Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
File: DkOg3wWaUlGkALWh8TIboA0xINI.mft (raw, json)
Hash identifier: +1cBkSMsa/cTlSLbkGWLLlNdofeR54S0/bljKSmtSJY=
Subject key identifier: 4C:AF:5C:03:2F:AE:78:1C:06:09:D7:F9:5F:2D:82:1D:2A:C1:76:01
Authority key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
Certificate issuer: /CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Certificate serial: 01A0E2BE16226A1162353891C94C5093A6B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 12:01:43 +0000
Manifest this update: Sun 27 Sep 2026 12:01:43 +0000
Manifest next update: Mon 28 Sep 2026 12:01:43 +0000
Files and hashes: 1: 4dMXi4_OZ1hIYb5lfSEix8dXAV4.roa (hash: pso0l4AjjbTbnTQh+xQFS2oQ9IVZGMVy1LttU/eMjhU=)
2: DkOg3wWaUlGkALWh8TIboA0xINI.crl (hash: 5BMJA5NSTko8WZd4hbLHUImxQsNomqVEtglCkGVxu/I=)
3: X5rHphgjA2Ovs-Yct52WJKfW_k8.roa (hash: fS9NXooFPX4VLQ4SoiMsokXMu0rmiVlmUkYsHNO+cLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:be:16:22:6a:11:62:35:38:91:c9:4c:50:93:a6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Validity
Not Before: Sep 27 12:01:43 2026 GMT
Not After : Sep 28 12:01:43 2026 GMT
Subject: CN=4caf5c032fae781c0609d7f95f2d821d2ac17601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:c0:c4:6f:9f:f3:b0:2b:de:fc:32:7e:ff:
35:83:69:5a:23:1b:d8:85:fd:1f:21:c8:e3:69:fe:
44:dd:a4:09:fb:04:b5:43:0e:1f:cf:84:40:ed:f1:
9e:75:f7:40:43:8a:1f:8c:26:5d:a9:9c:43:ec:16:
a3:01:5e:83:93:c6:2a:a3:25:8d:0d:7c:ca:b3:61:
85:10:b0:d4:ec:1b:4f:ed:d1:13:32:1b:1d:d4:02:
90:d0:5f:0b:5b:66:75:a3:05:b6:9f:49:af:69:4a:
c2:51:ab:20:bb:07:5c:17:f8:63:1f:02:fc:fe:4e:
71:5d:ea:ca:d5:28:36:af:83:12:5a:f5:21:7f:6f:
a4:83:09:ff:04:cc:bd:56:06:98:34:c9:b6:64:e4:
2c:79:ad:ed:13:56:dd:f5:72:5e:ef:bf:3e:26:da:
b9:25:29:3b:08:09:25:0c:97:f4:a5:c0:0a:74:8c:
89:a0:da:f0:f9:aa:c8:83:b3:87:50:f8:61:4c:ec:
be:27:a7:e8:00:99:5b:06:d5:a1:10:21:36:ae:3b:
61:f3:39:a8:13:70:81:53:9e:3c:9b:38:44:a4:b6:
2b:db:d0:04:40:de:f0:52:99:23:d6:65:7c:42:ed:
34:d3:d9:5c:b1:7d:5f:71:92:8f:17:b1:bd:c0:e3:
ab:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AF:5C:03:2F:AE:78:1C:06:09:D7:F9:5F:2D:82:1D:2A:C1:76:01
X509v3 Authority Key Identifier:
keyid:0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8b:70:37:0a:51:cf:c9:31:e0:04:50:f2:1e:7c:8f:64:a1:
5e:eb:95:f0:b9:f2:c7:2d:cf:d2:eb:e2:fb:12:ff:7b:35:22:
04:7d:cc:6e:24:cc:a8:71:a6:a7:a9:6d:25:3f:13:2c:79:5e:
12:da:2a:d4:32:83:b0:db:78:31:ef:2c:64:f2:7a:e2:3c:dd:
86:ad:35:d5:d2:5a:75:78:e8:34:bc:ac:f8:e0:e3:c6:9d:b0:
a3:d2:fa:6d:a6:c7:e1:be:8a:15:bd:c6:a8:7d:fd:21:e9:a5:
94:a4:dc:d3:29:72:a6:23:3c:09:8f:e1:4e:a7:7d:9c:32:d3:
43:dc:35:b1:6a:3d:5c:51:51:9b:ea:9e:cc:31:48:af:cd:ec:
33:98:7b:a3:9d:47:17:e3:7d:9e:a5:b0:5c:1d:95:ae:3b:d8:
25:17:e9:a4:f2:10:ac:7d:b8:39:c2:b7:6c:6c:6f:17:94:62:
ab:8f:8c:10:00:e1:bf:fa:ba:6a:01:c4:78:bb:c1:6e:c7:a2:
58:4f:db:f3:7a:b3:f1:51:dc:34:c6:4c:f8:06:b8:e0:f3:04:
0f:7a:6b:88:88:1f:9b:12:20:6c:31:00:84:17:27:3e:4c:81:
4d:1d:b0:ba:aa:26:cc:3d:5d:42:d1:00:4e:8c:cb:62:0c:35:
59:07:3f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:51:30 2026 by rpki-client