Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json)
Hash identifier: LMsmKJ0Q7X/WB/NtoxfzsTnTCj+VUDCTEuvDwT2yUfw=
Subject key identifier: C5:0A:02:99:37:65:B1:6E:5A:40:02:58:AB:D2:27:D6:19:6F:B8:43
Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Certificate serial: 01A13DB8A00ED9407EDBA612DDC19F914B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
Manifest number: 06AD
Signing time: Thu 15 Oct 2026 04:01:12 +0000
Manifest this update: Thu 15 Oct 2026 04:01:12 +0000
Manifest next update: Fri 16 Oct 2026 04:01:12 +0000
Files and hashes: 1: 1HQ2oYdrkzbGmcEGuOKgDpKVA-A.roa (hash: +R86VJ/9zKCCo9on3dPLqNmwVLLy9nPRqGdyKqWuego=)
2: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: c1sA8pc7PTgrEQjnus8Oqzvg4CJ+JXgJzuiJ8BRIQuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:a0:0e:d9:40:7e:db:a6:12:dd:c1:9f:91:4b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a
Validity
Not Before: Oct 15 04:01:12 2026 GMT
Not After : Oct 16 04:01:12 2026 GMT
Subject: CN=c50a02993765b16e5a400258abd227d6196fb843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ba:da:0f:fc:d3:3c:09:82:67:b0:8f:9e:41:
3d:f2:9d:28:35:1c:a2:40:bf:3f:1e:a8:21:1a:70:
ae:1f:87:94:6c:85:5f:a4:d3:a4:60:11:60:1e:be:
51:d2:62:ca:d7:6c:3d:29:db:14:7e:62:59:b9:d6:
fe:34:d4:9f:6c:1e:03:1f:fe:1c:b9:38:14:d2:a2:
a7:36:35:b0:6a:79:da:fd:aa:62:13:b3:99:31:2c:
a9:29:c6:b6:06:ea:1d:2a:0f:7f:9b:16:fa:f5:d8:
5d:5e:ec:05:23:d8:d8:37:6d:7f:85:dd:20:7e:74:
49:d5:e5:18:bb:e5:bf:34:b8:ff:d8:56:2c:fb:8a:
42:f1:89:ab:e7:68:24:f5:da:bb:5d:74:ce:f9:28:
6b:d8:33:9e:8c:7b:33:5c:2a:b4:78:27:9e:61:78:
4f:90:05:57:f9:d5:9a:6d:65:82:9e:b8:fa:ed:2c:
71:97:d2:56:9b:df:ae:b0:7c:bc:ab:ef:a3:35:0f:
3a:28:d6:a4:21:83:08:34:5e:4e:d9:90:20:4e:e5:
f7:a0:e9:40:c1:c8:80:2a:14:aa:8c:ba:bd:d2:f2:
0a:8e:5e:b4:cc:6b:e0:49:fd:3f:29:1a:41:df:4e:
d2:6e:a2:fd:06:66:87:a8:65:bc:f2:ab:26:c9:2c:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0A:02:99:37:65:B1:6E:5A:40:02:58:AB:D2:27:D6:19:6F:B8:43
X509v3 Authority Key Identifier:
keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f4:60:b3:79:29:60:83:06:a0:ff:ff:19:b9:b0:c7:f4:5c:
5b:91:f5:9e:1e:84:c8:e8:cf:ad:70:3d:75:0b:0a:61:01:da:
70:c8:45:00:49:a2:71:e8:00:2b:a8:e9:2b:e9:b9:3f:63:f9:
74:6d:03:d6:89:25:88:ce:5f:5b:3a:07:2f:65:76:70:a6:2f:
99:ad:83:c7:80:bf:d7:7c:d9:a7:1d:58:35:bf:b1:45:15:c1:
06:74:2f:61:20:3a:03:3f:bd:22:11:80:3d:ed:9f:5d:28:44:
e5:7e:09:0c:30:4a:7e:8d:98:0e:8e:3a:88:1c:6d:b2:58:85:
49:6e:68:5c:1d:d5:f0:cf:d4:3b:82:c2:a6:68:96:2b:f3:8a:
24:49:21:8f:a7:1b:9d:c7:c9:5b:9b:88:1f:6f:5e:53:e8:e5:
99:b4:6f:ae:58:98:a4:e9:4f:33:8a:be:16:b5:2a:09:35:bc:
42:f8:ea:f7:0f:97:0b:e4:bb:59:06:6b:61:6e:e9:fe:6e:c6:
19:aa:11:7c:37:ed:21:d0:eb:72:9a:4b:e6:8f:01:9e:d0:50:
db:f2:8d:23:3c:2c:b6:75:33:b5:76:46:41:ea:68:26:35:53:
71:e3:10:9c:2c:4b:eb:78:a2:bf:a9:c2:97:ed:f6:73:b6:97:
88:92:6b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:37:55 2026 by rpki-client