Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier: i7HrMctH/SNZKEWjb6YuEPKqQRtp4ij57+ABmWhViyQ=
Subject key identifier: 34:05:55:4F:CB:1A:3F:3E:79:78:3E:88:EA:10:FE:AB:E0:DC:DB:1D
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial: 01A0DDCE46E1858D3A4CA11BBC74EFEEE73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number: 1A78
Signing time: Sat 26 Sep 2026 13:01:18 +0000
Manifest this update: Sat 26 Sep 2026 13:01:18 +0000
Manifest next update: Sun 27 Sep 2026 13:01:18 +0000
Files and hashes: 1: DkVdvbXhpbo9CQqVcVFBg1LNoNE.roa (hash: qaF1R+er71d5hFs2KTiNhXAjh56KPYgioy+6tvssIEE=)
2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: f8zBbVrnF8JALkfCcMKwbBzP6TpmcY5/UJJJaQCV2WY=)
3: WIQ88PUyl0Wn69b9mzqB92sF45M.roa (hash: ATP8ajAQ0MqjrK6hyWC+m5lGC/lxKRtV3XstqqIRErs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:46:e1:85:8d:3a:4c:a1:1b:bc:74:ef:ee:e7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Validity
Not Before: Sep 26 13:01:18 2026 GMT
Not After : Sep 27 13:01:18 2026 GMT
Subject: CN=3405554fcb1a3f3e79783e88ea10feabe0dcdb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:46:8d:96:94:b2:65:6f:71:a7:f3:4f:92:3b:
41:a3:58:10:42:38:64:a0:b1:07:28:38:c7:9d:38:
44:b8:1d:bd:a5:47:4b:84:ea:40:c5:35:66:ff:d1:
f1:ac:bc:28:16:c5:a2:dc:4b:72:03:a8:29:c2:35:
0d:4e:f1:58:12:fb:15:d9:24:8d:f5:a4:44:eb:e2:
d1:92:8e:97:d4:70:12:4b:3a:78:4c:32:2f:dd:c2:
fd:15:80:16:7a:2c:a8:d6:0a:53:e3:bf:eb:ba:7c:
3f:4f:51:e1:e7:91:6e:ad:fc:5c:bc:26:a1:63:7d:
9b:ed:57:08:c7:44:9d:f5:fd:a1:bb:5b:e7:69:ad:
f4:49:ea:17:94:99:10:e9:28:10:49:e0:0c:4e:4b:
1a:e3:07:39:37:23:c3:f2:0a:19:3e:2d:9b:30:0d:
52:80:70:3a:c8:71:37:87:cf:7b:ad:aa:9f:f4:8b:
ef:18:93:4f:a9:8a:af:bc:9e:6d:0f:b6:00:8d:63:
55:44:c3:84:29:37:84:5e:39:3c:32:7f:b9:dc:35:
fd:1e:71:c7:78:e5:10:05:b3:da:40:6f:bd:4a:e7:
46:e9:7e:8c:c6:52:78:92:ad:f1:b2:4f:25:49:71:
2b:d7:85:08:cf:76:05:41:cc:3c:b8:2f:08:cb:bd:
a9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:05:55:4F:CB:1A:3F:3E:79:78:3E:88:EA:10:FE:AB:E0:DC:DB:1D
X509v3 Authority Key Identifier:
keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f7:05:f6:5a:a6:31:44:55:06:91:63:61:a8:0b:85:28:8b:
53:d8:72:82:a6:ba:51:8a:a3:26:3f:0b:bf:53:7b:6c:d7:b8:
1f:05:f0:fb:fa:2b:5f:8c:99:f5:d1:ae:97:1b:d3:c2:04:48:
55:9b:a4:95:4f:1b:70:b5:f3:58:0c:6b:e8:18:4c:ef:b9:64:
bf:c1:e3:e4:6d:75:c4:8f:26:e3:b8:7f:65:86:b3:f2:f7:c7:
fe:4e:fb:1c:3f:c9:47:f2:2e:ac:a6:7b:bc:b1:44:ad:3d:82:
72:e4:2c:30:e0:90:19:cd:e2:78:70:2f:ff:e7:66:75:e2:a3:
ff:81:7f:90:46:11:25:67:f1:60:fd:22:5c:f2:f7:66:5f:66:
41:7e:7f:46:6f:d3:9e:db:40:93:b2:b7:db:d8:76:f8:ad:d0:
00:c6:d0:67:40:9b:3b:a3:80:c1:8e:61:d1:66:35:0f:a6:c3:
92:9d:fd:67:3d:40:c3:21:f6:f3:ca:d9:9a:15:1b:6a:a0:12:
a5:15:68:82:b7:3b:ad:91:44:c4:b8:1c:6a:62:57:66:0d:c4:
96:5f:72:38:a9:84:8c:c1:07:01:9d:63:21:cc:44:57:0a:cd:
fc:74:bd:93:9b:4c:0f:4e:2f:ea:31:0f:f0:fc:33:5d:34:8d:
07:41:60:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:28:01 2026 by rpki-client