Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
File: 23DOek5uSrOk6p8IH1kupfbSuao.mft (raw, json)
Hash identifier: Xowm6jSYjqgHeXv/L2E8PUHLNfEOK8xpS/t59qCwMlw=
Subject key identifier: 6C:8D:35:89:70:67:68:58:8C:AE:E2:D7:6C:1D:F4:23:DD:3A:8A:69
Authority key identifier: DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
Certificate issuer: /CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Certificate serial: 01A14C18C37F5B1D06DE07B94888A7E797B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
Manifest number: 0AEF
Signing time: Sat 17 Oct 2026 23:00:53 +0000
Manifest this update: Sat 17 Oct 2026 23:00:53 +0000
Manifest next update: Sun 18 Oct 2026 23:00:53 +0000
Files and hashes: 1: 23DOek5uSrOk6p8IH1kupfbSuao.crl (hash: TwQX68uYetTCv/gMBOdFhlbUMZM0Y0bt9AeYUHQKWmU=)
2: hhh3z06Bpe2m47ehC44Gk6XsxWY.roa (hash: D+hS8HY9ljD+1P/aopr0G/yuhchBVZY0zZMSPMrBOWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:18:c3:7f:5b:1d:06:de:07:b9:48:88:a7:e7:97:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db70ce7a4e6e4ab3a4ea9f081f592ea5f6d2b9aa
Validity
Not Before: Oct 17 23:00:53 2026 GMT
Not After : Oct 18 23:00:53 2026 GMT
Subject: CN=6c8d3589706768588caee2d76c1df423dd3a8a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:8e:74:97:67:66:c5:f1:b3:a1:00:16:f5:
49:1e:09:bd:26:1c:90:14:1a:d3:db:16:bc:38:ef:
40:dd:e4:e2:80:ee:2a:24:9f:a1:b6:6a:e1:48:1a:
00:9f:43:7c:a8:a2:8e:33:3c:dd:d2:9a:d6:77:14:
19:67:03:e0:d2:04:27:bf:00:ba:ad:d8:19:01:d9:
54:1d:5c:e8:e1:6e:22:00:ad:29:35:68:b7:0e:1f:
78:08:e0:93:9c:de:84:94:ee:a5:45:89:e1:79:1d:
ca:48:48:d0:70:ff:72:66:47:44:dd:43:db:1e:c3:
6c:db:0c:ca:cc:1f:6f:88:2a:b7:16:61:2f:30:7b:
d9:15:fe:fd:c8:92:15:31:d8:d8:5a:31:00:b0:4d:
3c:05:f8:89:90:f4:91:10:39:00:7e:a0:62:10:f1:
69:22:99:2c:2b:44:87:ce:b3:7a:ea:31:fe:4e:87:
bb:38:36:cd:59:eb:6b:40:68:92:9a:b6:27:14:ca:
c9:2d:17:7e:29:d1:8f:af:fc:19:5f:52:0b:98:ec:
40:a0:c9:a3:03:9b:8d:1f:d5:81:63:82:54:97:6e:
03:44:32:3d:44:0a:7c:ff:ef:89:d2:2b:ae:c4:4b:
e0:9c:db:d1:b0:fb:5b:30:f5:86:e2:e2:12:49:c1:
9b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8D:35:89:70:67:68:58:8C:AE:E2:D7:6C:1D:F4:23:DD:3A:8A:69
X509v3 Authority Key Identifier:
keyid:DB:70:CE:7A:4E:6E:4A:B3:A4:EA:9F:08:1F:59:2E:A5:F6:D2:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23DOek5uSrOk6p8IH1kupfbSuao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9da601-635e-4d07-8096-2cb17b7bc618/1/23DOek5uSrOk6p8IH1kupfbSuao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b6:62:5c:5a:8d:59:74:fd:b4:37:29:11:30:c3:86:80:49:
94:ac:74:44:c0:fd:d4:de:26:83:f2:11:d6:33:07:4a:4f:a3:
66:40:b8:ad:da:4e:57:5b:ba:2e:6c:ed:ef:2f:e9:26:0c:c1:
47:49:16:00:79:ba:92:7c:48:8b:c1:a1:25:3e:a0:48:af:b9:
d3:a9:b2:b5:2f:f2:de:be:d7:58:84:74:9f:59:2b:6d:d0:66:
a9:31:3e:a8:0c:bf:b6:6a:25:d4:55:3e:e9:f8:0b:27:31:36:
69:12:c5:1b:70:4d:3b:8b:c8:08:f3:80:32:5b:35:ce:e7:28:
7c:c0:76:f6:85:e7:f8:f8:e8:28:ef:65:70:d3:cf:15:02:d2:
8b:f4:d0:f9:5a:d7:e9:a1:92:a4:ae:36:2b:e1:25:f9:9b:ce:
51:ea:a5:37:a4:df:72:db:08:2d:71:27:16:47:e1:95:fe:a9:
7d:af:07:d8:63:36:2e:97:fc:77:f3:42:a4:1c:6c:59:bb:2f:
60:3f:ac:06:38:7d:2c:c7:ba:22:e4:36:3e:d2:00:05:86:37:
d4:a9:0f:a5:43:34:e3:f7:39:ec:ad:a3:5c:03:9c:18:8b:56:
17:7e:6a:e2:e1:35:ab:ed:d5:35:6f:f1:6e:9a:da:b9:a2:58:
1f:52:38:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:27:31 2026 by rpki-client