Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: +P6+2TCOkLJ0ISMPFiGPWZpe9B9QtR1Go7lkvME1RCM=
Subject key identifier: 04:2D:2A:69:0E:03:82:D5:20:4B:57:2E:B0:ED:14:69:E7:6D:F3:D0
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 01A001013A9F88D5BC67762CBBD406985C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 0609
Signing time: Fri 14 Aug 2026 16:00:52 +0000
Manifest this update: Fri 14 Aug 2026 16:00:52 +0000
Manifest next update: Sat 15 Aug 2026 16:00:52 +0000
Files and hashes: 1: 1HQ2oYdrkzbGmcEGuOKgDpKVA-A.roa (hash: +R86VJ/9zKCCo9on3dPLqNmwVLLy9nPRqGdyKqWuego=)
2: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: Y7uftKvYNb7yr5uXEIbqFt78Ypna72RL2YID425+cd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:3a:9f:88:d5:bc:67:76:2c:bb:d4:06:98:5c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Aug 14 16:00:52 2026 GMT
Not After : Aug 15 16:00:52 2026 GMT
Subject: CN=042d2a690e0382d5204b572eb0ed1469e76df3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:c0:39:63:d0:36:6a:7b:e7:4a:d2:a0:55:
80:35:25:f1:59:28:35:15:9b:50:a9:28:19:31:67:
cf:3f:88:e0:40:97:37:c6:84:e0:9e:eb:38:db:6e:
b0:ed:04:1f:bc:ec:fe:df:e7:ad:42:19:01:4f:a5:
00:e1:af:d7:a9:52:f5:04:7d:c3:67:a6:af:d2:21:
05:2d:00:ff:c7:dd:1b:b2:a2:7e:1d:44:19:6e:bf:
4f:53:2b:e8:55:0e:58:0a:85:3b:f1:54:ad:aa:e7:
96:56:74:f2:39:ed:c5:7f:99:3a:06:d4:7e:cf:b4:
6e:f5:87:06:78:33:98:73:01:72:67:0b:68:66:7f:
28:e0:95:b6:cb:ed:c4:80:08:36:a0:42:e5:74:8c:
70:3c:1b:5d:08:7f:9a:da:f0:e7:43:35:18:bc:21:
a6:11:b3:ad:0e:52:f1:ff:06:c4:8e:75:e0:f7:a4:
5a:02:6c:00:05:04:97:6b:e4:64:ea:b7:28:01:2f:
47:81:72:40:7b:5e:d1:4c:37:59:61:70:43:ab:da:
a6:27:98:f7:99:f7:44:a9:4c:1c:7c:42:ad:44:92:
14:dc:6e:27:e7:c1:de:55:3a:b4:b8:6b:fd:68:ef:
77:1e:65:c2:62:85:03:5f:be:62:d7:a7:d6:30:b2:
a7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2D:2A:69:0E:03:82:D5:20:4B:57:2E:B0:ED:14:69:E7:6D:F3:D0
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:12:ed:a3:29:f3:e0:0f:86:76:e3:5b:5a:ed:4e:34:c8:47:
00:33:fc:59:db:ff:4a:ec:95:f4:ef:08:58:b3:d4:39:ec:b3:
24:29:a7:bd:7a:24:e6:38:59:02:61:03:56:74:eb:04:7a:08:
e7:d4:e9:03:12:3f:83:e5:fb:56:c6:fa:1e:61:6c:3d:21:06:
11:f6:05:29:c7:5f:fa:30:2b:85:db:09:90:5d:35:97:16:d2:
43:3c:7c:97:7f:61:c3:77:8c:51:ad:b1:45:1f:25:45:64:70:
8c:2f:26:2a:d1:a1:5f:97:24:90:14:f5:a6:97:5f:f5:6a:5c:
2e:73:79:b0:80:3a:e9:91:66:99:44:a4:6d:ce:b4:f9:92:fb:
48:a4:0e:63:24:55:e1:ca:78:1c:52:ef:a9:db:4b:8d:09:15:
90:42:75:ef:c5:8a:b7:84:5d:54:1f:42:e8:20:8b:47:bb:5a:
5a:fd:9c:79:6a:11:f6:ed:c2:0f:bf:a7:30:89:0a:2c:a3:2f:
43:87:f8:b9:e1:7f:bc:af:50:12:02:80:e4:a6:b3:f6:26:ad:
8e:85:f7:af:9d:f7:30:3d:b0:f9:03:cc:a8:a0:df:ff:fa:d7:
79:2e:df:45:13:03:f9:c1:30:8b:cb:52:b0:82:6d:5b:39:dc:
4f:08:02:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:08:07 2026 by rpki-client