Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: l+rGRpqQyfSSsrBSxaGg0umVmpwbj1ahjymnkgfGu0M=
Subject key identifier: 00:61:73:88:1C:F6:D7:14:CE:CA:DF:E7:4F:9C:25:0D:56:02:0F:47
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 01A132FDB247B7EE6FBF80C40E98D65F94E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 0DC7
Signing time: Tue 13 Oct 2026 02:00:49 +0000
Manifest this update: Tue 13 Oct 2026 02:00:49 +0000
Manifest next update: Wed 14 Oct 2026 02:00:49 +0000
Files and hashes: 1: 0ySGeIDrXtZFxjKASUMVzdc0Dlc.roa (hash: l2+MJdgyr6VqnECFLRIqzXDoWHq/3WTx2ApaEcFXd9c=)
2: 2MIYePrvuVOPunZ0cCU587P-UNo.roa (hash: 87FdzdFETynQoJd/9d3TWFG9LHhJseAqTkXpKmEANyg=)
3: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: 7DA8udzT16Q1EQmhitYD9FSe3Hs1rkmYSV2yNc7Yq5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:fd:b2:47:b7:ee:6f:bf:80:c4:0e:98:d6:5f:94:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: Oct 13 02:00:49 2026 GMT
Not After : Oct 14 02:00:49 2026 GMT
Subject: CN=006173881cf6d714cecadfe74f9c250d56020f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2f:a1:79:7b:a0:d8:cd:bd:c2:c4:cf:80:d1:
ab:0f:82:72:b1:ba:29:a7:cf:04:55:e2:4c:13:d3:
fd:77:22:28:23:6d:ad:fc:c1:60:73:d1:af:6d:6f:
83:3b:ce:08:b4:f2:01:e4:6b:80:94:d0:e1:62:74:
e4:72:48:cc:fa:f0:45:87:66:3a:f5:6c:04:0f:6a:
21:4c:97:25:b7:b1:06:d2:bf:36:8f:71:b1:c5:06:
be:25:03:8d:bd:ed:ef:3f:96:79:36:4c:eb:f1:e5:
34:b8:c9:48:53:08:02:02:a0:43:54:a0:31:c8:b9:
1a:0a:b5:7b:0a:74:6e:87:7b:13:6c:18:84:f9:18:
c6:46:da:23:d4:89:5f:c8:f6:ec:d9:5b:3c:5d:59:
7a:6f:d4:e0:b8:00:9c:57:d6:8f:b4:d0:11:38:cb:
28:cd:6f:de:de:c2:c1:9e:41:ca:99:5f:e5:0d:35:
e1:4a:9e:64:a5:41:4b:90:1f:bd:a9:2e:7b:91:df:
fc:e0:89:50:48:7e:7a:ca:f1:7a:51:b7:e3:25:de:
a4:21:a7:3a:8b:78:70:17:1c:98:e5:a4:4b:df:6c:
ba:f9:0a:a5:dd:e6:c1:48:45:2d:ed:51:3c:82:6a:
54:68:57:4e:a5:80:a3:d3:f2:b5:06:b0:09:fe:17:
47:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:61:73:88:1C:F6:D7:14:CE:CA:DF:E7:4F:9C:25:0D:56:02:0F:47
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2b:c2:66:bc:a3:00:ae:98:de:37:14:7c:6c:54:4d:c3:a3:
7c:36:88:28:45:a1:bd:c1:26:8b:5c:e5:df:2f:2e:38:a8:27:
a4:ec:33:c8:0c:19:94:85:bb:ea:7f:55:57:b1:ea:c8:88:84:
ab:39:ae:b2:7f:e2:b2:70:ed:35:2c:3b:ca:95:f1:df:12:23:
34:c7:9f:56:98:f8:fa:cc:8e:36:93:7b:3e:36:3e:47:1e:ff:
31:50:f7:15:b5:b3:97:70:1e:13:3d:8b:96:55:69:c0:96:1b:
33:82:88:74:a7:8e:1c:b5:15:a0:6d:c4:29:46:6f:98:60:16:
82:7b:53:2a:ca:ab:17:a3:55:8f:50:1a:3c:4a:ae:c3:cc:1e:
a6:16:9b:44:61:53:2b:16:9b:95:00:45:c2:8e:86:f3:9d:73:
35:df:1e:b9:af:c3:10:d8:d4:09:f1:3c:aa:49:f0:c0:20:8c:
94:71:af:5c:7b:28:af:64:b3:25:19:e2:78:18:e1:37:51:27:
b4:93:d5:98:f8:34:f9:d0:b5:cf:3f:34:b7:83:10:4d:86:f5:
c8:99:3f:c0:57:3c:2d:d7:97:9d:1b:78:e8:ca:fa:79:c5:a5:
c0:1b:9a:f9:5f:b9:3d:2e:de:d8:ab:ce:a3:70:bb:15:cc:12:
0a:c9:72:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:50:00 2026 by rpki-client