:d5:c5:44:b0:4a:bf:b1:
c9:76:20:ad:4e:da:cc:17:1f:91:7c:d4:10:1b:01:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:81:8C:4C:8A:A5:4A:57:7F:71:14:BE:DB:E7:B3:0C:8C:4A:C0:7D
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:52:c3:96:4e:35:d1:5a:a6:84:43:9c:38:be:22:3f:23:89:
c5:3f:95:10:2b:18:52:6d:5c:0b:88:7b:56:b8:03:53:39:cc:
d3:9b:f6:cd:df:72:c1:04:93:ac:fb:71:85:f9:10:99:02:0b:
1b:32:60:59:73:52:0a:7b:af:5b:6f:33:53:89:51:4d:15:9a:
5a:70:89:79:51:6a:a8:51:b0:40:bd:e5:e7:b3:fd:31:62:0e:
46:bf:d0:02:fe:db:02:9e:44:d4:e4:c1:4a:81:08:46:e7:2c:
1f:96:9f:86:fe:fc:5b:1a:4a:13:3b:26:1c:a6:70:33:06:2f:
fb:79:f7:e7:34:59:50:8b:a7:5a:b6:e7:47:03:f4:8a:36:09:
e7:6b:e4:7d:d8:a8:93:58:d4:8b:66:7b:df:85:c6:d1:cb:97:
18:48:eb:16:f7:8e:3e:d5:0e:ce:c5:04:1b:b7:f1:54:ad:a3:
16:ed:e2:a7:80:69:d0:df:ce:99:61:16:cb:f2:58:67:37:0f:
ef:69:eb:e7:d3:ef:38:89:ed:78:81:ce:9d:b9:e4:ac:ee:7b:
7c:b5:15:87:60:9e:10:fc:17:0b:49:29:9b:d9:14:ed:46:16:
1e:94:16:67:11:f1:22:41:5d:82:34:ab:15:af:62:f7:f8:a3:
19:85:bf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:21:43 2026 by rpki-client