Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json)
Hash identifier: QFFhQlVe0XLFzIezzB5pIcVDcVV+2sXerB4PhmvYYtc=
Subject key identifier: BD:BB:D6:29:80:9D:05:BF:49:2A:D4:0A:DD:C7:86:14:B6:BD:1B:7C
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial: 01A0CE9185E6C21B0470D0BCFA2F88AB213B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 14:00:38 +0000
Manifest this update: Wed 23 Sep 2026 14:00:38 +0000
Manifest next update: Thu 24 Sep 2026 14:00:38 +0000
Files and hashes: 1: _Pwzr4JbDzClR-Oc7yMcLt0gzyw.roa (hash: fAUaNNrGBFLsb8ziuClrT7k1PRw95F5PlNscHyG0c24=)
2: bFNRQE3pxcA4g-Rg8277J0Pfyvg.asa (hash: SZ5vK0kMUed0BXVDFve+JxQjn9uHdMp5dF2f6Za79JU=)
3: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: sDHU+hgm/VYJWw7a8tRXer8pj0Lx+FpPKqq9dLuC5JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:85:e6:c2:1b:04:70:d0:bc:fa:2f:88:ab:21:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
Validity
Not Before: Sep 23 14:00:38 2026 GMT
Not After : Sep 24 14:00:38 2026 GMT
Subject: CN=bdbbd629809d05bf492ad40addc78614b6bd1b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a0:0a:90:9c:4e:96:ff:1e:59:49:5f:7a:32:
db:c0:3d:dd:eb:30:55:8e:cd:a1:5a:3b:d2:c0:7e:
c1:bc:90:f6:1c:e9:54:2e:f2:dd:53:f0:c1:56:53:
63:32:b1:4f:58:d4:3f:77:85:e6:cb:be:02:d8:cc:
5f:19:37:93:40:88:aa:93:82:78:8d:ca:76:0c:58:
5c:91:ac:e3:a4:7e:1b:e3:53:4e:55:d9:50:91:47:
c1:f7:2e:23:dc:5c:a4:ef:eb:1f:7f:63:04:37:f0:
18:73:c6:b5:3f:b7:12:9e:f6:e5:dd:9b:99:9d:8e:
86:fc:a9:ce:86:fa:7c:29:e5:56:e3:e8:b9:58:3d:
7e:e4:94:82:4a:0c:db:ea:64:84:cc:ef:99:23:15:
3c:14:1d:b4:0a:cf:e3:56:76:65:5b:10:63:ca:4b:
8a:44:3a:e4:2e:18:fa:eb:93:22:84:f5:a6:9a:7d:
e9:e6:9e:9b:00:3a:bc:66:b4:f6:13:7e:d6:58:ee:
3c:f7:1f:7b:6f:e6:7e:c0:25:f2:5a:ad:28:aa:90:
1f:4f:27:55:59:23:92:d7:d3:27:f8:14:3c:99:20:
df:0a:4c:93:9e:b9:f3:d0:d3:b4:8e:f7:bd:23:99:
ff:8e:63:a1:50:11:9f:02:c7:0c:8b:d4:69:5d:f0:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BB:D6:29:80:9D:05:BF:49:2A:D4:0A:DD:C7:86:14:B6:BD:1B:7C
X509v3 Authority Key Identifier:
keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9e:9f:23:a2:70:f4:c8:2b:44:1b:4e:af:85:f3:de:46:f8:
1c:71:58:2a:62:f2:55:6c:3f:5b:b4:e2:c3:d8:f9:23:ce:f0:
1d:37:36:f5:51:e4:08:2f:4f:78:4b:61:bc:d7:57:30:76:dc:
f5:8f:4d:63:4c:92:e4:59:76:fc:b1:1b:04:4f:7f:d3:95:b1:
6a:e6:3c:2b:8f:1f:eb:50:50:07:3d:19:0e:8e:e1:df:96:3a:
ca:19:b3:30:64:ee:88:86:6b:28:71:d3:57:61:61:f9:a3:2a:
17:03:58:93:f6:9d:86:7e:0b:46:8f:e8:99:36:98:6d:af:67:
93:e8:90:a1:42:5e:7c:3f:79:5e:df:d5:21:6f:8e:08:aa:16:
ad:a3:2b:10:0f:c4:3c:7c:0a:cc:47:dc:bc:c0:b0:24:01:78:
cd:05:29:33:b0:64:64:44:83:f0:a0:77:88:70:21:61:5a:4c:
21:46:d4:0b:7a:01:ba:3e:37:b9:db:d0:f8:a1:cc:55:2c:77:
2b:88:67:27:ec:a1:6e:84:89:b2:3c:50:df:0a:16:f2:a5:9d:
9a:6d:73:38:fb:40:4c:8f:21:67:ee:6c:d6:a1:16:fc:f4:31:
89:05:17:9f:f7:2b:3a:ed:58:e3:ed:4f:19:c0:bd:b2:17:3c:
94:32:17:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:26:39 2026 by rpki-client