Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier: E5jkySyk3ZANt2EFNlStuObrOnqfCrteIiS16Xl0rPo=
Subject key identifier: CB:4B:C1:8F:4F:AF:E5:77:69:77:1A:64:43:28:E8:19:78:0E:E3:26
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 01A0DCF302ED6C1ECE75C0D617F3EAAFC1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number: 11A3
Signing time: Sat 26 Sep 2026 09:01:48 +0000
Manifest this update: Sat 26 Sep 2026 09:01:48 +0000
Manifest next update: Sun 27 Sep 2026 09:01:48 +0000
Files and hashes: 1: 5sITtlNKM7t60210AUBp_MNFelY.roa (hash: WCuNMPZvNV2cZDWHYzBYLEsyLHu/NPxJGgRX6UeNesQ=)
2: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: Epd1fiurVQegQZY9mgT/nbLftF535FaElcdj4v1dCcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f3:02:ed:6c:1e:ce:75:c0:d6:17:f3:ea:af:c1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: Sep 26 09:01:48 2026 GMT
Not After : Sep 27 09:01:48 2026 GMT
Subject: CN=cb4bc18f4fafe57769771a644328e819780ee326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:60:7c:a2:f6:8b:8c:c4:5f:9b:33:c5:59:
e6:7c:d3:6b:df:c7:48:8c:46:0a:92:3c:18:36:0e:
8a:f8:54:7e:04:b6:b7:bb:85:ad:09:a4:be:60:da:
97:f5:87:c7:5a:dd:e9:4a:75:b5:13:f7:b5:87:59:
bf:46:c1:4f:58:c4:0a:60:fc:64:7c:04:a4:36:a0:
11:3e:ab:c6:9e:06:96:82:82:f1:9d:40:2c:6a:8c:
88:3f:ba:3e:e3:84:68:9c:56:f7:f1:9e:af:97:29:
c2:e6:e6:51:ec:bf:62:67:77:3c:63:73:4e:9c:33:
e2:d0:d7:d4:fa:0a:94:7c:52:3c:71:05:72:ce:cc:
58:34:1b:b8:25:c2:91:ae:24:43:9b:c5:a0:64:8e:
7b:3f:48:36:56:d5:ac:9e:b0:e8:fc:4b:c2:ee:4b:
0f:ba:f3:25:00:5c:ad:e2:ac:a4:55:6e:61:70:3f:
38:fa:93:3f:a2:e1:0d:3b:b2:c6:39:8b:14:af:8d:
35:29:41:66:5f:2e:97:bd:39:6f:8a:aa:e8:da:9b:
a8:e6:88:6f:ff:0e:13:71:a2:f3:97:1d:68:5e:73:
36:4a:0f:87:88:b9:41:44:4c:f0:cf:a3:cf:f1:d5:
75:d0:6b:bf:47:bc:ed:24:6b:aa:9b:05:63:c0:0f:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4B:C1:8F:4F:AF:E5:77:69:77:1A:64:43:28:E8:19:78:0E:E3:26
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d3:51:ac:10:06:39:2e:6d:cf:ab:56:31:58:e3:56:e2:53:
19:e3:88:bb:60:ae:06:70:75:1f:6d:32:01:01:7f:87:a9:a7:
4f:33:58:e2:02:49:64:c8:66:4a:17:34:b3:ad:e1:11:04:c4:
bc:ba:9b:f4:8e:26:61:a7:d2:62:2d:c8:58:2e:d7:64:c0:ee:
7e:bc:80:60:40:ab:75:ce:74:32:f6:45:6f:9f:89:02:62:fe:
b8:66:eb:80:88:c6:29:26:0f:29:56:98:6a:a9:90:66:75:ee:
50:9b:50:45:ac:b0:e4:26:bb:1b:e3:01:7f:7c:34:9d:0a:39:
f3:3e:c7:5e:d4:bf:aa:ee:c4:35:04:50:31:26:d1:69:ce:10:
b7:d1:a0:8c:9d:bd:c4:3f:c6:8d:5a:ea:3a:cb:98:92:a7:cc:
af:8c:18:56:46:9d:31:35:41:fe:95:97:ee:27:10:b1:53:db:
b2:f1:f1:d6:68:95:32:29:f3:f8:a0:7f:00:ac:09:a8:76:c4:
d5:16:cd:11:be:33:13:2f:58:e1:1a:4a:3f:50:a1:9a:1b:d4:
4d:84:bc:32:d1:33:52:e6:94:95:55:92:e5:30:17:e2:e7:5c:
c9:5d:e1:df:0b:a0:77:9f:35:c4:6c:60:4c:0b:6e:0e:17:cd:
ba:de:a2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:19:02 2026 by rpki-client