Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
File: DHiHWC2D0_CHaCr4eAoySjU854I.mft (raw, json)
Hash identifier: +p5bz2mnjm8MjUGamRV9UJczIJxlLsRCCRNKK582uwM=
Subject key identifier: 91:49:5A:76:3B:61:DB:86:21:8D:3A:59:03:A0:AA:C6:F9:D6:C3:0F
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial: 01A0CD7EA14837B05C4EFDC8A27280E42F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
Manifest number: 0652
Signing time: Wed 23 Sep 2026 09:00:23 +0000
Manifest this update: Wed 23 Sep 2026 09:00:23 +0000
Manifest next update: Thu 24 Sep 2026 09:00:23 +0000
Files and hashes: 1: DHiHWC2D0_CHaCr4eAoySjU854I.crl (hash: LQTQr86lSOISfYrGzvi7UPhOJIamnwyUWMhOGpVa75A=)
2: YWNDZTTIZoOnHoDXi9E6DGlDlqY.roa (hash: aIUQvaxY70pNpKSk5tmYluexw6bkZHt2gtc/Ueg8vRM=)
3: e1MeXi5jGEx2ghjXy4K7UMFk3kU.roa (hash: oPguTsrx3a7ULwz315fIeupuRdabV/wQF9vZA3Lwhi8=)
4: v_sjZEWKqFNaPolplPEIVetQcjo.roa (hash: 97bQo1K+GuO88OfR1uv4isecfgOKEhMoas5WXx3EMiE=)
5: wF4dYnSli8MvKSkaalmJxK3BUuE.roa (hash: bRgCLzwSPr+zj8E46tEdf2riioRemK4V+6Zr2lWh/tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:a1:48:37:b0:5c:4e:fd:c8:a2:72:80:e4:2f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
Validity
Not Before: Sep 23 09:00:23 2026 GMT
Not After : Sep 24 09:00:23 2026 GMT
Subject: CN=91495a763b61db86218d3a5903a0aac6f9d6c30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:71:1f:4e:0e:7d:65:74:6f:75:8a:b7:4e:
2c:ab:ac:c6:c3:2f:86:9f:be:66:10:90:0b:67:38:
d1:24:98:be:08:12:7d:44:df:83:a3:06:59:ed:20:
84:b5:50:cf:cc:49:43:9f:0b:20:e0:43:67:32:49:
a7:4a:29:1d:46:e6:8d:db:fb:35:68:cc:07:4d:02:
34:64:d9:f1:af:48:c2:53:fd:2b:85:49:63:8d:00:
7d:db:b6:02:cc:bb:52:c6:71:4e:bb:8a:39:bd:70:
43:42:dc:7b:ec:20:f1:ad:0a:47:c4:19:4f:a3:26:
44:93:cf:08:f1:f2:7d:53:90:05:60:f8:ab:f8:1d:
12:5d:95:3b:84:a5:53:cb:c5:e3:74:32:22:e2:91:
23:32:72:88:be:49:04:b7:cf:b8:3e:0c:d2:4a:b3:
82:17:28:38:15:e3:2d:6d:d8:62:3a:18:cb:e3:fe:
5f:ab:24:c4:16:d4:5d:f5:63:3e:56:35:f5:c1:a7:
aa:9a:bf:db:3f:64:95:98:92:9d:3f:73:e2:bf:6c:
17:72:e2:38:9e:a6:d4:69:bb:80:cd:0b:d6:04:23:
c3:e9:8f:a4:73:bc:68:1d:11:ef:0d:b9:0b:7a:62:
63:1d:3f:8b:18:bc:60:68:6e:6d:48:fc:57:df:e2:
1c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:49:5A:76:3B:61:DB:86:21:8D:3A:59:03:A0:AA:C6:F9:D6:C3:0F
X509v3 Authority Key Identifier:
keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e5:e3:da:55:1f:dd:fe:64:16:3e:d7:05:71:e0:13:bf:f6:
bd:75:ad:88:5c:4c:19:2c:a5:e1:50:88:7e:e2:9d:e5:1a:03:
0a:22:89:ad:43:83:5b:2f:bc:d7:5c:e4:f4:2f:5f:52:3a:ef:
4d:f2:f0:35:99:bf:6e:9c:b1:2a:ec:bf:1a:c4:d8:50:71:3b:
6c:0e:60:51:23:e3:07:8f:2d:c3:68:e5:a7:42:fe:ec:be:ce:
70:e2:ef:4b:6a:39:02:e9:95:fc:9b:b6:e3:1b:6e:52:12:10:
2f:30:5b:fc:fc:c4:ef:d3:c2:fa:e9:68:2e:42:00:f3:8f:66:
2b:6a:3e:2a:26:c1:c7:7d:4b:25:65:1a:62:0a:8d:b7:4e:87:
65:2f:0e:fb:ed:b2:40:4b:10:d9:90:d0:b2:aa:28:a5:f6:d8:
4f:3c:db:4c:c9:2d:0c:01:f8:d9:b3:92:fd:c2:f8:7e:4d:4b:
6e:a5:53:7b:92:4c:42:6e:95:b6:20:4d:b6:de:8b:a2:a8:df:
11:b5:5c:41:c8:de:1d:c9:fc:59:b4:12:87:87:b9:b7:1f:1c:
86:04:42:17:7c:e7:56:28:31:f4:cc:55:40:89:59:7d:4c:81:
82:fd:27:e1:2e:72:23:bd:ad:6c:e3:42:1b:4d:08:6a:22:b8:
70:6c:19:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:25:04 2026 by rpki-client