Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: 3W5ouFfPcQwR9uD35VYrTE54NJrBFTOLvmW5gskg8NA=
Subject key identifier: 75:E0:93:FA:B6:19:74:F6:75:26:7F:FC:32:76:0D:4B:D5:6D:6F:D1
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 01A0CD47B46C000B468D6C7BCF840F31D16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 08:00:23 +0000
Manifest this update: Wed 23 Sep 2026 08:00:23 +0000
Manifest next update: Thu 24 Sep 2026 08:00:23 +0000
Files and hashes: 1: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: w5Bnwuuex0kfFWOovfNY06YG63/7h4XE7OxNuIhsHps=)
2: vWKPs1EksdLNehXFmCXDKSULnXk.asa (hash: yNn9JtBbsWodt41KzrmjveQKUch9zXpyA0sczkLauf4=)
3: yV3n7Of-XfxujJs_oZpOk9T5zxc.roa (hash: RWU+lLoWMG+Uf+PGBYW1EPxQGP3cMIviVCgLyu7si9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:b4:6c:00:0b:46:8d:6c:7b:cf:84:0f:31:d1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Sep 23 08:00:23 2026 GMT
Not After : Sep 24 08:00:23 2026 GMT
Subject: CN=75e093fab61974f675267ffc32760d4bd56d6fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:37:97:61:ca:89:53:b0:92:eb:87:bc:1a:1a:
74:3e:ea:78:67:8d:1d:41:53:84:b5:ca:3e:5f:5d:
0a:c1:0e:ec:2a:44:43:bf:1d:66:d5:91:ae:23:86:
90:5a:25:8e:09:e1:f6:e3:15:d3:57:6b:7f:c1:4d:
21:b7:d0:6b:d9:bb:0b:e1:4e:f0:59:8a:90:e9:59:
47:71:c6:18:74:b2:1b:24:7a:b7:55:5f:4b:d7:ec:
91:e5:af:b3:ce:32:0e:1e:58:b3:e3:09:0b:2a:8b:
85:ad:58:27:81:e7:ce:be:e8:10:bc:a1:80:d8:9a:
36:c3:ca:33:09:86:35:84:6d:b3:38:84:91:6f:16:
3c:29:d7:c5:07:6e:e6:f4:98:82:fc:ce:91:20:9e:
bd:05:c3:62:30:56:2b:69:85:04:17:c6:62:f7:7f:
51:1d:6e:81:35:62:f9:3e:9f:36:a5:7f:29:76:e3:
c0:a9:0b:85:bd:70:6e:07:05:06:1f:68:cc:94:a6:
14:e5:8e:03:4f:9d:20:d7:c1:46:5c:14:a3:51:2f:
99:a7:80:f1:25:57:10:10:ca:31:f1:29:3f:84:cd:
db:12:93:8f:82:c2:55:4e:dd:3f:c0:b1:82:63:4d:
47:2a:dd:6e:2f:55:f6:bd:51:6f:d7:6f:40:97:56:
5c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E0:93:FA:B6:19:74:F6:75:26:7F:FC:32:76:0D:4B:D5:6D:6F:D1
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:98:63:f6:c8:69:ad:97:4b:97:86:4f:5e:27:69:a8:1d:57:
89:fe:2b:8c:71:cd:1a:f0:92:bd:8b:72:a5:d0:b9:09:e2:57:
60:e0:a8:83:55:46:0d:79:d4:13:51:dc:2f:b4:1c:d6:ef:c8:
91:e0:9c:0a:39:ff:1c:37:bb:ea:b6:2d:b9:d3:81:96:cc:bb:
60:83:17:90:ea:b4:3f:4d:a5:59:1b:77:d9:41:e3:49:99:68:
a0:a4:f1:c8:d3:f8:12:fb:24:9f:13:1e:de:fe:d6:1f:47:e5:
29:2d:67:4f:2b:a5:4e:4e:31:3f:c2:e9:13:49:5c:c8:4a:1d:
2f:76:73:7e:ce:0e:33:54:e7:05:e7:ac:5f:7e:1c:06:4d:0b:
78:78:58:ba:68:a4:2b:fe:b5:9c:53:21:b6:06:86:75:5a:80:
5b:d3:7b:07:f2:7b:de:47:04:dc:c7:bf:4f:42:d7:fd:72:f1:
db:b0:f9:ae:20:5c:c2:87:2d:1c:58:19:77:eb:5c:91:3d:b1:
ad:87:fb:f1:45:7d:9e:e5:b8:5c:1e:f8:3d:e4:2a:58:b1:42:
e8:f7:46:69:1e:99:ae:62:e5:5b:3f:f8:a0:45:8c:69:20:57:
bd:ba:88:2c:64:d2:a3:cf:61:dd:42:6a:b8:d9:18:9a:da:c0:
03:33:a6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:58:39 2026 by rpki-client