Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
File: D1PmC9pkZYSIzqajMPBcd0nVucY.mft (raw, json)
Hash identifier: 1dP7EYBeYc1OnedXw/JJWBw8LD7prO4oVoUYn7wdS2M=
Subject key identifier: 25:DC:40:37:34:C4:73:E8:D0:46:AC:69:2C:6C:3E:79:35:C6:77:40
Authority key identifier: 0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
Certificate issuer: /CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Certificate serial: 01A193FB1860A0C7E3844B105C0AF42A33E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
Manifest number: 01F6
Signing time: Sat 31 Oct 2026 22:01:08 +0000
Manifest this update: Sat 31 Oct 2026 22:01:08 +0000
Manifest next update: Sun 01 Nov 2026 22:01:08 +0000
Files and hashes: 1: D1PmC9pkZYSIzqajMPBcd0nVucY.crl (hash: AMwS1BrG03BsyXIW9HijneVOYdeoa2zuD1Gsc7ULDG4=)
2: _tT1XC7nkQRWgQdxKibbMXrzVoc.roa (hash: zg0b/n4wXZx1538KhR67xdLnhn+vJRWK90TV+fz8uiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:fb:18:60:a0:c7:e3:84:4b:10:5c:0a:f4:2a:33:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Validity
Not Before: Oct 31 22:01:08 2026 GMT
Not After : Nov 1 22:01:08 2026 GMT
Subject: CN=25dc403734c473e8d046ac692c6c3e7935c67740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:bb:46:b1:8f:68:00:bb:21:1d:94:98:0e:
d8:7a:1d:89:bd:2a:fb:4a:b0:e3:7d:9e:07:90:2a:
af:7c:50:e5:04:45:7b:46:39:b0:7e:e4:1b:38:c6:
92:a4:f2:c7:f7:1a:8a:05:23:2a:01:6e:f8:07:5d:
45:12:90:6d:0f:cd:ef:aa:51:d0:b7:fa:8f:65:f4:
1b:ca:66:54:db:17:cd:f1:7d:1c:37:f4:b5:33:9a:
75:06:96:89:fc:d9:f3:23:47:7d:80:7e:93:b0:7a:
a8:45:ce:3b:73:5f:27:1a:1d:07:f1:c5:84:bf:2f:
d2:80:04:3b:a8:bc:38:79:85:12:2c:52:f8:5e:a2:
00:07:36:71:4e:94:2c:06:ff:a2:53:62:35:a9:dd:
d6:b9:66:01:17:23:53:b4:49:5c:b2:cf:2f:ae:5f:
af:d3:ae:0a:0c:db:7a:44:ef:e9:b2:42:0f:f3:ff:
71:1d:4d:94:62:98:4f:67:2b:35:04:f1:98:1b:3a:
76:83:05:40:28:eb:1c:c4:58:04:b0:3f:78:34:94:
ee:62:b0:5a:dd:57:f8:04:ae:ff:7f:ff:bf:71:17:
61:49:df:96:8a:34:1f:0f:cc:91:d8:9c:75:1b:aa:
9e:bd:25:f6:4f:cc:03:a8:3a:33:9f:89:1e:b5:67:
85:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DC:40:37:34:C4:73:E8:D0:46:AC:69:2C:6C:3E:79:35:C6:77:40
X509v3 Authority Key Identifier:
keyid:0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:28:19:3c:df:e6:56:6a:6e:2b:02:00:4d:c7:2f:39:20:31:
92:f6:80:e5:ef:11:c9:7a:af:a8:8e:9e:9e:9b:00:09:3d:4f:
ba:bc:90:99:1c:34:59:38:61:03:91:a0:6f:7b:cc:81:39:81:
1c:b9:a8:13:fb:af:40:54:0c:e0:5d:80:3f:16:f5:4f:df:8b:
c7:09:36:ed:d7:63:e2:c1:fd:48:1a:19:84:db:94:ff:4e:db:
2b:b4:ef:d8:36:87:16:5d:75:01:1d:fd:2f:ba:ec:24:a1:a3:
1c:34:93:38:64:42:78:4e:3a:21:91:38:e6:f1:f3:da:21:bc:
f9:87:c6:ff:e3:58:da:7f:2b:24:95:bd:00:8b:57:5f:38:95:
70:f7:2b:6d:4a:75:4c:8a:69:8f:dc:4d:18:35:d4:ee:f9:fc:
3e:ce:bf:16:12:0d:33:34:27:0d:7d:0a:db:16:26:66:9d:46:
06:58:57:2d:b8:81:34:f6:35:f3:2c:7b:f8:83:45:b0:c5:63:
c6:95:d2:a3:b3:a6:60:b6:1f:9b:41:af:fb:bd:09:d9:c7:c0:
fa:32:71:cd:0c:fb:22:d0:37:5c:33:6d:ae:0d:68:8d:0c:db:
9f:41:b2:e3:c3:01:36:a7:50:57:8d:5d:44:f9:a8:13:ce:b7:
0f:a9:5b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:13 2026 by rpki-client