Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: y/XPfCK1+LvYr3EIlOi5hHBwnuFwdyIl7JsWx5S6ahc=
Subject key identifier: EB:E9:EB:99:59:31:0E:1D:40:25:30:8E:C8:18:E3:3A:F6:19:4A:CA
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 019FDB3E3FF92AEA26618F1E5407875D401B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 14B6
Signing time: Fri 07 Aug 2026 08:01:57 +0000
Manifest this update: Fri 07 Aug 2026 08:01:57 +0000
Manifest next update: Sat 08 Aug 2026 08:01:57 +0000
Files and hashes: 1: PeJEMtupept21vf-rfjqUX1mldY.roa (hash: L3Vq59CQQkeuB9Tb5q+mJV+IQYi3JZHbF6U8aJ9gFYU=)
2: aD0lsDcoNGKfxZpDG-OdR_bzMnU.roa (hash: bvoZBbd9QoLZ+N5I+xfKDL3PeYR6CygFLOwHX1oAOxI=)
3: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: y+MGFYnzRni8lr1ctk6+F4ajIyvisKX9MGjI5Zr6fn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:3e:3f:f9:2a:ea:26:61:8f:1e:54:07:87:5d:40:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Aug 7 08:01:57 2026 GMT
Not After : Aug 8 08:01:57 2026 GMT
Subject: CN=ebe9eb9959310e1d4025308ec818e33af6194aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:52:72:90:5a:d3:8f:32:37:df:a3:71:73:
a9:2b:92:2a:c0:84:e0:84:47:bd:06:cd:80:24:ff:
ce:ce:a7:ca:58:dd:24:ad:b3:71:fd:3f:80:82:e9:
24:8d:81:31:61:3f:8e:3a:9f:15:6f:36:30:4a:64:
b3:a9:63:81:5b:c3:56:44:1a:91:cb:d0:f9:01:d2:
20:eb:15:3d:61:81:71:7a:ba:3a:86:f0:99:d1:df:
9b:e7:1b:7b:db:da:24:64:4d:a4:7f:ed:a6:3b:5d:
7e:1f:29:7a:ab:86:6e:64:91:b6:52:08:8a:d7:cb:
cf:cf:17:59:1a:13:87:0d:f9:de:34:f9:fa:94:4a:
c6:0f:f0:4b:db:92:08:6d:99:ef:ed:fb:c4:be:c4:
4b:c4:46:e8:19:d8:d3:50:bd:fa:59:3a:aa:4e:5b:
9a:fd:3d:17:33:99:58:8e:a1:79:5a:7c:9f:49:04:
1c:42:f8:41:76:d5:76:ce:98:3b:a0:55:e8:85:2e:
c7:3e:ea:1e:ab:be:66:71:87:e4:0d:09:3d:71:3a:
17:b8:e5:ea:22:f2:00:13:30:ea:8b:93:d8:20:42:
d8:39:06:e2:52:39:a5:65:46:aa:63:86:fb:95:8e:
b7:24:2a:69:9e:7c:62:c6:fc:52:a7:44:86:38:33:
bc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E9:EB:99:59:31:0E:1D:40:25:30:8E:C8:18:E3:3A:F6:19:4A:CA
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:74:b6:d1:f7:45:30:c2:08:96:84:e1:a5:a8:e0:a2:d8:42:
52:87:2c:76:10:9b:5d:e7:06:39:c7:3c:be:77:1f:1d:b1:59:
2d:ba:39:c9:b5:2d:08:de:29:34:fd:2c:e2:4d:01:2a:46:b4:
4c:92:cd:34:5b:9e:8d:e4:93:e7:5c:17:4f:ec:2d:47:41:7b:
0a:54:f6:67:db:94:45:df:f8:07:fc:c3:83:c7:8c:cb:04:26:
0e:e9:8a:2f:56:23:11:65:af:fa:b4:89:85:41:24:ca:c7:29:
ed:1a:af:80:06:5e:2d:47:35:c6:27:1b:7b:90:7e:3d:e1:95:
2e:11:64:26:f2:68:32:57:f8:39:12:d6:84:6c:29:3c:44:14:
f6:d3:a4:08:d8:51:3d:cb:51:3e:c0:68:89:f1:28:e3:08:41:
66:a8:ec:71:7a:e4:2a:dd:cc:75:f9:2a:0e:7e:44:17:5b:a4:
10:59:8f:5c:e3:cb:18:63:78:83:af:d8:b5:bc:4e:83:3d:e1:
36:32:60:ba:1f:9c:16:1d:ff:1b:d5:b3:b6:c1:27:4c:1c:28:
45:68:1a:e1:a2:85:81:c8:b2:d1:07:51:d8:32:9c:79:75:2c:
cb:ca:fa:82:74:8a:13:da:63:46:40:d3:ba:b9:7c:9d:d2:f2:
89:57:97:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:41:34 2026 by rpki-client