Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/bDCQKpBgs0dFVcTN_QDm_KuBq9w.mft
File: bDCQKpBgs0dFVcTN_QDm_KuBq9w.mft (raw, json)
Hash identifier: ip3GxrFZQrxRO3gbZ4gOWy94JXRtyV2jv4owX3l+zbI=
Subject key identifier: D0:56:F8:EB:E9:6F:CD:AE:52:0F:FB:A1:7A:0A:5F:74:86:88:03:93
Authority key identifier: 6C:30:90:2A:90:60:B3:47:45:55:C4:CD:FD:00:E6:FC:AB:81:AB:DC
Certificate issuer: /CN=6c30902a9060b3474555c4cdfd00e6fcab81abdc
Certificate serial: 01A0D727E2B12A63EDD4DA29133AC7828B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDCQKpBgs0dFVcTN_QDm_KuBq9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/bDCQKpBgs0dFVcTN_QDm_KuBq9w.mft
Manifest number: 0A
Signing time: Fri 25 Sep 2026 06:01:50 +0000
Manifest this update: Fri 25 Sep 2026 06:01:50 +0000
Manifest next update: Sat 26 Sep 2026 06:01:50 +0000
Files and hashes: 1: bDCQKpBgs0dFVcTN_QDm_KuBq9w.crl (hash: 7IQmVpPu18rDtFESxJLdeTsbcrkLBDYip8opx9WGEgQ=)
2: hUZPNrZM_9jjOFJ8M9g3XrM_dlQ.roa (hash: qfVHrsh37XWbtKi2jegl60I9sTQqtPhRR5+aHwasfEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/bDCQKpBgs0dFVcTN_QDm_KuBq9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/bDCQKpBgs0dFVcTN_QDm_KuBq9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDCQKpBgs0dFVcTN_QDm_KuBq9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:e2:b1:2a:63:ed:d4:da:29:13:3a:c7:82:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c30902a9060b3474555c4cdfd00e6fcab81abdc
Validity
Not Before: Sep 25 06:01:50 2026 GMT
Not After : Sep 26 06:01:50 2026 GMT
Subject: CN=d056f8ebe96fcdae520ffba17a0a5f7486880393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:ef:25:2e:11:44:a3:73:25:cd:6f:5e:b0:
eb:4f:df:d5:5e:5b:3c:9f:03:17:a7:f1:b6:37:6b:
c0:b6:74:21:59:34:d2:bc:f2:4c:fd:4e:6c:3b:6a:
6d:64:a9:2f:28:06:f6:34:29:a0:b4:8b:76:1d:db:
1f:4c:47:ea:51:6a:a8:8b:9c:0a:a2:c8:5e:de:7b:
2c:9f:b7:32:8f:c2:7f:02:0f:7e:22:6a:eb:7b:a2:
e2:6a:cd:67:36:d1:56:90:8f:4f:f3:60:71:b9:b3:
bb:c7:ca:26:11:9a:e0:90:e4:04:de:84:4d:43:55:
4b:30:29:87:d9:bb:f5:38:0c:e1:a4:32:41:49:ef:
67:b0:20:8b:e3:1c:c2:3c:63:f8:01:12:fc:7f:aa:
3c:bc:9c:e4:b8:96:09:67:fe:ff:dd:ff:cc:4b:01:
91:62:c1:10:1c:0f:60:cf:c5:93:8a:18:9f:f4:86:
c5:e6:96:46:90:90:31:e0:31:d9:5d:60:4b:36:5c:
dc:97:4c:cf:47:7c:cb:fe:87:43:b9:4d:2a:16:05:
f8:9f:47:04:3c:ed:c0:bb:5a:e1:96:71:eb:0d:b0:
39:07:e0:2d:79:22:9a:32:02:5a:bc:53:34:85:11:
89:c0:97:07:76:94:a7:9a:5d:2f:c7:ad:39:a2:90:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:56:F8:EB:E9:6F:CD:AE:52:0F:FB:A1:7A:0A:5F:74:86:88:03:93
X509v3 Authority Key Identifier:
keyid:6C:30:90:2A:90:60:B3:47:45:55:C4:CD:FD:00:E6:FC:AB:81:AB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDCQKpBgs0dFVcTN_QDm_KuBq9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/bDCQKpBgs0dFVcTN_QDm_KuBq9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ee6c8a-7409-4ca5-bb00-dda25694f5d8/1/bDCQKpBgs0dFVcTN_QDm_KuBq9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8c:70:62:8a:a0:2c:51:88:c7:9f:ca:7c:70:e1:c2:17:ed:
9d:f9:7b:e7:c5:48:b6:03:a7:30:cf:bf:e0:07:2a:33:64:4f:
c5:36:68:41:a4:3c:9c:e6:7d:ca:fd:1c:1b:0e:c4:bc:71:bb:
50:49:31:b1:95:38:7a:fe:34:a3:5c:ec:d4:c4:3a:f2:79:48:
d6:07:80:c4:e5:ee:3e:55:2d:b2:1b:ba:f1:14:53:6a:75:95:
ba:e6:3c:0d:43:19:03:39:2c:e7:dd:4b:e9:05:11:81:32:86:
7c:41:4e:88:68:23:b1:ec:85:80:8f:b6:39:84:60:61:65:55:
f8:0a:77:95:cb:c9:ec:bb:b4:85:6f:13:67:cc:82:1d:42:12:
b9:ae:1a:07:e0:78:ff:c7:0f:44:41:a7:6e:1c:f9:72:97:61:
66:c9:55:21:78:c6:70:1f:46:6b:28:ea:0e:91:07:67:db:fe:
76:b1:06:d5:04:8d:59:94:4c:d4:a7:5e:bb:9b:04:4b:60:0c:
62:b1:c1:cd:8e:82:4f:5b:a2:87:4c:be:3b:d3:ed:1b:0d:79:
bf:79:a7:d5:d0:b4:72:63:5b:9a:02:19:04:ed:f1:94:18:01:
be:40:1b:36:ee:04:93:be:4a:40:55:ed:ef:8d:b2:e4:62:f0:
79:7f:5d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:48:07 2026 by rpki-client