Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
File: DNwH_ab01Vt8gYLJKaPErDwKgv0.mft (raw, json)
Hash identifier: 4l/g1LeblfxTajcMkrTx/E9g0Ou+fp5trtV8TR5lAM8=
Subject key identifier: 3D:71:23:58:72:DA:79:8B:33:1C:B3:02:F3:5B:7B:E4:61:52:FF:56
Authority key identifier: 0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD
Certificate issuer: /CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
Certificate serial: 01A0DA28419A3F423C693C164A38C83C1F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
Manifest number: 17A4
Signing time: Fri 25 Sep 2026 20:01:06 +0000
Manifest this update: Fri 25 Sep 2026 20:01:06 +0000
Manifest next update: Sat 26 Sep 2026 20:01:06 +0000
Files and hashes: 1: DNwH_ab01Vt8gYLJKaPErDwKgv0.crl (hash: DcY+SwyQV1GsXvWhx7jmV3xqr7PE9PoAntz5IE1maEQ=)
2: sr6kvtXsb97tIbo9gPMbe0i0jnQ.asa (hash: 1+yPxlGMsWOqTyAekCP/j6iLEoAlX6ESpcfSvvIHtOo=)
3: ywVzjPA1JlKTUm2ojiiIqywQkjA.roa (hash: Efr8yAzRIBUZFz+Fjffxu8b2LYG9UYl0V4c7dQtT9tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:41:9a:3f:42:3c:69:3c:16:4a:38:c8:3c:1f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
Validity
Not Before: Sep 25 20:01:06 2026 GMT
Not After : Sep 26 20:01:06 2026 GMT
Subject: CN=3d71235872da798b331cb302f35b7be46152ff56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:bd:f6:11:9a:1f:d9:e3:52:14:e0:ca:d1:
0f:6b:fe:93:2d:0b:54:13:bf:91:91:f3:90:92:78:
10:6c:1f:dd:6d:1b:09:90:76:0d:86:69:9b:d9:65:
20:41:f1:51:d5:ae:c0:28:49:9b:39:1d:49:17:f4:
a0:5c:97:f8:08:15:ca:81:2d:31:f6:ad:b5:d5:d7:
99:f2:7f:cf:78:31:0f:dc:22:d5:9f:94:05:31:15:
ca:57:92:ed:2f:15:3c:44:66:f2:ad:2b:cb:dc:95:
66:70:f0:4a:a4:42:df:56:94:d5:e6:a3:fb:50:ca:
ee:33:65:57:69:a1:b1:c4:1d:e0:1a:e5:fa:db:b7:
47:00:63:2d:e1:2b:d3:86:b3:46:13:f1:25:99:94:
7e:69:fa:e5:fa:ab:03:80:b2:29:10:2c:67:d9:40:
21:0e:57:d9:5f:1f:f0:8d:7c:53:a3:57:ad:88:6f:
53:33:b9:d4:f5:2c:8b:94:35:da:a8:fa:b9:40:d6:
03:0d:43:7a:2a:67:1e:df:b5:0a:86:18:4a:5b:77:
3a:27:5c:89:c3:9d:8e:fe:7a:ed:34:6c:19:4d:c3:
8c:ac:1f:b4:bf:bc:25:18:d7:2b:85:a4:5d:14:6d:
5e:1c:31:02:54:5b:39:63:b3:50:bf:74:7c:0e:1e:
64:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:71:23:58:72:DA:79:8B:33:1C:B3:02:F3:5B:7B:E4:61:52:FF:56
X509v3 Authority Key Identifier:
keyid:0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:95:19:31:f3:85:54:51:81:c2:0e:bf:89:84:b8:06:8a:f8:
80:3b:3f:76:20:43:7e:94:01:5f:9e:bd:7b:95:63:51:c5:e6:
fd:4a:5f:e1:b6:ba:d2:1e:13:2e:18:ec:cd:b4:73:9e:38:98:
1a:80:f1:81:f5:a6:76:02:ab:5d:c3:0e:75:f1:c6:be:78:a0:
da:85:76:6e:bd:1a:77:7a:a3:c7:8d:13:21:5e:2e:51:09:d8:
d8:86:cf:5a:f5:4d:39:03:46:67:19:4b:e6:c2:d9:ed:52:26:
4b:0f:1c:3e:95:f0:8d:b9:f0:32:8c:bb:e4:9d:41:0f:f5:a9:
c1:49:57:7a:fd:81:1c:c0:ef:01:a6:41:c0:ba:72:52:6b:4b:
6e:16:43:03:eb:0f:3f:8b:e5:b5:d6:80:4f:fe:91:30:f9:9e:
53:4d:dc:d2:5b:0e:6b:17:be:f2:53:dc:23:23:e7:b4:e4:c3:
88:dc:d7:65:15:0d:bf:94:66:08:a4:5c:1b:cb:76:0e:30:e3:
cf:fa:8f:af:00:c9:06:9e:cf:15:09:52:a6:f8:a3:5c:78:8d:
6d:8b:74:c5:e1:9b:fe:c6:20:b8:42:8b:b5:4a:fa:ea:f6:51:
81:91:43:11:1d:7e:dd:3f:50:a8:0a:81:f7:7d:8b:ad:d6:44:
aa:b1:6d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:21:09 2026 by rpki-client