Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
File: 1uU17yFuvm9_xVz73DFTK5EtjmM.mft (raw, json)
Hash identifier: CcleYZbG7Qfudedbb6D+A9zhWBzITiQm7YI07xC/qOk=
Subject key identifier: AF:DA:91:CE:4C:EA:94:DA:0F:DE:49:AC:AD:BC:05:10:18:76:68:60
Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
Certificate issuer: /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Certificate serial: 01A08AFACA595F2C0CA4FF570AB2D8963C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
Manifest number: 0F72
Signing time: Thu 10 Sep 2026 11:01:26 +0000
Manifest this update: Thu 10 Sep 2026 11:01:26 +0000
Manifest next update: Fri 11 Sep 2026 11:01:26 +0000
Files and hashes: 1: 1uU17yFuvm9_xVz73DFTK5EtjmM.crl (hash: 69I+9zNB9kQtKcq6GKLMDsOZqAQrcXcF0H6bCKzSzcI=)
2: KU8q2n2CMANYI0fRJo2s7p5G3KY.roa (hash: TGvZcgRzyrpwF/XoDD+tDWJMqg0cIvjLnDlG6w6JYqw=)
3: O6Raip0XpEJuTr4vqY0PE2h8BoU.roa (hash: rkN25N2D5fR585r7ltR6p+7tSt5GR6XgMCZ7nCaivnw=)
4: w0AIzL_yXPCHkJImPTgRwJJtTaU.roa (hash: sZxn5UqLt4mLh2cPzkHphFRVza6dN160+xYuKyv4YdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:ca:59:5f:2c:0c:a4:ff:57:0a:b2:d8:96:3c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Validity
Not Before: Sep 10 11:01:26 2026 GMT
Not After : Sep 11 11:01:26 2026 GMT
Subject: CN=afda91ce4cea94da0fde49acadbc051018766860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:3e:91:cf:9e:90:43:a2:07:93:5b:18:d0:
d9:4f:0d:af:2b:63:73:ea:08:c9:d2:27:d9:a9:8f:
e1:49:46:3f:72:0b:ac:56:74:a3:11:50:de:28:d3:
08:16:4c:8c:35:af:8e:e6:a8:72:95:12:4e:16:d5:
75:84:46:f7:47:7e:e9:3c:84:d8:91:e4:ad:2a:1b:
1d:bd:57:7f:19:f4:38:d9:8b:78:7b:8a:ed:02:e9:
d9:01:4e:76:15:0e:19:4f:59:92:ed:e1:21:69:80:
47:59:fa:2a:2f:f3:ea:a6:c5:a6:9e:9c:7e:fc:46:
04:98:3c:23:f6:db:0c:5f:65:02:8d:7a:8b:95:b7:
2b:96:e1:44:83:19:d7:13:aa:e4:77:d4:a4:79:25:
e2:ca:c2:4f:a6:e5:a6:fb:3e:fe:e0:8d:93:10:99:
f9:9e:b1:12:25:cd:df:cb:98:dc:a4:c7:cd:8e:2f:
6f:1c:5b:ec:30:4f:86:ee:c1:57:b5:b8:a8:3e:5b:
52:39:ba:dc:19:fb:30:94:4f:b2:00:c9:29:e0:0a:
4c:06:20:15:ff:8f:07:7e:bd:e8:45:db:1d:a3:56:
4a:4b:d2:b9:61:7e:0e:3b:e1:8d:7c:c2:f7:28:48:
a9:44:73:a5:6d:ab:b8:1b:b4:c9:ed:de:8b:13:a6:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DA:91:CE:4C:EA:94:DA:0F:DE:49:AC:AD:BC:05:10:18:76:68:60
X509v3 Authority Key Identifier:
keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:73:96:36:dd:36:29:50:7f:74:fd:c4:d4:b3:f7:01:1b:ea:
ca:87:ea:cc:2b:00:0f:2b:5d:7f:59:34:e9:08:74:f3:0d:fb:
7b:ec:7e:cb:97:85:be:e3:ed:31:91:7b:21:e2:16:f4:d8:c4:
e2:3c:8f:e4:3a:39:ee:bc:d4:15:b2:14:dc:09:2f:8f:3c:68:
a2:a2:7a:b9:48:67:07:d2:7c:94:ee:d2:17:d5:60:83:1b:3b:
72:44:06:fe:22:a1:c5:28:1c:62:e7:0d:ab:64:6f:ac:0d:57:
34:97:db:63:6d:8d:6a:f1:ea:9f:2e:43:f6:2f:5e:04:3e:a6:
e3:d2:c6:c0:56:55:79:37:78:fd:2f:f6:4d:ce:4f:5f:ea:ae:
b1:02:44:fd:a9:69:66:85:cf:7a:d1:3b:e3:e9:62:c0:3e:20:
b3:2e:66:c9:52:ff:a6:5d:4b:eb:7c:6f:58:2f:2c:2e:b4:df:
61:16:6b:a4:a4:70:6b:7b:f6:2f:59:20:86:e9:42:70:22:fc:
d3:05:17:cd:75:09:b3:e0:1c:93:29:e0:1b:1b:34:7d:e7:11:
c8:46:26:6b:71:17:80:cc:e1:e9:72:b9:a5:df:f7:1d:b7:e3:
87:2d:1c:d3:69:36:60:28:aa:fb:ca:f5:ca:70:9a:bb:9e:84:
f7:a5:5a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:57:42 2026 by rpki-client