Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: 8PWI3qILHhhnnuOgpGaqqOY12XMfHRb/ooruv6wxVcU=
Subject key identifier: 0B:15:E8:74:EA:D1:A8:5D:1B:4B:9A:D0:00:8E:46:CF:70:6B:5D:2D
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 01A13CA5BFDD64D3EF6E3300F0CDF384F9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 1982
Signing time: Wed 14 Oct 2026 23:00:57 +0000
Manifest this update: Wed 14 Oct 2026 23:00:57 +0000
Manifest next update: Thu 15 Oct 2026 23:00:57 +0000
Files and hashes: 1: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: EosBWRvHsdz4BYBdyphj2rN4QdLo0Y4WlwxlQBPOn1g=)
2: gM2StpLZVmvayJcUvILE4XZXuLw.roa (hash: KQMOAlvZrGCc1yTty62TEDax5SGCNvxrkbvizSS1atc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:bf:dd:64:d3:ef:6e:33:00:f0:cd:f3:84:f9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Oct 14 23:00:57 2026 GMT
Not After : Oct 15 23:00:57 2026 GMT
Subject: CN=0b15e874ead1a85d1b4b9ad0008e46cf706b5d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:11:50:8e:a9:e6:b9:94:16:11:a0:1d:bf:
e5:06:f5:c5:d8:45:05:34:b4:01:6d:b7:34:60:cb:
d6:2c:d2:00:74:ea:9f:f2:e8:2f:7b:fe:46:a5:a4:
2e:78:d0:9d:9f:f6:93:f0:96:2d:3f:0e:d2:11:cb:
0e:4f:69:d0:9b:f0:a5:2e:bd:58:fc:4d:67:81:bc:
26:16:cf:8e:8a:0a:b1:a3:12:ae:9b:a6:29:8b:c1:
bc:16:50:18:6c:ad:4d:bd:f3:3c:98:cf:ad:12:31:
9f:3f:fb:3f:34:15:27:79:1e:de:bb:75:19:a1:d9:
12:91:7c:2b:3e:84:a2:56:c0:22:44:68:7f:d6:4e:
3c:93:ed:4c:ec:3d:5e:e6:91:47:72:6e:d3:d2:a6:
fc:3b:bc:c9:57:8d:ce:40:b6:63:3f:e8:e5:84:21:
36:88:35:d4:cb:2f:c9:00:15:1d:8d:78:80:52:2c:
f1:2a:0b:38:ce:15:9b:90:26:d3:7e:3d:43:81:20:
2d:18:70:34:50:68:6e:2e:9a:19:b8:50:9e:88:90:
ff:0f:ec:9e:e0:7f:c4:20:a6:86:e7:15:70:59:01:
8b:6e:05:12:6d:73:08:20:33:be:f6:8c:c8:ee:42:
53:52:78:8f:02:61:b4:75:06:82:22:c3:69:9a:be:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:15:E8:74:EA:D1:A8:5D:1B:4B:9A:D0:00:8E:46:CF:70:6B:5D:2D
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:56:86:6c:fe:dd:36:39:11:aa:da:2a:6b:1e:7d:4d:7a:db:
55:ad:56:7e:30:d8:2d:39:c0:9e:43:9d:6f:2d:87:74:bc:58:
aa:42:6f:65:ac:eb:b4:0b:ef:65:08:99:b0:f8:ce:54:f7:78:
31:ca:85:12:1b:8d:d8:53:00:34:fd:89:0b:f2:77:4f:27:5a:
04:bf:fe:86:69:ca:66:39:66:93:21:a8:f6:ae:c7:e8:24:b8:
10:00:07:b5:6f:78:53:b7:f1:0e:8e:ca:73:22:af:3a:57:6f:
ce:f3:8c:64:89:3d:a1:c7:96:b7:66:f5:ac:91:c1:ae:d4:48:
ca:04:f5:58:4f:ad:b6:55:dd:23:ff:5a:a2:45:8f:c1:94:24:
65:4e:9a:98:ff:87:d0:75:34:04:88:33:96:f6:ea:2d:8b:54:
38:1c:f5:3d:b4:94:37:c9:f0:d8:18:98:3c:27:d3:11:de:1a:
5d:92:bb:84:7f:61:a5:87:c6:a7:ae:6b:d9:fd:52:b7:2a:b8:
d6:73:ab:8a:15:9e:fc:64:6c:ad:81:76:4e:6b:9f:6e:2a:07:
d1:7a:a3:8e:c4:29:3d:15:12:43:7c:80:e8:15:82:80:e8:b7:
56:0f:58:74:a4:3b:11:80:bf:22:87:4b:51:89:37:91:c4:6d:
dc:27:e7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:35 2026 by rpki-client