Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier: omv468d/iFgWyh4TmmSgTWI0kvkO3UOq4kkJjKDA6D4=
Subject key identifier: 39:C5:C4:DB:CF:28:89:81:9F:51:F9:9D:39:B3:D8:6E:2D:95:CD:E7
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 01A0FF109425B19A393E9A031729EC820072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number: 1A82
Signing time: Sat 03 Oct 2026 00:01:11 +0000
Manifest this update: Sat 03 Oct 2026 00:01:11 +0000
Manifest next update: Sun 04 Oct 2026 00:01:11 +0000
Files and hashes: 1: H7fYzgAywiwtcT8-20X5WOux6fs.roa (hash: h+Uh5Kz1qJdgzCKaZAX98ps/QJeCnLPBc45Zv+eXiYA=)
2: cHfaPvW5Vud_9pj79Xxvj7kuddE.roa (hash: bGFOgs4ZrshgcJyva0SGzm2fyOyJP6p6s4rmZXREF64=)
3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: rfk1KdCL3dQrPiAibC2HQKh+JmIuD7TMWfLKKrpVqm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:10:94:25:b1:9a:39:3e:9a:03:17:29:ec:82:00:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: Oct 3 00:01:11 2026 GMT
Not After : Oct 4 00:01:11 2026 GMT
Subject: CN=39c5c4dbcf2889819f51f99d39b3d86e2d95cde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:8d:ae:ff:80:66:65:18:e8:ec:04:d3:1e:
cc:09:ac:f4:96:68:09:f2:e6:9b:30:5c:fe:c1:73:
2f:38:bb:b3:6e:67:f0:0e:f1:77:62:48:e4:8d:6b:
e1:6e:37:b1:13:14:45:cf:8f:c1:fa:7d:79:8c:4c:
d1:45:7a:d5:0a:b0:80:2b:3e:53:2c:76:26:4e:80:
92:24:11:76:5a:b5:4a:78:3e:47:24:d0:19:5c:07:
75:3e:1a:5f:d9:dc:49:7c:ea:c4:ae:47:1b:87:d2:
6a:58:78:7d:57:5e:74:a4:73:bd:33:db:bd:e8:aa:
10:24:be:d2:6e:e9:51:f5:b1:52:ee:0c:1f:db:89:
b2:07:1d:f6:be:01:cb:cd:a5:f9:ca:8a:9f:10:0e:
6d:9c:1e:b9:36:9c:45:db:74:4f:68:0d:a5:0b:6b:
54:7e:64:26:a2:1b:ff:17:f8:f9:8b:6c:4d:16:9f:
c6:5f:6a:e4:95:12:40:c4:6b:cd:83:f9:c3:c6:09:
21:df:34:e6:76:77:5c:9c:76:96:b9:d9:d8:7a:19:
b8:a3:87:a8:d3:e4:ab:b8:3e:d0:20:91:47:97:ab:
02:ef:9f:f3:75:47:3f:21:0b:22:e7:9f:c6:e9:da:
7a:d7:b6:4f:fa:97:f0:36:6b:bf:fd:88:23:62:26:
1e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C5:C4:DB:CF:28:89:81:9F:51:F9:9D:39:B3:D8:6E:2D:95:CD:E7
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:27:4a:8b:3c:9f:db:9b:88:bf:38:98:0b:ca:66:85:5a:a8:
f7:c4:75:46:be:ea:61:c0:03:e6:00:78:6a:53:96:09:3c:06:
bd:87:2a:b8:4c:64:2b:0a:a8:fc:bb:85:7d:49:94:e1:0a:80:
65:d4:d1:45:5a:dc:48:71:92:43:a2:d1:3a:da:9f:40:17:9c:
5d:f3:bb:b4:c3:52:67:e9:64:4c:0f:8c:57:ec:4f:b1:f1:e9:
c8:11:05:7f:10:8a:f5:6e:57:aa:1b:7b:f6:ec:1e:78:8d:71:
15:9b:55:5d:d4:a6:7f:ff:96:79:51:98:7f:f1:ac:73:2a:db:
6b:4f:e8:f6:ed:93:a4:cc:59:fc:22:d5:6a:26:c7:27:e9:ed:
4d:02:84:58:14:26:ac:bf:73:90:bf:fc:1c:bc:29:0f:2f:de:
0a:98:e0:20:a0:33:4e:1d:04:98:38:08:08:e2:6d:51:89:7a:
03:ae:16:4a:ae:77:6c:3d:3b:c1:a2:b0:a8:cc:20:87:a4:c2:
7c:29:0a:a9:56:94:37:1f:78:82:51:dd:5b:44:c0:3b:da:84:
a6:c6:8c:2b:63:09:83:72:dd:5d:ce:e9:e6:6c:18:19:8d:62:
42:74:23:20:5a:30:c4:2f:b3:8e:75:67:a4:ed:bb:bc:71:f1:
a0:07:fb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:08:29 2026 by rpki-client