Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
File: Da7a5Z2cmvUe9UivsMlkOM73IRw.mft (raw, json)
Hash identifier: QNOEaTTIwRkp0cxWoWu5W6uzo2IlxLjHncoquMeRbBo=
Subject key identifier: 4C:77:B0:58:2C:56:9D:EA:0E:71:B3:ED:63:98:56:29:31:B9:E4:01
Authority key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
Certificate issuer: /CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Certificate serial: 01A13E5CE366E8EF772FCF803959ED9E5AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 07:00:37 +0000
Manifest this update: Thu 15 Oct 2026 07:00:37 +0000
Manifest next update: Fri 16 Oct 2026 07:00:37 +0000
Files and hashes: 1: Da7a5Z2cmvUe9UivsMlkOM73IRw.crl (hash: PYLmedqFAXc26gFz9rYya6a2tyioF3qRwiHjNfaYFVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:e3:66:e8:ef:77:2f:cf:80:39:59:ed:9e:5a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Validity
Not Before: Oct 15 07:00:37 2026 GMT
Not After : Oct 16 07:00:37 2026 GMT
Subject: CN=4c77b0582c569dea0e71b3ed6398562931b9e401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a0:59:6d:b2:7c:0b:d1:f3:6b:fa:51:54:fa:
25:ae:2f:a9:64:32:f6:1b:3a:fc:84:3c:7b:c1:76:
d1:31:0d:3e:40:5d:3c:4b:8f:bf:2f:fd:4b:af:c2:
d1:d9:9c:c4:b9:24:7c:12:0d:86:4b:2a:20:ec:48:
8a:87:ef:0c:79:6f:4c:bd:e2:17:f8:5e:d2:6a:8d:
be:7d:52:b3:d5:4a:1f:cc:c4:4b:22:6d:72:ef:3a:
43:90:f8:84:74:36:f0:e7:68:82:44:f6:b8:ef:b4:
4c:d6:32:20:cf:cc:f2:32:13:c7:8e:06:59:c7:03:
e5:14:c3:bf:81:8f:51:17:1d:09:70:41:bc:33:e9:
11:0f:62:1c:9b:04:c7:80:03:77:4a:a2:c7:e4:58:
7f:bb:cc:40:7e:02:4a:fb:72:92:70:c2:6b:d9:81:
5a:d3:58:f5:d6:3a:56:81:3e:b2:c4:e1:91:66:5e:
c2:da:0f:6d:99:1f:9c:90:9e:67:5c:3e:30:d1:09:
87:08:cf:27:f0:92:47:c0:ed:56:7a:49:7c:5c:ad:
e9:86:06:60:39:01:9e:3e:c0:14:0e:e1:87:74:dd:
a9:34:27:55:82:e6:52:b6:60:75:f4:e9:fb:bd:41:
e2:79:2a:66:9f:54:45:0a:f9:94:bf:ec:f0:c0:9a:
85:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:77:B0:58:2C:56:9D:EA:0E:71:B3:ED:63:98:56:29:31:B9:E4:01
X509v3 Authority Key Identifier:
keyid:0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:5b:38:37:b6:b6:90:36:5b:b8:81:ab:b7:92:8d:a9:5c:54:
12:5b:a4:80:85:fa:5a:0d:82:56:86:77:91:94:76:da:05:0f:
06:55:14:66:25:5c:68:2d:9c:f3:57:63:79:26:ca:f0:fb:8c:
1e:41:b6:81:b9:23:6a:41:13:01:4d:32:51:4b:68:99:0c:88:
e2:3a:4b:2a:c1:af:96:8e:31:9a:28:29:ca:1c:d7:11:37:66:
3f:73:13:70:d1:59:11:cb:5a:42:f7:36:1a:b3:15:94:a1:f1:
90:59:8d:76:f4:2c:e1:06:b3:06:1c:80:e3:d5:8d:ba:07:7c:
de:78:62:49:f2:92:89:b0:21:e0:18:17:22:e4:32:8d:fd:49:
fd:4c:3b:aa:d1:71:4c:19:16:a9:6c:9c:7d:5b:0a:ee:51:d6:
b1:11:2c:87:73:95:43:1a:0e:cb:8c:3e:20:c8:91:7d:d9:d4:
b6:af:7a:fe:f5:53:bc:fd:cc:5b:01:c1:35:3f:ff:e6:f7:42:
b8:12:b4:53:c1:81:1f:9d:98:75:02:93:d7:41:6d:e3:d8:3a:
02:5e:52:e9:33:69:d1:e5:fe:cc:97:e3:d1:d8:e0:8e:da:cc:
2d:5b:09:f9:75:98:26:8d:f8:ea:47:2d:68:fa:c7:c7:62:20:
a3:2d:47:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:41 2026 by rpki-client