Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/dvknpsZ58qd-NF9680OQgutLrJ0.mft
File: dvknpsZ58qd-NF9680OQgutLrJ0.mft (raw, json)
Hash identifier: Lx+Q/zFSJ4zm9U95IiWc6Ey6SjDieMPx6WI0jQbYPAk=
Subject key identifier: 65:0A:2A:64:2A:6C:F1:AA:F2:A3:AC:F0:A3:98:AF:67:85:B1:14:8B
Authority key identifier: 76:F9:27:A6:C6:79:F2:A7:7E:34:5F:7A:F3:43:90:82:EB:4B:AC:9D
Certificate issuer: /CN=76f927a6c679f2a77e345f7af3439082eb4bac9d
Certificate serial: 01A0EB1CE8899E49C4058F31AE5F8A6E7143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvknpsZ58qd-NF9680OQgutLrJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/dvknpsZ58qd-NF9680OQgutLrJ0.mft
Manifest number: F3
Signing time: Tue 29 Sep 2026 03:02:15 +0000
Manifest this update: Tue 29 Sep 2026 03:02:15 +0000
Manifest next update: Wed 30 Sep 2026 03:02:15 +0000
Files and hashes: 1: ZMk0TcH_sU0I9-xUq2dEjh37ixk.asa (hash: 0j+vzvHuC8tv7A5MzE2hAe26t/2z6R0x5UsinsDU01w=)
2: dvknpsZ58qd-NF9680OQgutLrJ0.crl (hash: wOW07r63woSn3uD52/t/SF+7jHdQs+biOOhpVEuyv4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/dvknpsZ58qd-NF9680OQgutLrJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/dvknpsZ58qd-NF9680OQgutLrJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dvknpsZ58qd-NF9680OQgutLrJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:e8:89:9e:49:c4:05:8f:31:ae:5f:8a:6e:71:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f927a6c679f2a77e345f7af3439082eb4bac9d
Validity
Not Before: Sep 29 03:02:15 2026 GMT
Not After : Sep 30 03:02:15 2026 GMT
Subject: CN=650a2a642a6cf1aaf2a3acf0a398af6785b1148b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:d8:25:16:97:cc:23:2a:2a:ee:47:31:a0:
37:53:d2:b7:a4:18:60:f2:3d:21:2d:03:78:68:1d:
40:59:62:bd:6f:38:00:96:1f:ae:95:c5:d2:28:a2:
6e:b0:1a:56:c3:b1:86:34:18:b5:b2:cc:d9:14:a1:
59:6c:f5:54:41:c7:1b:24:fa:09:f1:cd:2d:8d:cd:
47:fa:8a:77:51:28:c4:1c:72:a9:f8:0a:e6:aa:ad:
62:b8:94:d9:ad:d5:df:7d:e5:45:af:bf:3e:81:1d:
35:68:24:cd:40:3f:fc:e7:0c:4f:25:f9:60:db:da:
28:82:d5:2f:3a:65:dc:da:c4:64:dd:64:e4:ec:11:
1c:8c:98:db:7a:3d:e6:6e:a5:4d:3f:8f:78:20:7b:
d2:8f:7d:af:53:50:17:46:1d:61:f4:de:03:ee:84:
5e:c4:7c:74:71:14:de:e9:25:be:e2:e5:10:e6:5e:
77:82:74:e8:1f:76:3f:f3:fd:6c:87:33:f2:47:a2:
99:0e:77:c2:7d:a3:84:d9:ce:50:c8:bb:a2:6b:ff:
8a:b5:ad:c0:70:1e:b4:ff:49:79:2c:80:ad:00:9c:
db:40:0a:78:4e:f2:bf:34:db:91:5d:5a:84:19:e1:
f3:92:10:20:c4:b1:70:13:34:b7:b6:35:ee:20:9b:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0A:2A:64:2A:6C:F1:AA:F2:A3:AC:F0:A3:98:AF:67:85:B1:14:8B
X509v3 Authority Key Identifier:
keyid:76:F9:27:A6:C6:79:F2:A7:7E:34:5F:7A:F3:43:90:82:EB:4B:AC:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvknpsZ58qd-NF9680OQgutLrJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/dvknpsZ58qd-NF9680OQgutLrJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2419ba-a448-44f3-b9bd-694cd3692cf1/1/dvknpsZ58qd-NF9680OQgutLrJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e0:e1:00:27:ea:82:f7:1f:47:86:f6:21:08:2c:b4:5e:ad:
2e:70:57:34:33:12:5b:32:82:75:82:32:cd:67:f1:f0:7c:a7:
f7:96:c4:5a:a3:0a:54:07:86:77:28:fc:25:54:17:3b:bf:89:
2d:b0:db:fb:26:32:59:bc:e0:12:24:e9:b5:24:76:09:33:b0:
00:c3:ba:0b:b4:fd:f9:8c:0f:4b:33:a9:a4:c9:9d:84:f5:6e:
5d:6f:91:39:9a:d2:27:f8:8d:a5:82:14:a0:ef:53:05:34:5c:
b2:f2:5f:f3:83:1c:b7:40:f4:1d:94:43:df:80:25:ac:8d:8d:
00:4a:0f:7f:38:3d:70:79:0e:d2:70:b2:6d:c1:f1:36:e0:26:
d2:c8:d9:02:3c:06:94:76:a8:fd:8b:10:99:d6:53:84:16:3d:
fd:7f:47:90:41:a7:20:27:42:23:43:14:98:c7:e9:e9:80:66:
bd:2a:a0:51:ea:44:7b:06:44:86:ad:60:98:20:23:12:6d:60:
1c:97:dc:7d:ea:22:75:e0:1b:fa:ad:bb:22:3b:df:ac:d7:6c:
61:b5:88:ce:d3:ad:3f:d2:c9:2d:ab:22:63:7f:f4:da:02:74:
c4:03:e0:b2:b8:c0:d9:89:a3:68:4f:61:bc:bc:1b:61:49:1b:
04:ec:c1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:18:36 2026 by rpki-client