Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
File: 1uU17yFuvm9_xVz73DFTK5EtjmM.mft (raw, json)
Hash identifier: UdSI0hVlh+1IdZOEJcgYZdAOpaMb2XyUoWAj5GcQzWc=
Subject key identifier: 86:FA:BF:D3:0B:8C:7D:CC:D3:95:03:0E:9F:3D:0F:6E:FE:87:6A:8E
Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
Certificate issuer: /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Certificate serial: 01A17E4F04DBFDC23EF6ACA7ABDD89BB5F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
Manifest number: 0FF0
Signing time: Tue 27 Oct 2026 17:01:10 +0000
Manifest this update: Tue 27 Oct 2026 17:01:10 +0000
Manifest next update: Wed 28 Oct 2026 17:01:10 +0000
Files and hashes: 1: 1uU17yFuvm9_xVz73DFTK5EtjmM.crl (hash: ncKbDfBZhcSFAAYW4pw23YoSq9pIMdELbcUR19JX6Uo=)
2: KU8q2n2CMANYI0fRJo2s7p5G3KY.roa (hash: TGvZcgRzyrpwF/XoDD+tDWJMqg0cIvjLnDlG6w6JYqw=)
3: O6Raip0XpEJuTr4vqY0PE2h8BoU.roa (hash: rkN25N2D5fR585r7ltR6p+7tSt5GR6XgMCZ7nCaivnw=)
4: w0AIzL_yXPCHkJImPTgRwJJtTaU.roa (hash: sZxn5UqLt4mLh2cPzkHphFRVza6dN160+xYuKyv4YdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:04:db:fd:c2:3e:f6:ac:a7:ab:dd:89:bb:5f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Validity
Not Before: Oct 27 17:01:10 2026 GMT
Not After : Oct 28 17:01:10 2026 GMT
Subject: CN=86fabfd30b8c7dccd395030e9f3d0f6efe876a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:bc:75:1e:4d:97:61:06:82:d3:c7:bf:c7:
3c:3e:54:bb:9f:67:ce:df:f8:f3:47:15:8a:e0:5a:
bc:71:d1:29:2b:f2:81:9a:1d:30:74:c8:cf:c0:e8:
4d:c2:be:30:79:c3:eb:d5:bc:bc:43:9e:1a:cc:9f:
6d:11:c5:2f:69:93:ff:62:7a:9f:f0:65:34:a3:78:
9c:86:e4:3b:22:03:2c:89:dc:09:e2:7e:5d:dc:8c:
1a:56:5d:5c:de:9e:7c:29:44:a3:cc:6b:20:8e:2a:
1d:e4:70:36:e4:b1:09:8c:3e:4f:45:7b:27:6c:36:
41:a6:15:81:f4:86:ca:91:94:37:db:5d:fa:fa:a0:
f1:5d:4f:50:8a:c3:dc:0c:0f:d0:94:ac:d0:ab:5f:
e4:6e:35:1e:03:3f:c1:70:5e:4b:d6:7b:55:ee:a7:
41:52:34:df:bb:88:8b:42:58:36:f2:b8:4f:48:b3:
ef:dc:72:de:15:b7:f4:3c:89:55:72:e9:31:5e:9a:
b7:8e:03:0c:a1:ff:64:ed:33:ab:f9:cf:c1:7c:24:
d8:32:6c:71:12:49:70:35:15:2f:72:51:6d:b2:03:
75:73:34:5f:2f:bd:8e:ab:80:fa:7d:04:42:ea:24:
84:02:48:38:9e:de:a2:97:f5:28:8b:eb:0b:59:fe:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FA:BF:D3:0B:8C:7D:CC:D3:95:03:0E:9F:3D:0F:6E:FE:87:6A:8E
X509v3 Authority Key Identifier:
keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:75:84:c8:ef:98:9c:27:b0:c5:fe:47:db:df:aa:42:72:63:
1b:b0:e0:f2:19:a2:2b:cd:13:db:e8:2d:82:7f:d6:9b:51:54:
94:f2:64:62:25:69:c1:83:0e:b5:79:f2:82:4b:1b:54:30:89:
60:90:79:96:95:5a:c4:52:2e:e7:84:73:56:92:72:34:a4:fa:
a4:b4:85:44:ba:ec:94:be:f3:fe:e5:82:55:66:56:ca:b3:d3:
04:7a:af:16:1e:44:1e:66:98:76:bc:16:bb:ad:43:c1:78:c7:
5f:c1:b0:10:18:d7:57:e0:c8:7a:49:47:e5:52:45:e4:dd:13:
40:d5:1a:d1:b7:2b:b8:47:85:d5:6f:fc:26:93:71:f4:c2:b6:
a8:27:4c:1d:8e:9d:78:1d:d4:54:3c:91:8b:e2:48:5b:56:b6:
da:67:4d:ca:80:14:c5:30:a7:9a:dc:13:6f:a8:7b:fd:a3:75:
c3:73:d3:4f:c0:e5:c3:3e:92:30:53:0f:6d:8a:14:9f:09:63:
fd:00:01:0c:f7:47:23:3a:a5:e5:53:24:92:7c:b9:b6:4a:bd:
19:8b:00:ff:a3:ce:91:12:19:59:c8:49:4e:55:3d:c3:7e:a3:
f0:4b:de:fa:a8:1a:93:dc:db:38:44:1f:81:70:99:b6:39:c5:
57:81:0a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:51:55 2026 by rpki-client