Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
File: D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft (raw, json)
Hash identifier: CA5ICUAAJ73eGdvSdKA+A6g/Y63tVwSMRdrx8jv2Dag=
Subject key identifier: 24:00:4A:F7:16:55:65:BF:D2:B3:72:28:07:CF:0F:B2:18:7C:98:63
Authority key identifier: 0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
Certificate issuer: /CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Certificate serial: 01A001A5EE8013D406AC2C8FEEA11B2D8DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
Manifest number: 17DF
Signing time: Fri 14 Aug 2026 19:00:46 +0000
Manifest this update: Fri 14 Aug 2026 19:00:46 +0000
Manifest next update: Sat 15 Aug 2026 19:00:46 +0000
Files and hashes: 1: D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl (hash: eYyLQRc1yu6JJY+9Hr5PqqnM+ANJwAAQydHid3yPS1U=)
2: FVoehWVHfRAM9Wax2PLEzeuzUcQ.roa (hash: jKrRrki3jFgX40lflCLx2Zym5UZldktVdjD6ypmdCdQ=)
3: _FcCRW97Oyy-701A8ky-qnc9PuQ.roa (hash: TPZyrFAeXnN7pauwjeZRrcEQ8uCeSHffzbaYPf3BfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:ee:80:13:d4:06:ac:2c:8f:ee:a1:1b:2d:8d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f65bd21c683207da0c39fb3798535af49e0bff5
Validity
Not Before: Aug 14 19:00:46 2026 GMT
Not After : Aug 15 19:00:46 2026 GMT
Subject: CN=24004af7165565bfd2b3722807cf0fb2187c9863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:db:fd:a7:ca:c5:40:5c:8f:fb:87:18:6e:35:
c0:77:ee:07:f8:34:09:dd:8c:00:d6:3f:fd:d3:ec:
24:e3:a6:ec:fc:09:a4:ea:a2:25:d6:78:34:bf:11:
e7:e3:61:e8:16:de:de:38:23:ee:04:61:cf:27:be:
f7:9b:6a:f5:a2:00:01:bd:45:b8:56:9d:c5:88:34:
f3:96:25:94:74:f2:bd:ad:ac:bf:49:e7:23:40:7b:
ad:b6:93:52:5b:a9:99:b8:72:54:84:e2:74:14:4a:
b7:34:97:18:20:62:94:45:fb:31:cb:2a:4c:6d:f1:
dd:78:0b:f6:04:c3:6c:0e:b6:7c:91:d1:8b:f4:d4:
14:ee:99:d9:9e:f4:09:4b:d3:d8:cc:1c:6f:fc:ab:
89:8f:f3:80:68:f1:2f:65:7c:b6:84:41:54:f9:14:
60:5a:8d:0b:d7:86:1f:93:44:26:2b:bd:a5:16:92:
9b:29:dc:77:17:eb:af:71:e5:15:66:47:bd:d8:43:
b5:59:be:be:47:dd:5d:ce:dd:64:b4:d0:4b:77:ee:
dc:9a:d7:21:ee:4b:f7:51:63:7b:72:49:91:e4:0a:
6d:f1:cd:ba:d2:76:1c:ce:88:c1:5e:10:a0:9c:8f:
9a:41:ea:9b:f1:69:19:0c:bc:2d:a9:c1:8b:ad:0e:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:00:4A:F7:16:55:65:BF:D2:B3:72:28:07:CF:0F:B2:18:7C:98:63
X509v3 Authority Key Identifier:
keyid:0F:65:BD:21:C6:83:20:7D:A0:C3:9F:B3:79:85:35:AF:49:E0:BF:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2W9IcaDIH2gw5-zeYU1r0ngv_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4a999f-d1fa-4887-bae8-e23f10e4b91c/1/D2W9IcaDIH2gw5-zeYU1r0ngv_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b0:fd:e8:c0:6e:cc:67:81:36:b4:0b:78:fb:84:c6:da:c6:
f3:e6:e6:4d:2a:fa:7a:40:25:5c:1d:b3:99:4c:fc:4e:31:02:
b7:cf:18:c5:9f:74:4f:dc:7e:d4:6a:a2:2e:c4:0b:c5:19:46:
b6:1c:0d:e6:b9:32:94:8f:a4:74:6c:16:33:86:65:d5:78:b9:
f3:1d:dc:93:ac:41:4c:ab:ba:3f:0e:0a:7e:45:26:14:96:ed:
f9:0c:38:65:bd:20:21:39:ac:90:3c:32:bf:4d:19:91:69:32:
8b:3b:0c:f4:78:07:9e:77:ea:4f:47:ad:f1:7a:8a:c2:ae:52:
57:47:69:77:4d:a7:9c:c4:83:fa:ea:8e:3a:38:2a:19:4e:a3:
e4:b3:00:e0:aa:e3:3a:33:75:99:98:77:2e:e0:ad:03:c8:d0:
10:88:de:ae:a7:ce:04:88:d6:f4:2b:22:22:c2:64:a5:89:09:
72:05:75:90:ae:37:f7:e7:fb:64:ab:d2:ad:bb:44:23:95:78:
48:4d:39:82:55:ca:1e:e3:c6:b9:1e:c5:66:28:87:94:51:71:
81:2f:5c:3b:b7:3c:b5:eb:4b:30:23:1b:c9:19:93:af:ab:0c:
be:35:e8:b4:96:9e:58:f6:3a:62:3c:a7:b5:2f:3f:09:9d:a2:
4e:e6:b2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:43 2026 by rpki-client