Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.mft
File: DXPUvXkdXM6A4CbErX1CfRV1k0c.mft (raw, json)
Hash identifier: OsNY3sOXd5ZmdpHRkP4ZgV78NACogJcy4qOSWp7wTFg=
Subject key identifier: 29:51:B4:94:D6:5D:E5:90:47:55:E5:53:A5:69:A7:A2:80:18:6B:F9
Authority key identifier: 0D:73:D4:BD:79:1D:5C:CE:80:E0:26:C4:AD:7D:42:7D:15:75:93:47
Certificate issuer: /CN=0d73d4bd791d5cce80e026c4ad7d427d15759347
Certificate serial: 01A1A601BFA93C0FF07A1055AA48BBDF580A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXPUvXkdXM6A4CbErX1CfRV1k0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.mft
Manifest number: 89
Signing time: Wed 04 Nov 2026 10:01:34 +0000
Manifest this update: Wed 04 Nov 2026 10:01:34 +0000
Manifest next update: Thu 05 Nov 2026 10:01:34 +0000
Files and hashes: 1: DXPUvXkdXM6A4CbErX1CfRV1k0c.crl (hash: GykooowrVlna8RXpDJSuD9ocp07mUGYKPaJzXl2eDbg=)
2: dT0jM_sMFfjOGLTY2WtAxjqm9LQ.roa (hash: DyW/hyjh1BJFkTRjbEkpEYcuJTV4LPGigS20lQaYWE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXPUvXkdXM6A4CbErX1CfRV1k0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:01:bf:a9:3c:0f:f0:7a:10:55:aa:48:bb:df:58:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d73d4bd791d5cce80e026c4ad7d427d15759347
Validity
Not Before: Nov 4 10:01:34 2026 GMT
Not After : Nov 5 10:01:34 2026 GMT
Subject: CN=2951b494d65de5904755e553a569a7a280186bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:52:f5:0e:8a:54:2f:c1:89:04:73:87:98:
ae:9b:28:a2:8e:28:7a:41:59:bf:56:98:23:1c:23:
ab:bc:46:84:7c:e5:2e:54:ef:1f:6f:6d:f3:7b:70:
3a:a2:b5:58:fd:14:2c:62:53:67:29:0b:fd:64:38:
b9:d8:30:fa:86:50:0f:47:9d:1a:03:7a:05:48:23:
30:66:33:0b:56:a4:ff:e3:a3:00:72:d3:4d:9b:6f:
46:7d:f5:cc:32:ca:8e:7e:73:e8:58:34:28:8a:b3:
97:0b:78:49:b5:7d:6f:f8:f1:38:c1:9e:39:49:26:
55:10:63:74:0b:5d:b0:45:8b:bd:9a:79:a7:68:44:
62:28:5b:8f:43:77:23:74:c4:9d:38:42:16:73:77:
c9:7e:0d:c2:87:0f:bd:28:21:7f:c4:a1:42:f1:8d:
00:82:90:37:da:9a:25:82:2c:ab:9d:65:5f:85:83:
e5:77:e1:0e:74:b0:8e:04:c2:5c:22:d5:1b:28:a3:
7e:a4:c0:62:28:b9:13:09:d5:f5:0c:dd:93:8d:eb:
d3:7b:de:b0:00:c7:6f:6a:93:5e:d6:52:61:ad:4c:
2c:8b:60:c8:86:34:1d:11:94:96:2d:39:f2:f6:13:
51:fd:6f:40:64:3a:c9:8d:f4:26:c1:28:fc:2d:22:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:51:B4:94:D6:5D:E5:90:47:55:E5:53:A5:69:A7:A2:80:18:6B:F9
X509v3 Authority Key Identifier:
keyid:0D:73:D4:BD:79:1D:5C:CE:80:E0:26:C4:AD:7D:42:7D:15:75:93:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXPUvXkdXM6A4CbErX1CfRV1k0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ce:75:04:ee:85:61:64:7f:bd:5b:ed:6d:4a:6d:46:bc:91:
a5:55:dd:98:b6:d6:0b:bf:9b:2c:cb:93:92:05:c5:cd:95:9e:
1e:ae:e6:ca:65:4c:3f:89:f9:8c:c4:aa:5d:ed:4e:42:8b:a2:
d2:df:2d:57:91:60:f2:a9:23:af:b7:07:47:d0:f1:2b:1c:29:
02:a0:49:90:21:65:9e:34:38:87:f5:c4:73:7e:12:38:ab:b9:
a1:bd:ae:6f:e4:5e:45:c4:13:e1:2d:9d:7a:1b:70:f8:6b:c9:
6e:e7:67:dc:45:a1:06:e8:80:47:ef:47:8d:5e:f9:62:31:a9:
f7:c1:5a:e4:0a:cc:42:a5:9d:11:4f:92:99:09:08:38:d1:4d:
32:e8:9e:0d:da:8c:a1:04:e7:57:14:8e:7b:72:c5:95:3a:83:
a0:9c:c2:a2:43:48:a1:bb:3e:48:c6:11:c0:43:ca:cd:53:e9:
be:87:28:91:39:36:8c:74:c7:62:da:1f:5a:bc:5a:f9:5a:05:
7e:44:03:7a:84:79:6c:e2:de:38:55:9e:8d:f8:85:31:a1:09:
ca:ac:72:e1:98:a1:c4:52:53:2a:7e:63:10:86:14:7a:5c:83:
4f:7c:13:87:6c:01:8c:cf:34:95:7d:8d:f4:fd:de:30:52:ac:
57:73:08:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:59:48 2026 by rpki-client