Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
File: Dv0crRIZAnVQiePKgLptfMxLm3E.mft (raw, json)
Hash identifier: KDqwJ2kbRZbLwZ6cd+lvS8V+OPb06xympubaW7kJ6tE=
Subject key identifier: 6A:B9:22:32:D5:F3:23:CB:B6:7D:6C:C3:05:04:59:E2:09:E7:76:2C
Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Certificate issuer: /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Certificate serial: 01A0CA7D6D250BA0536EABD8679480362757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
Manifest number: 1065
Signing time: Tue 22 Sep 2026 19:00:12 +0000
Manifest this update: Tue 22 Sep 2026 19:00:12 +0000
Manifest next update: Wed 23 Sep 2026 19:00:12 +0000
Files and hashes: 1: Dv0crRIZAnVQiePKgLptfMxLm3E.crl (hash: FP6CtBEcs3RsbVFgSUkvpvYTUSyccJVFmxq3S1TScBI=)
2: IPwYbvOTgoroOnniZoWHqRWH1iM.asa (hash: rXi2zhCnM8yGSXi4cShVP8m8rzQdqSA1LoHID9h8Pxo=)
3: Ync302nWoIDxqRaEpHli5zPb-l0.roa (hash: CuUUdJvVMWZ1G3401/kid+n0FU2EaOY59WBjrBRwy1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:6d:25:0b:a0:53:6e:ab:d8:67:94:80:36:27:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Validity
Not Before: Sep 22 19:00:12 2026 GMT
Not After : Sep 23 19:00:12 2026 GMT
Subject: CN=6ab92232d5f323cbb67d6cc3050459e209e7762c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:db:87:6e:1a:40:6d:9b:f7:3d:2c:17:54:97:
b4:5d:6d:0d:9b:06:8e:ea:cc:80:de:01:65:f6:54:
fd:4c:33:b2:ff:fb:03:57:fb:a1:cf:dd:24:27:a8:
e0:a6:57:2b:d7:bb:98:02:aa:be:79:c6:db:bf:b7:
09:a1:57:2c:2b:80:d9:fb:39:70:66:8c:9d:d4:b3:
70:2b:87:b8:b6:24:f5:2d:44:45:5e:49:88:68:e0:
45:ce:41:78:e9:7f:71:1b:00:03:c0:b6:84:d0:e2:
11:7b:85:8e:fb:43:e2:25:39:de:14:52:56:2a:37:
dd:9f:d0:82:7a:34:ee:39:77:f1:ef:49:f1:32:1d:
34:32:74:f2:60:c3:ce:66:61:34:5f:64:0f:b5:f4:
3e:ca:08:c6:e5:49:d3:01:cd:9f:a7:d3:fd:8b:28:
22:52:cd:d0:4a:13:eb:0c:96:28:d8:f8:51:41:20:
9d:32:28:b2:00:de:80:4f:0d:a7:ae:7a:3f:27:4f:
f4:69:3c:10:75:35:41:43:d9:30:a5:ca:3c:88:c8:
da:e7:92:34:ae:d5:72:c4:2c:08:f7:16:5c:6c:89:
d0:fa:6f:71:e0:d6:17:fb:dd:00:50:50:90:be:ec:
8d:f9:03:aa:44:2b:89:dc:82:0a:65:a0:ca:fd:70:
4b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B9:22:32:D5:F3:23:CB:B6:7D:6C:C3:05:04:59:E2:09:E7:76:2C
X509v3 Authority Key Identifier:
keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5b:1a:eb:54:6f:08:0c:b8:b1:24:8e:3e:58:33:9e:6a:23:
b2:e3:6c:6a:e4:b8:5d:5f:43:94:5d:36:32:89:12:ae:88:31:
0a:71:66:96:66:b2:47:a3:5a:09:2b:ae:87:af:9d:89:d7:88:
ac:42:b8:a7:a3:2d:1b:a4:af:12:fb:a4:50:5c:74:3a:8b:65:
bc:9e:94:0b:dd:05:0a:5f:aa:a6:a5:29:cb:dc:ba:3b:46:a0:
b6:f5:65:1c:8d:ba:86:01:b5:ff:e9:24:dc:df:6f:03:c8:01:
a6:95:7b:14:a3:56:ed:92:e1:9c:12:19:2c:a0:37:4a:d1:82:
e2:84:5c:e6:ba:e8:fa:55:c0:50:49:1c:4a:87:0e:35:9f:24:
4d:31:3f:85:14:89:8e:48:d3:98:ec:1a:6f:15:52:de:18:32:
3f:9a:59:3a:e0:db:be:4b:88:a4:0b:16:76:65:a6:ef:88:f4:
17:4d:50:ba:fb:d9:c6:84:dd:c2:12:9f:24:81:63:17:ce:08:
fe:05:13:f8:bc:f8:70:4f:b3:b7:9f:24:0d:06:94:eb:37:a0:
4f:ee:70:51:7b:1e:7a:90:60:e8:8e:6f:e2:ca:d8:1f:8d:35:
19:99:7d:76:07:51:69:98:b3:15:0d:8a:44:9a:b6:79:4d:7c:
0e:23:22:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:18:19 2026 by rpki-client