Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
File: D5otI3SqascUtfim7duA3GlnnMY.mft (raw, json)
Hash identifier: mQRey7ivOpmeMpzTDIo/PS/KrWy3K4Ru0wZilXDVeks=
Subject key identifier: 12:6C:F0:CE:D7:94:41:81:CE:B6:F2:66:42:15:8C:11:2F:A7:76:94
Authority key identifier: 0F:9A:2D:23:74:AA:6A:C7:14:B5:F8:A6:ED:DB:80:DC:69:67:9C:C6
Certificate issuer: /CN=0f9a2d2374aa6ac714b5f8a6eddb80dc69679cc6
Certificate serial: 01A0EC9CBDA3F9A9F79C7A46813C02C05E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
Manifest number: 10DF
Signing time: Tue 29 Sep 2026 10:01:30 +0000
Manifest this update: Tue 29 Sep 2026 10:01:30 +0000
Manifest next update: Wed 30 Sep 2026 10:01:30 +0000
Files and hashes: 1: 8SEsdKMq767CnaRYG-1hJ5v6Hic.roa (hash: h/RdezdmLSdHmsoFs8q7JJ7Hnulds2LoEiNuAXGhUZg=)
2: D5otI3SqascUtfim7duA3GlnnMY.crl (hash: tMvhr7dhUfLFc1PLr6izCV/e26LVY1ya8pWLJhSLqp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9c:bd:a3:f9:a9:f7:9c:7a:46:81:3c:02:c0:5e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9a2d2374aa6ac714b5f8a6eddb80dc69679cc6
Validity
Not Before: Sep 29 10:01:30 2026 GMT
Not After : Sep 30 10:01:30 2026 GMT
Subject: CN=126cf0ced7944181ceb6f26642158c112fa77694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:fb:a5:4b:43:2d:64:23:4f:4f:4a:fd:fa:
82:d9:96:48:00:64:df:4c:97:54:ed:a8:e1:36:62:
85:1e:c8:3f:03:52:60:26:b5:82:08:fd:07:77:57:
67:15:bf:e6:e3:fb:dd:2c:61:e4:ec:d6:23:19:a8:
4f:5b:2e:17:35:7a:90:61:b4:13:88:56:4d:13:3a:
a4:a3:0b:69:17:63:e5:0e:f1:8e:6d:62:7d:44:b6:
11:7a:5e:47:a8:11:15:b1:44:6a:ac:a1:13:5d:75:
9e:b9:ab:5b:a7:ce:11:a1:1e:34:6e:b9:1e:1f:a1:
79:8f:58:f5:ae:da:39:92:72:92:6c:37:9d:81:ec:
86:aa:eb:58:d8:28:78:25:3e:2c:7a:2d:61:1d:4d:
05:8c:3f:e2:1a:b4:d3:bd:91:3d:2e:e8:2d:3b:4f:
5c:fb:3a:96:d7:37:17:9e:40:2a:95:63:26:04:81:
8e:fb:c9:fc:a1:9a:db:30:9c:2b:ad:2f:7e:e9:5f:
36:f9:d0:99:13:ec:98:2b:4e:e7:d5:e5:e3:1b:1e:
84:47:d3:73:18:ae:d8:60:79:83:93:36:79:b2:b5:
bb:b2:66:86:0b:95:f4:92:78:2b:8b:e4:b1:cb:0f:
29:d4:89:d6:33:26:e0:f8:0c:98:c9:fe:9b:74:9e:
0a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6C:F0:CE:D7:94:41:81:CE:B6:F2:66:42:15:8C:11:2F:A7:76:94
X509v3 Authority Key Identifier:
keyid:0F:9A:2D:23:74:AA:6A:C7:14:B5:F8:A6:ED:DB:80:DC:69:67:9C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:28:8c:dc:4a:d0:5a:d1:97:a0:36:64:28:33:e6:3d:00:49:
bf:38:d1:56:87:44:a9:5b:55:9a:a9:b7:bb:33:db:ca:e3:b5:
9e:5b:f0:e4:44:e1:1d:7a:2c:da:05:c6:06:fb:0f:ac:17:7f:
f9:cb:43:d6:4d:1b:48:24:a3:94:1b:df:59:66:74:ec:3c:0c:
c1:12:47:76:22:7e:c5:7c:b5:27:e5:35:19:71:1e:75:e3:bb:
99:d5:99:55:18:bd:bb:d8:af:66:5d:87:ab:2e:d9:0f:9a:82:
de:07:54:11:15:26:a6:63:ac:a1:41:e5:a9:30:d8:50:3a:63:
0d:ce:5c:75:1c:06:36:54:a3:4d:3f:58:a9:28:e9:99:fb:21:
5f:74:03:cd:e1:44:74:e6:9a:31:ff:71:3a:68:d3:68:1b:39:
dc:a2:48:e7:b7:b4:55:74:3e:03:49:2f:fb:77:67:b5:69:bf:
6e:2c:1c:15:e2:5c:f1:04:8b:d0:7e:d9:eb:12:29:1c:6d:1b:
0e:0e:c2:d9:d0:7f:b6:8b:5b:57:b5:2f:40:3e:ae:06:d9:eb:
b7:3d:c2:90:f2:e8:0c:d5:5d:41:92:45:18:ca:d1:1f:01:32:
c3:cc:93:91:49:3a:b7:43:c3:43:a6:0e:f6:9e:8e:16:cf:63:
d2:f1:ab:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:05:06 2026 by rpki-client