Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
File: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json)
Hash identifier: XS5UtGb1um5uaz222FidTEJz6oYJ5rroa03h6YJYN5c=
Subject key identifier: 76:5D:C0:BC:8D:79:05:8F:7A:73:B6:F9:90:EA:AE:D5:41:5F:4B:FB
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Certificate issuer: /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial: 01A0E17486220334F3CF672D10DCDCB9443F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
Manifest number: 1A73
Signing time: Sun 27 Sep 2026 06:01:45 +0000
Manifest this update: Sun 27 Sep 2026 06:01:45 +0000
Manifest next update: Mon 28 Sep 2026 06:01:45 +0000
Files and hashes: 1: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: 4UCMMJTgVVHNS/1817Nlt18rnfvxAGElsMHXX1Qgx4g=)
2: b85PS3H30eMs5XV1Zj_5kBi4YS8.roa (hash: ADteCFtgyfMf5jEQhYpSnrBciRI5sXi17xBqTjm3R+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:86:22:03:34:f3:cf:67:2d:10:dc:dc:b9:44:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Validity
Not Before: Sep 27 06:01:45 2026 GMT
Not After : Sep 28 06:01:45 2026 GMT
Subject: CN=765dc0bc8d79058f7a73b6f990eaaed5415f4bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5e:f8:0f:84:44:af:ed:86:1b:37:3e:7b:46:
c9:fa:af:44:35:04:83:9d:2e:0d:2d:4e:5a:e4:8e:
7b:9a:cb:3b:70:0a:db:63:23:5f:a9:fb:fc:7d:b0:
77:2f:0f:bc:f6:70:dc:f7:6e:b9:b6:55:16:57:a1:
c3:7a:ee:23:6f:61:4b:ae:8a:10:77:40:9d:bd:73:
fe:c9:0a:c9:f9:f4:32:fb:04:72:61:cf:5f:49:70:
82:30:2e:2c:8a:fa:23:7f:10:8f:8a:6c:22:4a:ce:
93:ae:e5:6a:b4:6e:e2:c1:f7:d0:8f:96:18:21:51:
e7:25:f5:70:c6:a6:a6:88:7f:3f:0f:d3:e2:34:ee:
ff:5e:2b:e9:0e:f7:ee:44:29:15:df:85:07:15:32:
41:ed:3b:a3:07:09:33:c9:ec:72:74:f6:23:ec:1a:
92:cb:78:ee:38:e7:a0:41:e8:29:81:1e:f3:10:77:
5b:3d:84:84:4e:9c:b2:33:51:70:41:97:7d:47:1c:
b9:6d:a1:6a:26:19:40:ab:c6:4b:15:22:d2:23:7e:
08:b5:1b:68:b4:e3:51:5e:77:16:57:fc:78:ab:97:
cb:96:72:16:20:e8:13:b8:31:03:d1:a6:4d:7c:7e:
82:27:9c:c0:4b:87:87:26:e9:5b:b1:9f:53:67:6e:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5D:C0:BC:8D:79:05:8F:7A:73:B6:F9:90:EA:AE:D5:41:5F:4B:FB
X509v3 Authority Key Identifier:
keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c4:be:03:82:b8:b1:c9:4c:8e:91:f3:f9:8c:c8:c4:90:b4:
ce:56:3a:13:f1:73:20:2b:27:b9:eb:37:fa:7b:67:32:7d:fa:
07:a5:a4:f6:e9:8e:70:2c:c7:69:d4:28:a0:5c:43:8a:34:8b:
9c:cb:33:69:08:d0:85:8e:1e:46:bd:07:f5:d7:4c:52:88:0a:
db:17:af:2b:39:47:4c:9e:ee:99:11:36:96:5c:08:8d:d4:02:
03:dd:55:36:5e:f1:e0:b6:2b:99:25:d3:8d:52:44:29:2f:e7:
44:55:fc:b9:0c:5b:31:9b:1f:3f:7c:c1:6b:11:f6:24:82:98:
be:dd:aa:ca:1c:58:25:40:d6:56:1a:d4:89:6e:cd:ac:a7:45:
31:2c:e4:16:35:f9:9e:45:fe:1b:9e:2f:3e:53:31:54:01:3b:
4e:f9:de:3d:7b:8b:98:e4:34:27:cc:c1:8e:22:96:ea:62:76:
32:bf:fd:bf:58:58:96:40:cd:7c:a7:54:2b:ba:ff:e3:60:79:
75:8f:28:b1:92:5b:d3:4d:6f:66:e6:90:9c:4d:e6:a1:8d:92:
c9:34:65:f6:43:9a:63:19:6f:27:65:9b:07:34:88:35:42:52:
51:bc:7f:4c:cf:73:b7:b4:7f:39:d6:51:18:47:da:7a:6f:ba:
7a:50:fe:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:44:43 2026 by rpki-client