Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
File: V4DOZAV5R263qnPBnLdOvt_daCs.mft (raw, json)
Hash identifier: LXNePqIf+MICYbsxSLfWwdiShEh1zRLBLyH9aRTBse4=
Subject key identifier: 76:5D:EB:94:AC:B5:4A:A1:E3:83:0A:F5:69:2D:BF:B3:CC:35:E2:83
Authority key identifier: 57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B
Certificate issuer: /CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
Certificate serial: 01A0DC4DFD942EAA35096F715B56537B2D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
Manifest number: 11A5
Signing time: Sat 26 Sep 2026 06:01:33 +0000
Manifest this update: Sat 26 Sep 2026 06:01:33 +0000
Manifest next update: Sun 27 Sep 2026 06:01:33 +0000
Files and hashes: 1: RDCVzu3arsvwfYZ10d3OBxjdU-Q.roa (hash: BRLaihFLCVYFLpw45+cqT3ozkSzNaiRjjdbnkvsoEfo=)
2: V4DOZAV5R263qnPBnLdOvt_daCs.crl (hash: o9lCWmIYS6X47yWCTr5IKU4OcA7uXhA/13goNyk06r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:fd:94:2e:aa:35:09:6f:71:5b:56:53:7b:2d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
Validity
Not Before: Sep 26 06:01:33 2026 GMT
Not After : Sep 27 06:01:33 2026 GMT
Subject: CN=765deb94acb54aa1e3830af5692dbfb3cc35e283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:89:63:87:00:ad:d8:5b:e8:b8:24:37:9c:
4b:13:90:cb:45:dc:e2:ca:5e:59:b3:05:eb:bf:26:
9c:f1:b7:06:b4:42:c0:ec:98:a0:ae:e1:e1:15:d4:
ab:dc:f9:5f:f1:d9:d9:04:fa:c4:66:6d:e2:ba:72:
da:d6:53:81:ac:c9:43:3b:b1:fd:df:80:fc:fb:c2:
f9:54:8b:88:1b:a1:54:f2:05:55:10:cf:70:7d:e1:
a4:c5:a5:81:05:d9:11:b5:57:22:e0:8e:7a:c1:9b:
26:ea:73:1b:04:7e:af:c5:3e:e1:16:f1:f6:90:c5:
c1:84:a6:83:cf:0f:91:8b:9a:35:aa:9f:ce:09:1d:
74:46:19:f4:e6:58:36:dc:9e:d3:ed:b6:77:b9:02:
5f:4b:c6:c6:4c:24:37:19:ed:0e:51:a0:6b:2c:f5:
46:33:44:c0:a8:22:6b:5a:2f:18:df:da:3f:9b:ef:
74:23:97:4c:dd:77:96:99:ef:a3:18:c9:db:ea:23:
dc:dc:f3:90:d7:26:22:22:c7:6b:c5:2e:46:6d:8f:
fa:f0:2e:9f:30:81:b0:3f:f6:ea:83:97:22:90:c7:
eb:46:b5:d5:46:5f:21:0d:f8:f7:90:8e:47:dd:58:
3c:68:b1:72:cf:0b:68:64:6b:db:ce:55:af:40:c3:
76:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5D:EB:94:AC:B5:4A:A1:E3:83:0A:F5:69:2D:BF:B3:CC:35:E2:83
X509v3 Authority Key Identifier:
keyid:57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:20:de:7a:d3:d2:60:a6:a8:de:6a:17:ad:37:5c:88:1c:9f:
38:a1:68:e6:f1:90:45:93:cb:20:a4:65:4e:56:50:07:e4:1e:
5b:df:c1:e9:92:e8:c9:3d:64:48:e0:4d:d7:7b:68:82:a5:e1:
d9:18:22:38:ab:da:6f:b4:5a:d4:d8:89:47:7c:37:91:c4:14:
1e:86:7c:c6:3d:b7:18:9f:4d:c9:ab:52:4e:ba:68:ac:0b:6d:
4f:bb:de:8d:b1:a6:f5:0f:92:97:bf:5e:75:58:54:b9:9f:d8:
c8:f1:cf:25:94:03:41:6c:a8:9c:9b:ec:3e:80:db:8e:8b:69:
65:25:d2:87:2e:4e:e4:7b:ed:87:18:3f:bb:7b:d2:cd:a9:2b:
c9:22:7c:53:45:3e:71:f1:61:7b:2e:73:2a:89:d0:eb:53:9b:
08:08:ab:06:33:c7:a3:0d:6e:df:48:c9:48:fe:e9:2a:85:d4:
76:1f:8d:c1:eb:77:62:36:8e:a7:79:f1:07:e3:99:14:01:41:
c6:6a:26:ac:bb:e7:d3:87:ec:e0:f3:e1:50:fa:ff:f4:c7:85:
d6:b2:36:28:9f:58:cd:e6:9b:53:35:c4:f3:a2:16:08:27:9e:
6e:49:16:43:39:49:8d:9b:a6:74:47:be:97:cb:a9:e8:7f:43:
ba:9e:66:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:46:57 2026 by rpki-client