Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: O6p4OSJs7n4Di9uQrcxznpP1ARiC1DhO6dsSMPCAzwo=
Subject key identifier: 64:D6:A4:D9:86:6E:D4:CE:A6:D1:5F:31:B9:DA:90:18:1F:CD:D6:F5
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 01A0CEC8A703A680BD819CB32B1105EE4842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 1502
Signing time: Wed 23 Sep 2026 15:00:51 +0000
Manifest this update: Wed 23 Sep 2026 15:00:51 +0000
Manifest next update: Thu 24 Sep 2026 15:00:51 +0000
Files and hashes: 1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: axgd1Salu2vIHzRyQS2UApJH27Hdoq0ifNDvbR7RIQE=)
2: KRcQChyIkdk17z-o88DTXwkNu_Y.roa (hash: k4ZBkPTraQNZ31kK5NnaOy56WVAVKO/c8Q/xt3FDIoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:a7:03:a6:80:bd:81:9c:b3:2b:11:05:ee:48:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Sep 23 15:00:51 2026 GMT
Not After : Sep 24 15:00:51 2026 GMT
Subject: CN=64d6a4d9866ed4cea6d15f31b9da90181fcdd6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:58:b3:7d:b7:00:03:38:ae:42:4e:42:03:a5:
77:76:c7:ba:8f:fe:ca:9c:9f:d2:96:57:43:5d:a3:
7e:df:94:04:e0:92:12:bc:ab:1e:cd:d6:f4:c4:06:
ba:bb:bb:96:a6:b2:ac:73:38:c2:6f:1d:81:2c:5e:
2c:2d:87:69:22:74:94:25:f7:41:ea:53:b7:21:4f:
f8:35:ae:13:d7:5f:72:01:d4:3b:95:dd:d2:4d:1d:
2f:da:b1:23:93:81:d6:80:13:0b:eb:03:9b:f6:18:
45:71:84:6b:41:4d:41:cb:d1:2a:fa:ee:ed:3f:c8:
71:a0:e1:82:3c:29:6d:c6:9d:fd:80:96:7d:c3:9f:
2a:40:71:85:b2:cc:50:fe:70:29:75:9d:2d:9a:5d:
1e:ec:39:15:34:bf:50:4b:cd:95:5a:1e:4b:2a:88:
ef:3d:f4:1b:70:31:b3:b2:95:1a:90:9d:ab:03:20:
0c:89:6a:f4:da:65:e1:19:b5:26:57:ee:2a:b6:0d:
25:f9:a7:1b:d7:a3:21:70:5a:8d:c1:e7:eb:37:72:
36:ba:0d:26:1b:9f:0a:77:3a:0e:c4:11:37:5c:75:
c4:57:19:44:a3:1e:d5:09:19:d0:91:d4:00:3b:e1:
53:ad:8a:7a:ec:11:6e:2a:e3:05:1f:72:49:96:8e:
cf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D6:A4:D9:86:6E:D4:CE:A6:D1:5F:31:B9:DA:90:18:1F:CD:D6:F5
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bf:38:54:2c:b6:fd:9c:49:cc:d4:e3:bc:1d:92:16:e6:0a:
db:59:a8:2a:a5:9a:b3:b9:7e:4d:c9:e1:e4:87:e2:6d:12:64:
cc:ef:41:ce:89:fd:b3:42:4a:d3:48:0a:f6:9b:cc:e5:a0:7d:
4d:08:22:e4:a8:5b:84:43:a5:50:6e:f9:1f:c6:30:2c:b8:cd:
72:97:e8:49:aa:6e:ce:03:cb:7c:b3:5a:87:42:d0:7d:e2:d7:
5a:34:cc:f6:cb:c8:58:74:4e:5b:12:c1:4d:4d:a8:15:7e:1a:
f6:3c:72:bb:89:d3:13:47:d2:d8:3e:53:01:23:93:7d:04:fa:
ed:45:8d:56:95:49:4d:72:fe:ef:cd:fb:0b:d8:78:34:f3:ff:
f7:32:7b:93:65:c4:b1:cc:92:03:d9:2a:6d:b7:ba:78:cc:73:
92:1a:82:c1:ec:c0:70:93:8c:58:0e:0c:11:6e:a5:f8:7e:f1:
19:20:68:29:ad:81:40:bb:5b:ca:cc:70:e8:ee:03:5f:bf:a5:
2e:7f:55:23:c6:e3:59:96:c9:4c:cf:b7:7a:8f:d0:46:62:ae:
42:63:66:4a:52:a8:b3:e5:8a:3a:02:6e:13:11:6b:2c:3f:f8:
18:b9:57:ce:5e:44:34:79:de:c7:25:39:87:02:d3:3b:f7:03:
60:6f:d3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:52:28 2026 by rpki-client