Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: 9qWOrUHjqvL+xz2X9va3tHw3MNXcyr2/KQ1Iy15mVH4=
Subject key identifier: 17:B2:91:21:79:0A:60:8B:BA:A5:B1:C4:76:23:9C:E8:46:4A:D9:86
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 01A1249E1BDEF7C34243227AA40ABBBE5A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 1A9A
Signing time: Sat 10 Oct 2026 07:01:43 +0000
Manifest this update: Sat 10 Oct 2026 07:01:43 +0000
Manifest next update: Sun 11 Oct 2026 07:01:43 +0000
Files and hashes: 1: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: ytA2hQF8NkPKIOxY+DiqXp6xVGa+OIYCMi89XjVhFmI=)
2: qMa40C2bwbsuAhlKHVj7zBev3Sk.roa (hash: Q1yI4h86YGsQR3DwWZlfSBoYmM0cIR/AXm0wW8+aF5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:9e:1b:de:f7:c3:42:43:22:7a:a4:0a:bb:be:5a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Oct 10 07:01:43 2026 GMT
Not After : Oct 11 07:01:43 2026 GMT
Subject: CN=17b29121790a608bbaa5b1c476239ce8464ad986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bf:46:97:0a:14:13:d8:cc:8b:e5:c3:ec:dd:
5a:13:7e:2d:55:9d:95:78:d1:4e:76:a5:24:36:9c:
5b:ed:2f:c9:76:29:2c:d1:68:5b:a4:84:ae:07:f6:
0e:58:97:0e:4d:86:a6:65:45:a6:0c:d0:e8:bc:98:
e9:73:b4:97:26:5d:f3:05:8e:96:b2:60:96:a5:0d:
5a:ef:c1:93:bf:79:a9:b4:9c:99:18:3c:fe:9a:69:
6b:b1:c5:29:85:15:6a:f0:28:fe:21:54:f4:e7:62:
02:56:da:d2:2f:42:62:9c:09:0f:c8:45:3e:3a:e9:
c5:0d:e3:0f:0f:23:5c:79:be:be:0c:fe:f3:85:41:
46:85:74:4d:a6:66:e8:94:5f:93:26:fa:a8:a3:34:
b7:6b:1f:f2:20:e7:01:34:c2:05:a1:71:0f:97:2e:
40:8e:e5:c2:d4:44:82:91:c0:8e:a2:ba:e4:1a:69:
94:cd:90:74:67:1c:1f:a2:33:c2:a3:11:ff:09:58:
a6:b0:69:14:13:36:4c:86:d5:67:9f:ca:77:44:8f:
dc:66:6f:4e:3a:a9:4c:d8:c8:ac:a1:b8:dd:27:12:
7d:cf:1f:c3:ac:f0:be:aa:25:e5:a9:e5:ca:e4:93:
7c:a8:38:bf:65:7b:fb:ec:dc:90:73:37:54:03:63:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B2:91:21:79:0A:60:8B:BA:A5:B1:C4:76:23:9C:E8:46:4A:D9:86
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6f:0f:7b:b6:98:05:f1:62:dd:2a:b8:32:42:db:d3:20:3a:
45:9a:03:af:7a:c4:ba:53:e9:fb:27:d6:3b:de:ea:fe:9a:d4:
af:f6:ab:47:18:80:b6:c4:fe:a2:a7:7a:0f:3c:9a:f2:5b:b9:
0b:ea:ca:ce:28:1b:2c:9e:54:c3:61:4d:c0:4b:55:b4:2e:bd:
58:2c:32:2a:15:9e:72:0a:cf:13:d5:e3:12:36:46:42:57:2f:
de:03:32:56:ae:08:38:ff:c0:27:57:7e:2a:80:ab:6d:3e:e9:
cb:c4:55:a6:c9:15:5e:58:cf:dd:b9:54:2f:c0:6c:7d:ed:cf:
ec:59:76:0a:48:21:ce:29:00:8a:71:26:a6:49:d9:87:2f:1d:
60:33:97:e8:9f:2b:9e:06:b4:ec:ea:c0:8c:5d:aa:48:e0:83:
64:6d:0d:c9:ad:ee:3c:4e:4c:35:8d:66:11:eb:90:02:b0:c7:
e1:03:be:67:b5:3d:b9:2e:df:39:44:b5:cc:54:7b:c6:57:ba:
a2:22:f4:c4:29:be:c2:ae:05:fa:a2:82:af:ef:ce:3f:99:63:
01:71:99:33:f7:68:4d:44:41:50:73:16:74:93:63:48:9e:1a:
d3:ba:c5:5d:1f:3c:e3:ac:fc:a5:ac:ab:e5:8f:1a:d3:af:79:
db:69:52:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:32:36 2026 by rpki-client