Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: 3C0TV7PsD5uQn7W1DHMMOzvN1sW60LayCi3eL6bjYt0=
Subject key identifier: AC:13:58:A6:BE:E3:E0:EE:8D:CF:5A:40:7F:10:4C:E4:88:94:64:D9
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 01A122786C7D34AFDC3D9522D6F21E6828ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 1AA1
Signing time: Fri 09 Oct 2026 21:01:19 +0000
Manifest this update: Fri 09 Oct 2026 21:01:19 +0000
Manifest next update: Sat 10 Oct 2026 21:01:19 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: 2HNC0VFV2lOt8JZ3E3uxollU5XpKbUeHdng1UWhXaE4=)
2: Mgm2FMvEWQvAKDRyHQNdXSs8Gk8.roa (hash: YvcWkgvU2zBPk1+mekhJs/OPMV1l8zTWtIoK9RU96lk=)
3: O103OuQ4IixndGyKa3UX3V5e3WQ.roa (hash: TcKGNvz82Ie8m+YB2xFxcsRcNfeQxqqzYWZzRclot5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:78:6c:7d:34:af:dc:3d:95:22:d6:f2:1e:68:28:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Oct 9 21:01:19 2026 GMT
Not After : Oct 10 21:01:19 2026 GMT
Subject: CN=ac1358a6bee3e0ee8dcf5a407f104ce4889464d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:76:a6:29:b2:02:fd:bf:ba:41:43:2c:4a:12:
83:dc:d3:f4:1e:eb:0d:45:42:d8:f5:6b:bc:55:b9:
ef:d5:43:a5:b3:c8:f7:4d:06:33:2e:5b:5c:f1:2e:
73:f5:5b:c3:ea:1d:ed:e8:db:8d:3e:61:28:de:6a:
63:3f:e2:2d:0b:8b:0b:65:aa:48:3c:41:f0:94:0a:
49:fb:a8:6f:fe:bc:b9:01:18:af:81:a2:ba:77:c4:
41:77:53:d1:49:1f:03:73:96:49:cd:11:1d:c7:9c:
e0:54:8a:db:76:77:50:5e:23:06:7a:5b:9b:84:39:
99:9a:e4:68:c0:f7:cd:47:52:1d:08:cb:07:12:3b:
44:f3:ea:f4:6f:1b:4b:4d:fd:5e:b8:2d:c5:ed:29:
e4:49:42:5c:04:4d:83:27:fd:d1:0d:f1:f2:d5:ad:
cd:52:c2:f7:2b:d1:2f:e0:9c:29:54:29:c3:8d:52:
b5:ea:98:8b:58:1e:31:16:9d:21:2a:a8:3e:20:ae:
a4:71:f8:31:d3:0c:06:a5:7d:d6:2e:27:27:f9:93:
87:c2:95:1d:7f:d2:39:65:ba:a6:8f:3f:6f:d0:4a:
2f:fa:79:c4:58:39:fe:fe:d2:5e:f0:b9:ea:e5:3b:
da:53:0a:4f:32:ad:37:87:5d:4e:94:ba:fe:2f:16:
44:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:13:58:A6:BE:E3:E0:EE:8D:CF:5A:40:7F:10:4C:E4:88:94:64:D9
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:17:69:92:8b:03:32:e4:d0:0e:f7:95:b6:b8:9a:34:d9:95:
96:7e:28:4c:11:a6:c2:74:b0:af:5c:b3:6c:28:65:3c:f8:16:
f4:94:08:12:d9:fb:5b:f4:30:43:fd:2f:09:bd:16:2a:5b:94:
fd:1f:85:e5:ac:0c:86:6f:e8:87:0c:e7:7c:41:c2:7c:d6:66:
6e:b6:ba:d0:f0:a6:19:ef:8f:e2:90:98:7c:d0:a7:09:05:6e:
e7:5c:29:3f:f9:19:88:75:99:ff:22:72:67:1f:3a:0e:bd:b7:
3c:3b:f3:f1:43:f1:21:0b:89:15:5a:df:c8:7a:16:cc:27:3d:
b6:8e:89:fa:e3:cc:a5:2f:28:c3:35:3c:86:74:6c:0c:95:f9:
84:42:6f:70:8c:8a:31:f5:72:1f:b8:78:31:8a:9b:60:d9:c9:
74:22:c6:12:d3:a8:20:da:b3:a5:55:ab:3e:ac:52:78:b1:06:
10:e7:ea:32:fc:ea:76:39:cd:14:ff:9e:85:62:8b:67:f8:f2:
5a:f6:e3:79:b6:35:ee:3a:0e:2f:49:67:aa:f2:4f:08:e4:a5:
a9:9f:de:71:2c:1b:5c:e2:76:fc:db:44:8d:b8:6b:bb:48:99:
31:63:16:0a:05:5c:06:be:7a:6f:9a:3d:50:47:5d:76:47:00:
f7:81:0c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:35:31 2026 by rpki-client