Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier: CEBv6xIrEM+SnuKpRNDIqHh9LMO7Sc/jWJzlWNHfGVQ=
Subject key identifier: D0:A5:4F:DF:70:89:94:36:A5:D3:8D:04:59:89:33:D5:3A:7D:8A:44
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial: 01A0DC4D9335BB612B8DAD89DA78504A9096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number: 1A71
Signing time: Sat 26 Sep 2026 06:01:06 +0000
Manifest this update: Sat 26 Sep 2026 06:01:06 +0000
Manifest next update: Sun 27 Sep 2026 06:01:06 +0000
Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: 8KvDaMG0aSIyWFTUuxraWTmZyaEUQN+vi0IRXxBxBJQ=)
2: _UE15j8dt-0E4MNHI1SJ6VAbDdo.roa (hash: RpMmPkih2MaIwwmI1CZ2YI65k33Pkn9LWYdRz9m4yPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:93:35:bb:61:2b:8d:ad:89:da:78:50:4a:90:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Validity
Not Before: Sep 26 06:01:06 2026 GMT
Not After : Sep 27 06:01:06 2026 GMT
Subject: CN=d0a54fdf70899436a5d38d04598933d53a7d8a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:75:ae:9e:f6:c5:28:7d:14:40:9b:ca:95:4b:
5b:dc:a4:23:45:15:db:67:bf:fa:ad:53:70:eb:f1:
d0:f4:fe:de:1a:63:9d:2d:44:d1:f1:dc:44:47:12:
26:db:bc:9e:23:af:90:b5:33:63:32:03:67:b1:51:
e4:98:ed:48:51:b5:1f:ca:79:0a:a3:c1:b2:cf:9d:
ab:f0:59:57:9c:3a:66:19:5e:0a:d4:0e:1a:45:2d:
1c:4e:2e:dc:13:dd:af:38:2b:10:87:b2:1c:3e:19:
2d:af:b5:e5:a7:07:99:bb:ae:b9:e5:45:a8:eb:f8:
14:3c:a3:86:f9:13:59:11:eb:1c:a1:ad:4e:52:c9:
d1:3f:6e:fe:39:00:67:5f:7b:3f:23:74:89:4a:85:
7d:53:d4:8d:df:a7:82:09:25:7a:70:dd:a1:2f:73:
03:20:d4:15:1e:66:1b:c6:cb:cd:df:53:4c:2f:37:
9c:c3:88:be:a5:d0:4a:92:b5:bc:c6:5d:96:df:28:
cf:9f:d1:6b:3f:5c:82:3f:e2:97:7f:ea:21:a7:16:
e9:d3:19:25:67:2a:18:11:9d:71:10:b9:63:b7:d4:
85:9d:d7:bf:68:fc:a1:4a:09:71:84:ab:90:a7:ef:
97:e1:71:a7:4a:e8:8e:fc:1f:c2:bd:76:3e:10:cb:
df:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A5:4F:DF:70:89:94:36:A5:D3:8D:04:59:89:33:D5:3A:7D:8A:44
X509v3 Authority Key Identifier:
keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ae:d1:cb:4e:ad:db:cf:8d:13:28:58:c5:f3:73:50:a1:f1:
9d:31:e0:04:c3:bd:88:36:fe:01:e9:83:ac:e6:e8:6d:cd:05:
6e:6d:a6:76:94:14:08:71:25:16:21:2a:65:0d:8c:94:e2:3f:
c7:ed:94:2b:ef:d4:d2:92:5f:7d:80:c6:24:b1:1d:92:02:49:
88:bc:73:c5:75:93:87:8b:7f:06:db:ac:d5:1b:94:35:18:31:
3c:67:e4:bd:f1:ae:05:9b:ab:8d:4b:3d:dd:10:e5:e3:f8:5b:
ac:69:ea:d8:20:f7:90:63:5f:6b:ae:2f:26:47:a3:4c:f3:b6:
f9:7b:f3:a4:50:07:fb:4c:20:b4:d2:29:6f:51:04:af:5a:65:
90:20:38:8c:4a:2f:9f:29:4a:14:e1:ea:af:e1:f9:b8:7f:2d:
c5:dd:72:08:95:c7:23:43:99:0e:d9:31:ea:93:9f:89:4d:6a:
41:9b:02:5d:60:7e:03:25:86:fd:9a:dd:c0:6a:99:54:23:3f:
bf:2d:11:47:14:d1:17:2a:90:c3:66:5e:5a:16:98:c1:ea:18:
b5:24:a7:cc:be:0b:13:ad:5b:dd:ef:a4:4b:dd:00:98:76:39:
37:cb:8a:ba:75:64:7e:f0:c9:5d:55:4d:35:75:6c:ec:48:5e:
9f:c9:4b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:13:40 2026 by rpki-client