Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.mft
File: DvrXVRUW8MTZEtoDE8mVyecU4Jo.mft (raw, json)
Hash identifier: th/hckwp+9180UnNP+nLsze0Z854cX9mEuOGc0Hduz0=
Subject key identifier: 84:1C:E2:AB:D3:14:99:7D:89:0F:80:0D:2E:57:53:BC:B7:26:BB:0E
Authority key identifier: 0E:FA:D7:55:15:16:F0:C4:D9:12:DA:03:13:C9:95:C9:E7:14:E0:9A
Certificate issuer: /CN=0efad7551516f0c4d912da0313c995c9e714e09a
Certificate serial: 01A149BCC00E8C24204AF75E48D4032DD968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvrXVRUW8MTZEtoDE8mVyecU4Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.mft
Manifest number: 0124
Signing time: Sat 17 Oct 2026 12:01:09 +0000
Manifest this update: Sat 17 Oct 2026 12:01:09 +0000
Manifest next update: Sun 18 Oct 2026 12:01:09 +0000
Files and hashes: 1: 3DD1GqM4VMCI2iIn07pCJxzLRt0.roa (hash: +QXq2lGOdBUmdmEAE4jHcDP4XRlLl+rR3VZKeTQaV/s=)
2: DvrXVRUW8MTZEtoDE8mVyecU4Jo.crl (hash: sqQTSckmYF4/dIGWftM1me1sjm9XzAS98WqSAvLx8Is=)
3: kkBwqM6FKohBRjtSHy37ifNbbqU.roa (hash: KLotQf93W8LLpw+t99ysaq1+3XO9F6oWK8lyix0qpLA=)
4: s6pcjXYJ_a8ZOjQqNdW7-wk5Uis.roa (hash: Abd/wjefE7vkaUeWVlpKIIf5AMjQUyEpIzPrbaUaKIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvrXVRUW8MTZEtoDE8mVyecU4Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:bc:c0:0e:8c:24:20:4a:f7:5e:48:d4:03:2d:d9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efad7551516f0c4d912da0313c995c9e714e09a
Validity
Not Before: Oct 17 12:01:09 2026 GMT
Not After : Oct 18 12:01:09 2026 GMT
Subject: CN=841ce2abd314997d890f800d2e5753bcb726bb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:4a:f4:be:97:bb:5e:7b:c3:df:11:76:5d:
7d:8a:7a:e5:ba:d8:cb:2c:e8:7e:48:7c:f3:7b:78:
bd:2b:b2:14:47:ae:3f:12:88:ad:5a:60:3d:a7:48:
01:9f:73:1b:d0:32:30:4a:86:cb:0d:8a:ca:a6:12:
fe:c9:9c:19:b1:59:05:d4:83:3b:43:3f:bf:98:df:
29:0b:94:0a:78:95:65:44:35:e7:4a:d3:c7:16:ac:
3b:42:3a:0a:3d:49:b1:4e:e4:5c:93:f0:93:f5:09:
43:64:09:81:fa:33:a8:df:0f:1a:d8:49:2c:9c:d2:
b6:00:42:bc:d9:7d:84:dc:90:2d:89:ef:45:ba:f4:
0f:07:4c:5b:3e:72:44:da:a3:ee:c3:48:9b:12:ab:
3f:0c:a3:60:3f:3f:64:7e:0c:cf:63:07:eb:97:73:
fd:04:e2:5b:3b:33:65:26:f1:15:75:fc:ac:69:b4:
87:4d:eb:d1:80:87:a6:ec:34:16:d7:dd:51:67:3d:
73:f4:f0:26:1f:67:81:73:37:10:fc:d3:bf:da:dc:
ff:a8:82:b0:e7:e3:5c:1d:5d:22:2a:92:82:d5:82:
75:65:c8:d5:04:16:e1:3f:52:15:2e:77:5c:ae:2e:
dc:8b:34:c8:f6:dd:74:38:6b:3a:31:eb:d5:d4:50:
0d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1C:E2:AB:D3:14:99:7D:89:0F:80:0D:2E:57:53:BC:B7:26:BB:0E
X509v3 Authority Key Identifier:
keyid:0E:FA:D7:55:15:16:F0:C4:D9:12:DA:03:13:C9:95:C9:E7:14:E0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvrXVRUW8MTZEtoDE8mVyecU4Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2a:25:89:ce:72:67:e9:90:8f:14:6a:27:40:2c:78:21:c3:
7b:3c:26:cd:5a:d2:3d:d0:32:44:57:1d:2d:a0:0a:0d:68:f5:
c7:2d:85:2b:3e:84:77:be:ea:1e:0c:85:c1:9b:53:c9:2d:38:
48:20:d2:b4:5b:eb:0f:ae:f3:e5:0d:ad:e9:5b:6f:39:a1:e4:
93:0a:82:56:03:6c:53:44:52:1f:91:a0:31:2e:1b:f2:a4:23:
7c:dc:ce:1a:53:9d:a5:05:97:28:f6:c7:a4:07:fa:fa:07:95:
3b:75:82:40:28:e8:10:82:a7:49:40:2e:9f:1a:75:16:69:8e:
e9:d2:d2:77:f2:19:7e:c5:a3:0a:03:7b:08:df:49:4e:55:ad:
e2:c6:11:ed:8a:21:e2:0c:fd:90:e5:30:75:13:ed:97:a2:13:
c8:52:a8:5b:97:8c:20:28:0b:5c:b2:5e:fe:c6:7d:fe:85:e4:
30:e7:8b:98:68:ac:9b:f8:ce:a6:08:32:77:e8:28:6f:ab:99:
48:bc:54:bc:42:e1:83:f0:5c:8e:8d:24:2b:27:8d:34:bb:5c:
6e:32:24:88:74:b8:46:31:cc:e8:e6:c8:59:8c:78:58:7a:1c:
51:32:c1:1c:14:74:76:9e:00:34:1e:ca:d5:52:36:da:cc:d6:
5f:18:fc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 21:30:17 2026 by rpki-client