Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: FpySJGSe1u+o4i1LZsDP945FpGwK7OMYaAxbFfFzMIE=
Subject key identifier: 2C:2F:6F:72:C4:9E:84:4C:EB:D9:BC:E7:F7:71:C0:8A:19:BE:E7:3A
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 01A1498585DC4E83F4C87C1ECC00AE363A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 18CE
Signing time: Sat 17 Oct 2026 11:00:49 +0000
Manifest this update: Sat 17 Oct 2026 11:00:49 +0000
Manifest next update: Sun 18 Oct 2026 11:00:49 +0000
Files and hashes: 1: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: jyADit2YfvsfZDRUBjJeph+FMbdKH2ogEolGxXLtJ5A=)
2: UcXFjwyhaWT6jJkzoQqS8tFWKQc.roa (hash: slGaHxdN7Oqozliq50gNi9OxqgfS+8LclDE77QIbzI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:85:85:dc:4e:83:f4:c8:7c:1e:cc:00:ae:36:3a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Oct 17 11:00:49 2026 GMT
Not After : Oct 18 11:00:49 2026 GMT
Subject: CN=2c2f6f72c49e844cebd9bce7f771c08a19bee73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:fd:b0:ab:86:33:00:47:2d:6c:25:fc:3f:
a1:2e:50:41:37:72:1a:c7:45:d0:d2:be:a8:d4:11:
13:55:a6:6c:91:eb:ef:37:d7:20:5c:9b:45:2b:5f:
dd:92:68:50:3e:49:92:9b:55:4a:1c:e8:31:2b:40:
37:bc:86:c4:b7:4d:cf:f3:a4:f0:90:35:95:0b:ee:
02:c8:57:a9:fc:26:b9:1b:be:38:59:1a:00:ab:8c:
38:de:4e:cf:bd:6f:f7:97:93:2a:ca:8a:7d:98:e9:
99:72:d4:1d:10:66:ea:82:b9:2e:20:c9:c7:99:89:
0a:02:46:73:94:35:8b:09:b5:88:26:7a:20:c1:03:
9c:69:a5:4f:79:83:0c:f7:60:70:50:99:9a:af:39:
7f:6a:bf:4b:9f:7f:7b:f5:de:54:ab:e5:3e:9b:e5:
cb:80:51:b3:b1:2a:55:e2:70:a3:49:3d:56:4c:d2:
8f:a6:ea:14:da:70:4a:94:49:80:53:83:6c:8b:21:
ca:40:46:1c:b6:e6:e0:48:00:8c:ed:90:d7:56:e8:
49:60:69:f6:cc:e1:0c:cf:30:91:cc:dc:7d:7c:74:
81:cd:3c:bd:82:30:7f:28:e6:cd:1a:52:39:27:b1:
1f:6a:5e:b4:e7:38:8f:7f:9a:48:e3:9b:5e:66:98:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2F:6F:72:C4:9E:84:4C:EB:D9:BC:E7:F7:71:C0:8A:19:BE:E7:3A
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:44:79:3e:2c:8e:f8:5b:ef:6f:c5:1d:4e:19:a9:d6:2c:f2:
93:c0:23:46:f8:84:15:9b:92:95:b7:e8:26:39:0f:93:86:40:
11:fa:41:f8:dd:71:22:42:91:3b:ba:8c:4f:d2:c9:5e:d2:04:
fa:09:54:f3:e5:2f:49:88:53:5e:5d:8b:a5:15:c2:cd:63:6f:
86:f5:f7:0c:59:6a:ed:08:8d:5c:2a:61:74:32:95:58:36:4c:
02:af:c4:9e:ce:71:4f:77:62:83:a5:4c:bd:45:23:3b:ce:2d:
ef:ee:11:d3:0f:db:15:e4:1b:9c:f7:e0:0e:12:18:7f:fa:0c:
be:ef:25:7c:05:cb:eb:3a:74:60:bc:a9:d6:de:14:24:8c:a3:
86:21:9b:3b:a8:6b:35:63:9f:f0:62:87:fe:2f:97:0c:5b:2c:
3e:fc:66:22:a6:b6:11:12:d6:6e:15:bf:4a:06:68:21:ea:3a:
de:d0:ab:c9:99:24:43:ef:4a:b1:28:53:20:0e:51:08:45:77:
89:c2:a3:c2:e9:6a:08:5d:f7:a0:4b:03:60:4a:07:e1:a5:73:
8a:cd:93:9e:90:6c:e4:d3:2e:24:e0:5c:b3:37:2e:ee:97:bc:
cb:bf:3c:44:c3:6e:9f:41:90:32:68:75:c8:7d:0b:a3:96:05:
cb:4b:69:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:31:12 2026 by rpki-client