Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft (raw, json)
Hash identifier: lXfpqhyMnmiThOp4GCTDqM/MxaKRsseig8oynaHn120=
Subject key identifier: 20:7E:DA:0F:83:0A:1C:B8:1B:4D:1C:62:04:D1:06:76:D1:D6:61:13
Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Certificate serial: 01A129C404786BD39A2BF968034B48004EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
Manifest number: 11FF
Signing time: Sun 11 Oct 2026 07:01:14 +0000
Manifest this update: Sun 11 Oct 2026 07:01:14 +0000
Manifest next update: Mon 12 Oct 2026 07:01:14 +0000
Files and hashes: 1: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl (hash: R79AOqgK7euNfhk33f99NfuN7bKMA7LoENb9WXgiwaE=)
2: _Ma0eGZ-z0n1VYqlad5Keq9wR4A.roa (hash: 3N14sFvn0+1bgJyRiEeYpdH6Wj5+13bYO0jZXdPYIJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:c4:04:78:6b:d3:9a:2b:f9:68:03:4b:48:00:4e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Validity
Not Before: Oct 11 07:01:14 2026 GMT
Not After : Oct 12 07:01:14 2026 GMT
Subject: CN=207eda0f830a1cb81b4d1c6204d10676d1d66113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:3f:98:24:3b:bb:07:f7:de:35:62:0a:83:
e5:3a:25:81:be:ba:0e:d2:8f:39:b3:ed:2b:16:e3:
b9:6f:36:f2:07:21:c3:77:dc:b1:40:90:3b:0e:4f:
09:bf:bd:fc:5e:7c:fa:69:46:09:0b:91:d4:f0:aa:
80:a6:b0:19:50:7c:b9:66:15:44:d5:e0:69:85:de:
26:6a:7f:4e:fd:ef:97:78:0f:9f:93:dc:b6:ea:b0:
0f:e2:fc:2a:0d:86:73:01:8f:f8:c6:9d:6a:24:02:
f1:aa:f0:1f:51:a4:91:3c:22:90:72:2c:e7:53:f4:
48:18:6e:3b:2a:2f:b8:0e:04:25:98:b2:59:99:2d:
18:3c:e5:7f:d6:50:e9:fe:d5:1b:e6:1a:13:bc:0e:
ac:4b:a2:15:f5:4b:1d:85:d8:78:96:78:ac:8d:52:
e4:df:1d:d1:0b:f2:c4:e5:92:18:75:6b:54:a7:0f:
db:66:84:26:58:54:61:28:18:b3:12:ae:1b:ba:b1:
15:9f:43:53:fa:2c:45:c2:1c:c0:f8:e8:c6:8e:a7:
2b:15:14:ef:fc:10:ef:1b:72:ff:7f:b1:85:00:33:
a1:6f:c8:19:cd:56:6d:87:77:a9:d4:48:5e:25:7c:
33:8b:4d:cd:07:b6:61:0c:f4:73:7e:30:8f:4b:1f:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7E:DA:0F:83:0A:1C:B8:1B:4D:1C:62:04:D1:06:76:D1:D6:61:13
X509v3 Authority Key Identifier:
keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6b:24:9c:2a:9d:dc:3c:a9:ab:db:25:9a:32:3c:e3:ad:01:
98:38:29:43:bb:75:c1:46:15:39:bf:e4:c9:41:f5:e7:25:56:
80:de:c0:be:f0:90:6c:86:17:59:08:fa:22:65:7c:34:71:76:
44:89:21:cd:be:9a:d6:02:2d:00:a9:2c:88:9b:bf:77:c8:27:
be:8c:7e:18:13:ab:f4:35:17:cc:2e:6b:74:56:5d:ca:2a:b8:
cf:6c:ca:1c:f7:23:08:65:27:dd:2e:35:63:cb:7f:b7:7f:43:
1d:e9:b9:49:5d:77:e9:9a:87:c1:fc:aa:03:81:92:72:87:04:
ab:81:c3:59:4f:dc:32:19:20:bb:47:8b:a6:b9:93:b4:8c:a1:
d0:6b:5f:d1:b8:24:9e:cd:a4:c3:85:6c:fc:30:d4:2e:1d:55:
37:cb:13:f0:95:8d:6a:74:e1:eb:1c:99:4c:db:37:f0:3b:c6:
bf:83:36:24:b8:ae:83:a7:ee:e6:90:52:c2:6a:ac:49:11:4b:
fa:14:27:58:8a:d8:55:7b:fb:7f:29:d9:a6:65:6a:88:8a:c1:
ec:6d:8d:d9:09:dc:7d:9f:29:64:f1:22:56:2f:ed:03:6e:9c:
09:08:da:8d:3a:8e:8f:15:31:98:01:b2:18:ca:2a:92:de:11:
e4:e8:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:38:31 2026 by rpki-client