Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json)
Hash identifier: 3fXjY7AgXP1yXRCWEaWUxY8kaUzrGqEIu57cCm1uPWU=
Subject key identifier: FF:BB:DE:61:C8:C8:D8:EB:56:9C:D0:D2:05:85:0F:95:9E:55:E1:A7
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial: 01A0E40784503400359325A5192D01F80A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
Manifest number: 0ED7
Signing time: Sun 27 Sep 2026 18:01:32 +0000
Manifest this update: Sun 27 Sep 2026 18:01:32 +0000
Manifest next update: Mon 28 Sep 2026 18:01:32 +0000
Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: kgOCNrltIl7kSZLgPWGSyQkU6ArqYVXbQYnPNdkYz7k=)
2: rmlQHSPR8QbJ4-lSxSii48UeNZs.roa (hash: xz18D6VTlXYgx+ypy0VFWQBhdsBWNVKOCFQd2upOGqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:07:84:50:34:00:35:93:25:a5:19:2d:01:f8:0a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
Validity
Not Before: Sep 27 18:01:32 2026 GMT
Not After : Sep 28 18:01:32 2026 GMT
Subject: CN=ffbbde61c8c8d8eb569cd0d205850f959e55e1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:27:c3:33:2b:6c:69:a0:28:d6:66:65:7e:
f6:f0:d5:9f:d0:30:36:5c:dd:15:56:a0:db:8c:b2:
2e:e0:dc:8e:2d:2c:90:df:b2:0e:6c:4c:fb:1c:42:
cb:04:ad:c6:50:71:05:b5:6e:84:b7:77:43:08:a6:
1e:5e:5d:20:22:8f:1a:18:37:4c:62:cc:7d:7b:b9:
74:62:51:a7:83:75:44:69:0c:82:a4:a5:e7:1c:06:
9d:e7:ac:2c:47:fb:95:d2:58:dc:b3:a2:bd:0e:26:
f8:72:83:fc:eb:d4:3d:f3:65:d8:51:e0:f4:af:3d:
a3:f5:a4:08:dd:8e:fb:7b:93:cc:e4:29:ad:ed:22:
cf:a4:6c:a5:c6:99:b1:c2:c4:23:51:3a:8d:86:bd:
fb:da:3d:8a:5a:71:a7:a9:0a:3a:7d:25:56:80:b4:
ea:15:e6:9f:ac:c1:c1:32:f1:b5:19:b1:91:3b:8c:
d4:1b:52:00:00:3a:fa:45:e9:01:86:50:ed:0e:dc:
b6:55:ff:1b:1e:5a:0c:5b:b1:f1:2f:50:c7:8a:77:
a1:53:3d:5d:95:54:b7:6e:1c:c8:77:88:fe:79:06:
50:a7:fb:51:a5:a6:5c:48:3a:e5:ca:5a:5e:34:e6:
cf:c8:db:e2:86:ba:fc:1b:ec:b1:81:e8:51:42:6a:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BB:DE:61:C8:C8:D8:EB:56:9C:D0:D2:05:85:0F:95:9E:55:E1:A7
X509v3 Authority Key Identifier:
keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:51:c9:39:8c:13:90:6a:0f:7e:e1:f0:c7:4d:5e:68:9e:a1:
d7:d3:85:19:40:72:a6:77:5d:fa:66:2c:47:1f:01:2e:44:ca:
51:a5:f8:88:33:9f:3c:49:8b:23:48:0f:00:40:7f:ec:a6:0e:
df:a3:d3:8b:7a:65:fb:a9:a8:cf:55:b8:9b:48:dc:8b:e5:e3:
10:28:13:2c:aa:73:9b:75:f9:9d:38:b2:a4:d1:c9:5d:96:01:
75:9b:ed:10:01:14:b2:4a:53:b6:d9:52:05:90:37:8c:39:d7:
03:40:e4:84:a8:e6:40:b9:db:d6:c3:e8:c7:17:78:57:ad:0b:
00:0d:09:2c:0e:6c:ac:fb:b7:3e:fc:44:a7:d1:a4:e2:95:75:
b5:20:4f:c9:69:12:27:64:1a:d9:8f:ef:dc:85:19:a5:54:6d:
61:7f:e2:bf:92:72:8d:ad:31:9d:4e:1e:b7:f4:d2:79:96:9c:
e4:a8:a8:99:eb:03:93:c8:eb:84:8e:89:f9:d7:49:38:a0:d5:
33:82:d5:9a:a5:b9:85:34:64:41:a7:6e:a6:bf:c5:be:d4:b8:
c2:b7:6f:a2:58:58:cf:5e:45:f3:57:72:93:4b:c0:6f:da:f2:
06:85:47:e2:f5:23:5c:1a:95:62:21:db:ab:3f:6c:8d:50:4c:
ae:6e:e8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:06:57 2026 by rpki-client