Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
File: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft (raw, json)
Hash identifier: U4/BwC8wHrqNA3nrNWANpuEEuYLGNk/Gjz3bvpFyF0Q=
Subject key identifier: 39:6F:03:7C:52:24:79:E1:A2:79:9E:AB:43:7D:76:C6:27:EC:90:C3
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 01A0DA9697CCA01814B59173ECEDEFC1486E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
Manifest number: 1A7B
Signing time: Fri 25 Sep 2026 22:01:37 +0000
Manifest this update: Fri 25 Sep 2026 22:01:37 +0000
Manifest next update: Sat 26 Sep 2026 22:01:37 +0000
Files and hashes: 1: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl (hash: BKSWIKT43ZdCn/YA1ShPwybnAuTX10PALIMi49c6an4=)
2: eRJh73NsCl5nLTcM8L-WtjQ1i8M.roa (hash: FurWUtoK3SJ5oNGdIN9dbo+ONOIK9GXi/NLIt8LbtMY=)
3: kEe6Bn-Wm8OU0BMeJ1sgg9otE2g.roa (hash: uUTvD8lHdMsxga0kjra2N6+gIRpOiRjAnp6etvYJekA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:97:cc:a0:18:14:b5:91:73:ec:ed:ef:c1:48:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: Sep 25 22:01:37 2026 GMT
Not After : Sep 26 22:01:37 2026 GMT
Subject: CN=396f037c522479e1a2799eab437d76c627ec90c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4f:59:fc:34:9e:64:11:db:8a:1e:5b:a4:aa:
89:dc:56:5e:90:61:1e:02:af:ce:15:69:3a:fd:bb:
c0:27:35:f0:a9:f4:08:2e:e9:48:b4:20:6b:d5:b6:
31:16:8b:e7:05:cb:30:00:f0:9d:c4:48:e8:cd:f5:
48:bc:cf:5e:5a:06:78:dc:46:e5:2b:4d:ac:3d:f0:
53:10:ae:18:c1:e3:f5:57:b3:80:4d:a9:d7:61:ec:
98:00:40:d3:9a:67:cf:f9:75:c5:23:fb:25:1e:b1:
72:49:5b:d7:70:22:46:ee:d3:8f:27:e4:6c:a0:cf:
71:6b:62:9b:cd:61:60:9d:db:76:38:2d:b1:a4:be:
0b:9f:23:53:0a:10:e2:f5:7d:b3:2b:3c:d8:f0:6c:
bb:25:ba:ad:21:6b:bf:60:79:54:c8:2c:10:4e:21:
6b:84:85:be:c6:96:02:03:60:c0:42:34:d9:97:33:
3b:ec:15:7f:96:46:2f:e8:a5:97:e5:f8:e4:10:20:
e5:3c:a7:41:24:01:ff:79:94:21:53:68:68:92:55:
5a:57:70:a3:71:32:3d:61:92:8d:27:e0:1f:58:e7:
31:08:62:4f:a9:24:df:9c:72:51:99:31:11:7f:e6:
12:69:c7:a3:2c:28:5d:19:47:34:56:2f:c9:84:e3:
06:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6F:03:7C:52:24:79:E1:A2:79:9E:AB:43:7D:76:C6:27:EC:90:C3
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b6:0e:9b:86:b0:8f:1a:49:67:10:e2:73:4f:cc:80:c2:a7:
a4:81:2b:49:13:2f:ba:70:94:b5:1d:85:58:44:a1:17:e1:6b:
c9:5f:a1:a2:92:4b:32:80:59:b7:f0:33:58:2f:ce:6f:fa:b9:
94:76:c5:0d:f0:50:34:56:11:35:7d:86:da:57:35:2c:18:ff:
36:af:8d:e3:c3:51:39:53:48:57:e4:94:5a:8a:28:15:b4:bd:
f0:a2:b1:cb:03:58:99:68:97:db:40:c0:38:86:a1:bd:3d:88:
1d:8c:02:62:f0:2e:12:c3:3b:9e:dd:3d:6b:7f:b4:62:b1:16:
b6:80:dd:58:1c:5a:11:be:a7:92:6d:42:59:e6:49:43:2e:09:
a7:0f:65:f0:74:3d:85:65:13:15:c3:c9:ed:17:e4:3e:45:6e:
78:09:71:a0:82:73:42:70:b0:b7:bf:7e:d4:59:dc:c3:23:bb:
8d:ea:2e:63:45:e2:00:b8:e5:7c:d2:ca:89:14:61:76:7d:62:
f3:f2:25:bc:1e:00:ab:a0:d7:b2:e5:7b:e4:f6:88:5d:f8:f7:
38:ef:e8:31:c0:aa:7a:4f:33:11:95:29:aa:cd:83:ae:06:a7:
b1:76:3a:3a:de:2e:4d:d7:d7:fb:b2:a0:92:74:99:e0:35:7b:
ce:8b:29:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:27:37 2026 by rpki-client