Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: SJbnbNFQ7Eek3ed7ssqE3aZQA03e19WR0w57gZ5r654=
Subject key identifier: 00:66:14:32:7F:66:D8:2E:AC:DF:2A:E3:BB:AF:49:5B:E0:C4:43:64
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 01A12B0D78CE69CD9600BC5AFB8CD06DA245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 198C
Signing time: Sun 11 Oct 2026 13:01:05 +0000
Manifest this update: Sun 11 Oct 2026 13:01:05 +0000
Manifest next update: Mon 12 Oct 2026 13:01:05 +0000
Files and hashes: 1: 2lfnmN1-dLZH09vmQWL0x_KLc8Y.roa (hash: JmmqwM4dV5ZCDyqAq/Au9vdb5ogccNfE+4IrV1SqD54=)
2: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: 6GOGFGGdh7oupGpIb4/7vbn58h+IOS5fUpJdt3mCcvw=)
3: cpBLfVVbG2Bg4TA77UzT5VjhgRE.roa (hash: N0d6jFAymHdRViLXYwxHMPIvLpjH51TdzFY5Ek5D56g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:78:ce:69:cd:96:00:bc:5a:fb:8c:d0:6d:a2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Oct 11 13:01:05 2026 GMT
Not After : Oct 12 13:01:05 2026 GMT
Subject: CN=006614327f66d82eacdf2ae3bbaf495be0c44364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:9f:e0:af:bc:41:61:43:86:68:d5:f7:d6:
86:7f:56:65:71:76:91:9f:d2:38:70:eb:1e:9a:70:
25:99:36:23:a4:08:a6:53:4b:1a:01:34:b4:2d:42:
ff:50:be:20:04:91:fb:17:6a:d9:3e:37:21:e7:69:
b9:d2:84:de:b9:9e:42:f6:af:5c:68:3f:f5:f5:89:
d6:df:6f:c3:f4:a2:0a:17:48:44:57:75:80:28:0f:
7f:8b:4e:36:6f:9a:c3:22:f5:97:9d:ec:6d:79:1a:
39:f0:12:70:71:73:b1:21:6c:d2:21:66:43:e0:b1:
25:fe:d0:d4:2c:bc:4b:35:7d:60:11:8a:9e:e0:10:
1a:eb:8b:42:0e:00:bb:a1:40:f2:cc:f4:8a:b8:38:
59:da:88:0b:fd:5b:06:65:81:04:e0:61:cd:c7:26:
d7:49:b3:6e:f4:4b:77:08:6e:e1:88:39:d5:7b:6e:
57:18:d1:ac:bd:80:3c:d3:b0:53:66:ce:bc:7a:4e:
40:e5:71:04:e3:a4:85:18:91:5f:d1:39:b8:01:0f:
a8:7e:fb:55:c0:68:e3:28:b6:09:5b:c2:e2:55:5e:
c1:35:53:34:c0:ca:65:ca:3c:40:44:a6:84:0a:7d:
7a:ea:a7:a6:e4:0c:e8:13:f9:18:ee:26:85:37:a5:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:66:14:32:7F:66:D8:2E:AC:DF:2A:E3:BB:AF:49:5B:E0:C4:43:64
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8f:98:53:80:ac:46:75:45:15:57:51:7e:d3:ef:09:dc:77:
f7:72:3e:f3:3d:dc:ea:63:67:42:d2:60:e0:31:3e:a0:73:af:
3b:f4:44:4b:d9:07:56:94:68:17:3a:83:c3:0a:ce:89:12:d6:
54:39:20:c6:ed:3e:29:0b:f2:c8:f2:3f:0e:98:09:2f:04:8a:
ef:a1:04:ef:32:02:9b:20:0b:7e:fe:af:4d:cc:27:56:2e:9a:
ad:41:d8:36:c8:88:29:c9:87:b0:36:b4:93:db:da:8b:f2:64:
a6:34:70:9e:4b:d7:32:17:88:71:8f:ad:08:e4:d6:fe:2a:2d:
9b:ce:c0:d6:7a:1e:11:da:64:ed:25:12:5c:c3:65:9c:f5:ed:
16:6b:94:84:31:39:77:2b:8d:db:66:81:4b:0f:15:a2:a1:6c:
da:15:6a:72:54:36:a0:a0:52:b7:b2:57:9e:80:e8:23:2b:0d:
f4:90:69:3a:b5:b5:71:27:00:18:da:25:7d:bf:0e:6e:59:28:
df:d3:c4:44:50:5a:73:90:d8:99:92:28:f0:5f:c5:48:0d:ae:
56:8e:35:e3:58:d4:b0:bd:2f:89:7b:da:3d:bb:76:77:b4:92:
0a:9a:74:fb:60:1a:ec:25:41:89:8c:9d:d8:47:b7:4e:81:f6:
b1:36:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:06:22 2026 by rpki-client