Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: x4Srn/KHcxjkYTrO9OOyi6nJLwddam2CtXsu9Y+HUP8=
Subject key identifier: 09:3C:22:BB:10:4F:A3:77:48:3D:3F:31:41:0D:F6:57:A7:04:65:98
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 01A0DD2A1736F17EF761CB7E23EFFBC0C980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 1A76
Signing time: Sat 26 Sep 2026 10:01:58 +0000
Manifest this update: Sat 26 Sep 2026 10:01:58 +0000
Manifest next update: Sun 27 Sep 2026 10:01:58 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: rnjKzDb0l0yRqMagdxc+BmIX3u+YEKd1liV3EbJ5xB8=)
2: xRmmdqH1-j--sEXPtnNY3Z-R5Zo.roa (hash: 3OUa7VjiPRdUyQdSMo547+vkOocCdI86key02w1U7/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:2a:17:36:f1:7e:f7:61:cb:7e:23:ef:fb:c0:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Sep 26 10:01:58 2026 GMT
Not After : Sep 27 10:01:58 2026 GMT
Subject: CN=093c22bb104fa377483d3f31410df657a7046598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:de:c0:0e:ac:8d:f1:1a:96:5c:66:97:23:6c:
f6:00:2a:34:74:e3:b2:21:92:9f:a3:8d:c7:71:4c:
3b:6f:02:f7:fd:59:fb:6c:c0:d7:fe:70:3b:20:d6:
c5:87:70:a0:9f:db:c5:c9:2d:48:a4:f8:aa:07:62:
d6:a5:62:24:ac:e7:7f:05:bd:f3:e7:ba:b6:f7:36:
a5:42:2f:21:5a:94:57:61:40:9b:95:63:4f:4a:fb:
76:bd:8f:c5:96:d1:0a:e2:86:e8:7c:6f:67:97:3a:
00:9e:1d:90:27:ec:e6:46:28:d0:fa:da:50:07:e2:
94:b5:1b:0e:88:b8:23:a7:b4:dc:08:70:b2:ae:61:
f9:d8:e2:6d:bd:a5:f0:a7:4d:61:c8:45:e9:dd:23:
34:b3:dd:72:7e:60:01:41:8b:89:a6:a1:ae:59:a0:
ef:ef:44:f6:b1:6e:0a:e6:73:d2:73:ad:fa:7b:51:
02:93:6a:ab:7f:93:48:15:f1:c1:2e:df:99:8b:8d:
52:8b:c9:4f:4a:99:53:69:7a:c9:d5:c1:b8:35:bc:
ec:e9:e1:63:ed:50:aa:a6:cd:de:79:1e:f1:64:08:
af:a9:e0:07:90:34:5a:ec:97:73:69:98:7c:c6:ba:
71:56:5f:ff:7c:81:7d:a1:74:c6:88:83:71:fc:63:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3C:22:BB:10:4F:A3:77:48:3D:3F:31:41:0D:F6:57:A7:04:65:98
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:04:ac:1c:f3:93:cb:7e:3f:5a:ac:82:0a:96:38:5b:f8:4b:
ef:43:13:b7:1e:c7:d5:06:e4:bc:75:0d:37:29:ea:da:74:58:
1f:aa:e4:4a:76:2d:bb:e5:14:e0:a8:98:64:87:01:75:15:3b:
c1:a8:ec:b2:6b:4b:2f:9e:c0:54:11:45:c7:f8:43:e2:ef:d3:
85:24:7c:55:83:fe:87:bd:58:44:db:be:c4:14:ce:64:be:19:
0e:dc:ca:93:82:90:24:29:29:7e:35:60:3b:19:e1:82:73:f9:
34:66:26:7a:eb:09:a2:2d:4a:a8:44:51:0c:ca:14:45:e5:e5:
f6:41:45:fc:66:b6:34:33:ee:55:1c:a6:de:5e:01:45:cb:e5:
dc:5f:99:03:72:5c:e7:6e:6c:02:24:71:b5:ca:fc:60:01:90:
6d:ea:17:c1:64:39:9c:f6:e4:bc:0a:8f:9e:ef:40:fe:12:96:
37:6f:1e:79:bd:bc:26:62:63:23:9a:98:f7:d8:29:c7:1b:b8:
55:47:d2:f8:3c:7f:14:ed:0b:39:69:6b:77:16:12:1f:02:ff:
a9:4e:25:e3:d3:cb:59:1c:c4:5c:ad:b6:67:44:f0:7f:7e:10:
cb:34:3c:f9:1f:2e:c6:a6:40:94:0f:28:0f:64:8b:0c:73:dd:
7c:79:34:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:33:16 2026 by rpki-client