Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json)
Hash identifier: G2KR6ekUZPZVmb8GHWKgWGvLsWtYFF63MdrT0gYEqB4=
Subject key identifier: 44:15:1C:F3:81:8E:C7:F3:55:74:44:24:CF:BE:25:20:15:0F:C9:50
Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677
Certificate serial: 01A13DEF03EEDC2FE38D8624F32D11AD38F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 05:00:36 +0000
Manifest this update: Thu 15 Oct 2026 05:00:36 +0000
Manifest next update: Fri 16 Oct 2026 05:00:36 +0000
Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: PzKNNByn4Xw0+/XA+p2s5D2W1mF/haXKtBztdT5iS/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:03:ee:dc:2f:e3:8d:86:24:f3:2d:11:ad:38:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677
Validity
Not Before: Oct 15 05:00:36 2026 GMT
Not After : Oct 16 05:00:36 2026 GMT
Subject: CN=44151cf3818ec7f355744424cfbe2520150fc950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:f9:78:16:1f:8c:97:27:6d:93:4f:f2:74:
6d:4d:31:59:ba:c3:21:91:a0:8b:39:71:88:21:67:
3a:12:41:a1:36:ae:f9:f6:d0:ab:a1:62:ef:2c:3c:
77:04:c0:2e:24:23:ed:3b:cb:25:bc:20:58:28:c8:
f4:67:5f:47:d1:fd:7a:a6:67:31:a0:36:a5:c0:d6:
11:f8:d5:c3:c0:ee:b0:d6:72:55:02:59:12:54:f7:
04:ce:ec:94:76:05:09:b6:2b:e2:6b:f2:f6:bb:d5:
65:08:08:8f:43:f7:c1:56:7b:3c:ca:52:40:dc:79:
36:86:04:cd:85:04:85:73:1d:65:b1:ad:96:95:cb:
72:b4:66:fc:8c:3f:23:7c:ec:8d:ef:66:c6:bd:18:
2a:d3:56:3c:b5:d8:a8:4c:0a:f5:d1:e6:85:75:8e:
7b:bc:15:f9:2e:7d:4e:3c:f2:dc:fe:d6:b5:5a:b1:
a9:0f:f0:ed:96:41:48:ef:ae:5c:a7:40:04:e0:53:
eb:f0:4b:7a:79:66:9e:4c:46:21:26:21:f9:a3:d3:
58:fb:63:7e:be:d6:8f:e9:2c:22:b4:45:69:d5:c4:
ee:cf:92:04:46:13:26:48:27:f2:79:c8:4f:74:fc:
b7:3d:b9:54:4a:44:be:da:ce:97:4b:7f:c4:5b:c8:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:15:1C:F3:81:8E:C7:F3:55:74:44:24:CF:BE:25:20:15:0F:C9:50
X509v3 Authority Key Identifier:
keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:23:a0:61:83:a6:a5:87:21:dc:b3:c2:5a:41:c2:6f:10:ad:
51:58:95:ab:6f:86:ae:9c:e9:a5:0c:d4:3b:ce:14:7a:b8:36:
62:e9:63:b5:88:56:15:23:2f:d6:25:93:b8:4f:e1:a4:dd:7d:
18:65:e1:bd:d6:60:fd:4d:7f:77:1a:b6:17:26:93:23:6c:3a:
4a:56:df:fc:87:a8:22:fd:a0:5d:15:76:b9:4a:d9:5a:ab:d4:
94:01:ec:3c:9f:ee:34:22:e6:c2:7e:0e:83:17:60:f2:b1:2f:
da:22:d2:09:a3:d1:46:06:0c:cb:f2:5c:a3:40:8b:17:67:d9:
e4:ed:af:9b:a7:f4:65:55:ce:f8:de:8d:da:1c:60:2a:35:6b:
7a:5c:c9:7b:20:1f:fe:4a:f9:93:8d:72:74:ba:5e:12:8c:b9:
96:7f:87:13:47:af:ba:9b:85:fd:39:af:25:60:c3:cd:85:6b:
91:78:87:13:9d:c9:2c:45:10:a9:63:cd:67:44:a7:b3:3f:3c:
56:d6:45:f3:d9:d3:29:24:d4:b1:3a:b6:47:de:60:f9:7f:08:
be:e8:ea:90:37:68:78:a4:ac:98:d7:6e:ef:0a:f2:84:8c:6a:
bc:61:9e:a6:6f:b5:f0:1c:45:00:ca:7d:35:2e:73:10:72:9b:
cd:fc:b9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:06:27 2026 by rpki-client