Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File: DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier: SYJLuyc8kgyczSOpBAtXVLydnI3hq1CR5VL/0GPjmXA=
Subject key identifier: 70:A7:C2:D4:F0:07:28:6B:F8:E3:CD:BE:61:EA:DC:A0:73:B9:E5:9D
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer: /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial: 01A10926408F5A35EFFB05D5515BA840A2E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number: 1A8A
Signing time: Sun 04 Oct 2026 23:01:04 +0000
Manifest this update: Sun 04 Oct 2026 23:01:04 +0000
Manifest next update: Mon 05 Oct 2026 23:01:04 +0000
Files and hashes: 1: 4qZtNptb8ER3904DdA6MFe8pZsU.roa (hash: Lxa0NTdMnJxLEjdaVFMPjQXrKW0qd4O0NLrjMIPI/ME=)
2: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: pNxzuS56qoROy85+KPzWSxUF6+quES1SLTCe+eHGhEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:26:40:8f:5a:35:ef:fb:05:d5:51:5b:a8:40:a2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Validity
Not Before: Oct 4 23:01:04 2026 GMT
Not After : Oct 5 23:01:04 2026 GMT
Subject: CN=70a7c2d4f007286bf8e3cdbe61eadca073b9e59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:df:28:df:df:b2:c1:16:09:ac:1a:39:14:
ee:5c:f5:2f:a8:62:7c:d9:54:77:1c:1e:7d:02:13:
8b:58:e7:bf:4b:05:7a:f4:56:a0:04:83:43:b7:89:
c3:dd:71:11:f5:72:ae:60:98:15:61:b8:a8:a9:5e:
8a:a0:26:a0:ae:6d:6c:26:82:40:93:29:3c:73:a6:
47:5c:25:5c:77:f0:fc:d0:31:e6:39:07:83:4f:b4:
7c:1e:50:d6:7e:fd:22:0f:63:b4:1f:10:3d:50:b9:
89:e5:53:c5:79:81:6b:69:c0:c1:fc:e1:0a:d6:4b:
6d:15:28:16:79:68:1e:eb:b3:8e:cf:02:46:64:b7:
3c:c6:f0:4f:d1:4b:d1:51:06:3a:87:bc:63:2c:8d:
f8:a2:0b:53:a7:9b:c6:0c:79:86:72:07:ba:7a:9b:
3e:f6:bc:b9:63:82:c0:02:d6:5c:55:0b:8e:3e:71:
e1:b0:eb:de:9a:a4:51:95:f0:ea:e5:a4:c6:a5:17:
22:8f:e4:93:dc:f8:57:9a:4d:e8:6a:32:35:59:ba:
fe:89:93:8c:f2:40:b1:da:55:ba:ba:25:b6:b4:e2:
8f:b8:e0:28:97:02:41:57:b8:ab:49:fa:52:69:fc:
62:e1:3e:88:23:d3:3e:ff:f2:50:37:89:80:0b:77:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A7:C2:D4:F0:07:28:6B:F8:E3:CD:BE:61:EA:DC:A0:73:B9:E5:9D
X509v3 Authority Key Identifier:
keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ce:df:78:9d:8f:29:4a:16:60:a0:0d:9f:d1:94:7f:cc:5a:
54:7e:a4:d4:c1:ff:bc:29:07:3d:bf:1f:26:a1:f6:b0:c3:04:
f7:58:a1:28:45:ec:24:c3:5a:6c:69:e2:6c:1e:68:fd:43:37:
99:44:54:9b:9b:ff:5b:e0:f0:b5:45:ab:a0:88:a9:ed:bf:15:
8b:92:0c:e9:26:8d:29:8b:b9:d1:95:0b:90:51:ea:e6:3a:59:
7f:a4:71:04:02:59:89:de:a2:b3:f7:de:56:81:42:02:25:e3:
1b:49:55:7d:1f:84:9c:0a:3d:27:dc:1b:83:4d:15:8c:61:32:
63:17:82:7a:f4:3b:4c:8a:12:4b:89:38:45:78:4a:2b:40:3c:
0f:fb:3a:48:49:5b:72:e7:78:8d:77:43:d3:ac:1d:1c:01:83:
4b:a0:3d:48:86:b9:60:1e:80:34:0e:ff:dd:b6:29:2c:3c:1e:
05:f8:b8:7b:d2:33:dd:06:43:fc:7e:b2:10:cd:e3:39:48:07:
21:87:f3:5d:5d:c3:83:cd:c5:c3:b3:6b:24:bd:0d:25:1b:1d:
c1:2f:a1:b7:3f:57:ba:aa:25:3a:f6:36:7d:19:f5:34:79:66:
57:cd:ea:71:80:7e:e2:8b:ad:f7:27:31:3e:87:89:69:84:3f:
a4:44:62:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:27:42 2026 by rpki-client