Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: r+83Bif4ZgjmtKRu29DO+U4uKcVtPVOtRLwp4YQ/6z4=
Subject key identifier: 60:7D:BB:A4:93:26:1B:B7:85:3A:34:AC:37:E6:0B:DA:46:0E:1F:30
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 01A0E8F6CF6ED09392AB63B1E631AE0AF3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 1115
Signing time: Mon 28 Sep 2026 17:01:23 +0000
Manifest this update: Mon 28 Sep 2026 17:01:23 +0000
Manifest next update: Tue 29 Sep 2026 17:01:23 +0000
Files and hashes: 1: 5t5_5MqWJNollBMPqdFua97XfMM.roa (hash: KTz9ZppQRmMMx9XPLOR36od8YyLkBIE5elG5FeL6i2Y=)
2: FSHrqYhJli1tSVyjlj_58RREeXk.roa (hash: uSCHyOKTAFU7tgMnLJvTfArI/447X68lLDwgFscWtJQ=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: Of3+TU+DFb9xoLpokht5kfm9iEsfZ7dbLynUYDWP1tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:cf:6e:d0:93:92:ab:63:b1:e6:31:ae:0a:f3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Sep 28 17:01:23 2026 GMT
Not After : Sep 29 17:01:23 2026 GMT
Subject: CN=607dbba493261bb7853a34ac37e60bda460e1f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ec:26:76:ab:0c:50:61:71:92:a1:35:37:88:
82:77:b1:30:2f:d6:bd:ed:70:e7:60:a2:4b:29:2f:
72:03:66:4f:75:ac:17:d6:d8:df:a5:93:f8:bb:9a:
4e:68:a6:06:9f:39:ad:19:54:3b:e4:2d:c0:36:1d:
92:9d:d8:3b:6c:b5:29:6c:34:c4:3d:0d:e6:87:1a:
95:81:8c:22:02:e0:63:c9:0c:5a:75:b4:35:86:cb:
c2:8d:bb:ab:19:a5:3b:2c:1c:2a:6f:c8:6c:dc:40:
3a:42:bf:65:48:d7:88:67:4a:41:3d:f1:85:a6:4a:
62:e0:b5:3f:17:3e:10:a0:d2:d5:18:09:5a:ec:5c:
ad:22:02:94:5b:97:0d:30:a6:ca:1e:87:e4:5e:cb:
d6:7b:67:1b:cc:1e:fd:a2:de:fd:01:08:43:15:a0:
b6:0a:59:74:90:17:fa:4e:f7:b0:e5:6e:00:87:a9:
e3:68:3f:bd:ab:3e:ea:be:d4:dc:da:b1:87:07:37:
f6:12:e7:52:56:26:d5:7f:55:61:53:2d:57:3d:f5:
be:a9:60:84:3a:22:57:ab:91:04:94:18:8a:63:70:
d8:1a:78:ef:d1:00:3c:47:4c:71:1e:86:a2:60:83:
ae:2a:00:fb:a7:09:4b:05:0d:21:b5:8c:f7:b6:31:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7D:BB:A4:93:26:1B:B7:85:3A:34:AC:37:E6:0B:DA:46:0E:1F:30
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:06:ac:53:44:a9:84:7c:3d:31:2b:7a:13:6f:83:e3:16:b4:
1f:e2:9c:cc:3a:29:f4:23:1d:6f:2b:bd:85:34:2a:05:0f:a4:
65:6b:02:b8:62:08:db:94:8f:de:49:24:5c:bc:66:ec:bf:b7:
fa:e7:c5:56:0c:f5:62:45:2a:9f:03:da:ad:16:20:95:63:cc:
a3:75:1b:14:a5:5f:4e:90:73:38:f4:68:70:c8:e4:f2:ac:f2:
38:94:a0:9a:e5:3f:91:70:cb:8b:20:11:b9:67:e5:a5:68:d8:
06:46:b8:7c:30:49:2c:46:ac:d3:c5:48:e2:00:ed:17:ef:93:
8a:c0:ba:06:0b:93:e2:d8:aa:49:95:e1:36:a8:82:13:dc:0f:
55:46:73:6f:34:c2:a9:cf:0e:e4:15:e2:85:03:09:a9:3b:b8:
bd:a4:c7:04:e4:36:1f:b3:39:cc:bd:5d:b7:a2:dd:c4:4b:ef:
55:83:7b:d5:32:4b:ac:e0:fb:f2:83:8b:a1:97:db:96:f2:47:
61:37:48:ee:e5:97:2f:1d:c0:aa:d1:05:65:71:19:02:12:2d:
ae:b5:95:a9:d4:91:83:de:b9:12:2e:c5:9b:ca:04:ef:8c:31:
38:63:16:c0:14:14:6e:cd:8d:52:a4:46:05:e8:2c:d3:6a:c9:
d3:b6:6e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:47:20 2026 by rpki-client