Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
File: Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json)
Hash identifier: EFu36Zx2wc/HDmTojs0bp5V9CZPx5ah1HTOnYhMwkgA=
Subject key identifier: 6D:6C:4B:4D:9D:A8:A9:C8:2A:DC:75:95:52:73:B1:40:97:7A:DC:B8
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 01A0CCA3761078B4518545860C885419ED3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
Manifest number: 1A67
Signing time: Wed 23 Sep 2026 05:00:59 +0000
Manifest this update: Wed 23 Sep 2026 05:00:59 +0000
Manifest next update: Thu 24 Sep 2026 05:00:59 +0000
Files and hashes: 1: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: bnyvRqmQeslhyUNuYj5mM6bXVaA7t8GdshrRvFLF/1c=)
2: ZJrKYNVeNIz0VYlhoJzi7d7m2vA.roa (hash: EFqLQnOjEFl37vCVsoiCRywmssmLRwolJfsBoc/u7Qg=)
3: hXlpXaM1pFmksY1FpbebpRbEl-Q.roa (hash: Lw896zRP/JglXDT61QeSjgmUxl+Qailc29oqIkIXseQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:76:10:78:b4:51:85:45:86:0c:88:54:19:ed:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Sep 23 05:00:59 2026 GMT
Not After : Sep 24 05:00:59 2026 GMT
Subject: CN=6d6c4b4d9da8a9c82adc75955273b140977adcb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e7:19:9f:4c:9f:d6:df:20:11:1b:3e:3d:2d:
da:4c:cc:26:8a:2e:12:54:df:52:8c:5a:6f:0c:b7:
40:26:ff:3f:f8:ca:0d:5c:f4:33:d2:d6:d7:0d:9f:
50:4d:ef:74:3a:d5:87:ca:91:fa:b4:7b:52:c9:60:
f8:9b:c5:43:13:cb:56:4c:59:d0:3f:3f:65:f4:e0:
72:0c:1e:ad:ed:22:b1:c6:fe:e3:a2:60:9d:ef:17:
5e:c4:14:27:b7:e4:e7:5a:7c:f9:be:9c:ee:fa:a0:
c3:76:b9:60:24:21:dd:20:ad:e1:84:76:1c:22:d5:
0a:96:bc:78:12:78:cb:8e:26:bf:42:6d:c5:a8:76:
8d:04:c9:d4:8f:b7:57:fd:ee:07:25:b8:1a:63:94:
54:0f:d0:ba:d9:c6:30:73:88:c2:b9:71:69:67:61:
38:60:02:84:94:fd:7d:bd:be:ec:ed:80:a2:63:f6:
aa:3f:c0:7f:49:5f:31:f2:c6:64:ff:e5:97:ac:ee:
f3:7a:8a:18:a8:2b:a9:8c:66:e4:49:d8:04:16:b4:
50:86:7f:65:5d:5f:81:58:b5:0e:5c:74:83:98:ac:
22:a0:01:51:5d:3d:e1:a6:cc:07:71:62:7f:de:8d:
96:b9:38:54:60:85:45:b0:c7:7b:a4:b7:6d:65:c7:
25:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6C:4B:4D:9D:A8:A9:C8:2A:DC:75:95:52:73:B1:40:97:7A:DC:B8
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:31:5a:11:8e:fb:8f:4e:f3:04:d3:b8:28:da:7f:60:f3:51:
c6:e4:34:e3:2f:eb:f2:98:28:b5:ba:b2:2c:dd:fd:18:49:ab:
81:6e:44:2b:fc:27:16:bc:55:50:a1:38:6c:dd:14:14:f6:7d:
b1:64:fd:9e:50:db:c5:2a:7d:71:7e:0c:45:d5:bc:f6:a5:5d:
bf:38:ae:b3:12:42:e1:f9:f4:0b:55:fa:00:96:be:a8:3e:ae:
99:ae:22:67:40:2e:40:2b:e2:91:8c:c0:ff:4f:eb:6b:90:ea:
b0:51:12:a4:a6:24:67:02:ac:10:43:10:f7:ed:02:7b:2d:49:
de:be:9d:7d:40:cb:54:a6:d4:15:d0:85:c4:81:69:ea:bc:e8:
71:c1:ea:55:c7:8d:be:5c:29:f2:0f:68:ea:f8:9a:23:c8:37:
52:37:1b:32:7f:e1:14:06:00:47:6d:a3:4b:e3:f6:bb:60:72:
7d:71:e5:40:da:44:07:66:b9:84:d0:e6:c0:84:dd:67:40:fe:
d9:c5:fe:2c:ae:10:ad:e5:f2:48:d0:3a:e4:77:2d:04:72:fa:
14:c8:bb:af:3c:41:94:0a:c0:23:08:b6:3b:7e:e5:d7:cb:52:
26:74:35:5d:89:d8:0a:f7:fe:9d:c1:63:9a:c9:cc:71:cb:2f:
94:e6:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:26:31 2026 by rpki-client