Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
File: DIXrpeHV0Efz2lfeYnX968At-5g.mft (raw, json)
Hash identifier: rqNwynBhcMlm9m4JQF/y51tQyFA01+8nClTgCpqjePo=
Subject key identifier: B0:68:CD:A8:AB:2E:4E:91:F8:12:C9:06:90:5C:19:24:1F:EB:ED:B2
Authority key identifier: 0C:85:EB:A5:E1:D5:D0:47:F3:DA:57:DE:62:75:FD:EB:C0:2D:FB:98
Certificate issuer: /CN=0c85eba5e1d5d047f3da57de6275fdebc02dfb98
Certificate serial: 01A0D200B3E2933B473A75AF639E5BE092F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIXrpeHV0Efz2lfeYnX968At-5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
Manifest number: 014F
Signing time: Thu 24 Sep 2026 06:00:56 +0000
Manifest this update: Thu 24 Sep 2026 06:00:56 +0000
Manifest next update: Fri 25 Sep 2026 06:00:56 +0000
Files and hashes: 1: 07X4-aly_fwzIPkdRTVK5Fls7IE.asa (hash: PSrwFcPr+F0Ok6ZKKWr4uBgYHzYBf4fKh4J9YvDEC+k=)
2: DIXrpeHV0Efz2lfeYnX968At-5g.crl (hash: AwuyM12qB79FUYRXCAQRRXNDcKOq3I9X6+4eCUX/2vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIXrpeHV0Efz2lfeYnX968At-5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:b3:e2:93:3b:47:3a:75:af:63:9e:5b:e0:92:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c85eba5e1d5d047f3da57de6275fdebc02dfb98
Validity
Not Before: Sep 24 06:00:56 2026 GMT
Not After : Sep 25 06:00:56 2026 GMT
Subject: CN=b068cda8ab2e4e91f812c906905c19241febedb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:4b:f0:26:25:69:2a:47:1a:3a:39:1a:1a:
26:1e:b7:30:05:d1:6c:7f:7d:5e:70:84:a4:0e:8d:
f5:8d:dd:2f:2f:88:57:dd:98:7e:da:82:c8:7a:53:
cf:2c:aa:30:a9:49:61:d7:dd:b6:71:2a:72:02:f7:
50:1a:0b:cd:26:ee:ec:e0:1b:fc:2c:3f:20:21:a9:
f9:1d:a4:37:26:d7:8c:ca:87:b4:a9:7d:d5:57:9a:
f6:96:e2:55:a5:47:b4:b1:95:3b:41:5b:69:8f:8f:
34:49:17:50:2a:47:69:76:71:8a:e4:2f:bb:d3:71:
4c:4a:f9:ba:21:1b:f8:a9:56:b4:c0:c8:d8:18:08:
84:0d:cf:b5:71:0a:d1:7c:c8:9d:63:6b:76:1e:87:
ab:65:8a:27:28:12:55:41:d7:73:6e:c7:c8:92:88:
af:df:07:1f:0a:58:7f:8f:c4:7a:7c:60:ae:04:42:
e0:56:a7:15:4c:ee:c8:f1:d1:9c:9f:d0:0d:12:f9:
5d:39:33:58:bd:32:d7:7c:c1:27:ed:30:00:2a:7b:
e4:66:26:bb:9d:d7:19:2f:37:fd:bf:c6:cd:bf:cb:
4c:8b:f0:80:2f:d1:0f:0c:28:e6:45:00:0d:93:4d:
52:2d:b4:81:d4:07:c6:5d:ec:a3:60:be:7c:8f:77:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:68:CD:A8:AB:2E:4E:91:F8:12:C9:06:90:5C:19:24:1F:EB:ED:B2
X509v3 Authority Key Identifier:
keyid:0C:85:EB:A5:E1:D5:D0:47:F3:DA:57:DE:62:75:FD:EB:C0:2D:FB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIXrpeHV0Efz2lfeYnX968At-5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d2:d9:0c:c3:07:05:4b:06:19:5f:75:3f:5a:96:45:88:32:
75:e7:ce:b6:61:ca:fa:bc:04:e6:f7:aa:72:7a:2a:2f:f7:1b:
e6:92:7a:72:ed:89:44:59:9c:bb:f0:76:a5:29:ec:ec:cf:3c:
c7:b3:12:10:44:25:14:05:b3:49:2f:ef:d9:35:00:aa:fd:e9:
62:fe:fa:f2:0d:9f:54:88:8b:9e:6e:33:72:11:c7:75:4e:f8:
79:e5:d1:0a:a1:fd:56:58:0f:3c:eb:2e:a5:01:76:18:92:73:
6a:33:f5:98:69:57:cc:46:f7:94:99:63:df:ff:3b:8c:08:cc:
6d:b7:33:49:c7:5c:44:b8:3a:4a:87:15:e1:6a:ce:4f:7d:ea:
0a:ba:7e:99:0f:0c:80:77:df:03:0e:5e:e2:d8:e8:54:c9:87:
d7:e0:a4:3e:29:79:f0:3c:b2:f2:ab:fb:90:08:9b:20:9b:03:
91:80:90:1b:41:01:93:80:db:f2:a3:19:3f:42:84:2d:9b:ad:
1b:c5:36:cd:4c:c2:25:05:8a:ac:a8:83:67:03:ad:3d:4b:1d:
cd:7f:dd:b7:a0:05:cb:9c:7c:f7:90:25:1e:fe:5e:d5:b8:cd:
4e:3f:dd:0a:46:81:cc:e1:24:d1:22:f6:a8:f0:fb:80:26:15:
52:85:8a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:44:55 2026 by rpki-client