Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: e/DWscNBJneY0KQrKsmXP0tC33ddvGa/rr4/g+IGVis=
Subject key identifier: EB:82:CF:8D:49:4B:7C:2B:1D:1F:1D:94:CC:88:D5:47:17:A7:C4:22
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 01A08BD61E892F7255362ECD968523AC5DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 1A46
Signing time: Thu 10 Sep 2026 15:01:00 +0000
Manifest this update: Thu 10 Sep 2026 15:01:00 +0000
Manifest next update: Fri 11 Sep 2026 15:01:00 +0000
Files and hashes: 1: 3yGgq6gpQ9NYaasBYMMPQaATXzo.roa (hash: i0WCJtC2Kt+N/0o8HIjmO/t5ox+yoXwX3GlgqEv4MdQ=)
2: ZRLYVrP2rb95Q-Ge4TVnxmxa0zg.roa (hash: Xsb75QA4ApCthewBTBgfSKpRYNo5qI3KmhsLF/JdAuM=)
3: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: wkIjZ2VoT9Mn8N6LrDJTY6vZ8yGgpaHIZ54ghKt4P2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:1e:89:2f:72:55:36:2e:cd:96:85:23:ac:5d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Sep 10 15:01:00 2026 GMT
Not After : Sep 11 15:01:00 2026 GMT
Subject: CN=eb82cf8d494b7c2b1d1f1d94cc88d54717a7c422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:e5:6b:5f:e9:af:2e:f2:1a:d9:e5:d9:21:
2f:6e:40:fe:fb:45:45:05:81:1c:13:49:c5:3e:73:
3b:12:17:aa:c3:ba:28:e9:ad:8c:a2:1a:bb:d8:72:
30:2c:9c:bc:cf:cb:38:31:30:16:69:96:33:08:88:
f7:c0:93:5e:bd:de:2e:c8:7a:aa:00:6b:de:23:de:
54:01:98:f7:6b:74:67:05:ec:a4:d1:b5:b8:c6:9e:
6b:01:43:42:28:f9:33:01:53:a0:69:f5:a1:33:de:
3f:f7:59:61:39:b5:65:6b:86:c3:73:88:89:2e:22:
71:cd:27:5a:39:86:ae:b6:0d:71:c4:00:5f:71:c1:
68:70:ef:1c:1d:a6:20:b4:a4:03:48:01:be:8f:ed:
57:a2:86:ed:b5:e4:0b:1a:ca:01:a4:40:81:06:4b:
79:3e:30:25:f8:96:05:21:29:c2:64:a0:cb:f6:cf:
8f:c8:bf:26:1a:c5:0d:84:10:5a:ba:6e:c5:33:b1:
64:cb:3b:1c:a6:31:09:ca:a2:a3:e0:6c:97:35:66:
ee:19:10:e4:50:47:d3:4a:e7:f5:c9:68:49:3b:ae:
62:0f:d6:08:cd:46:d9:0d:cf:3b:3e:97:da:8d:aa:
92:c1:c2:f5:ce:54:da:1b:a4:99:64:85:8c:95:5d:
f5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:82:CF:8D:49:4B:7C:2B:1D:1F:1D:94:CC:88:D5:47:17:A7:C4:22
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:23:0c:21:25:a4:ca:4a:b4:2c:f9:8d:ab:d2:47:28:fd:e1:
90:76:7a:7a:31:ab:02:28:12:9a:de:e9:02:8d:3e:0a:22:37:
41:43:7d:21:a9:71:83:f7:a0:a9:98:7b:ad:8c:c9:bb:9a:4f:
c5:b2:43:73:5d:5f:9d:78:b4:d0:6f:d2:24:19:d7:56:b9:b1:
5a:d2:22:9e:a0:28:23:06:9d:de:99:28:8d:40:1f:37:06:6c:
1d:ad:13:f7:7d:76:48:64:c0:f9:77:cb:94:3f:b7:39:33:ec:
de:c8:7a:4a:45:80:5b:8f:b4:70:19:b0:4c:6a:a0:16:af:a2:
ce:52:47:30:2a:64:81:5a:df:3a:28:1c:be:bc:20:bd:94:89:
27:ed:a8:57:b4:ab:13:cc:2b:2e:df:8b:48:73:e1:f5:45:11:
51:8b:6f:84:fe:1b:a4:2d:c2:f6:46:ea:91:c7:6f:27:1c:2f:
f9:7b:28:d3:cd:48:91:b4:3b:5e:d6:42:38:35:6a:47:a6:41:
eb:15:66:fa:92:2e:b1:3f:90:8f:83:4e:4f:29:9e:07:bc:cf:
5d:ed:87:e8:20:9f:19:3c:11:e8:7e:5d:e1:05:56:58:1b:80:
f1:42:d3:13:3b:0d:9c:eb:65:47:ce:1a:93:62:08:6c:70:39:
b5:a9:ac:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:20:23 2026 by rpki-client