Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: pQ2kncum8DI8xqtImSrFiUazx8thNXGkDm35DmBSwJY=
Subject key identifier: 97:0C:2A:7D:AA:08:E2:4A:7F:21:4E:4E:37:CC:25:6F:31:77:48:36
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01A1DCF0604EB8BDB99690D08E2170F13811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 1B7B
Signing time: Sun 15 Nov 2026 02:01:43 +0000
Manifest this update: Sun 15 Nov 2026 02:01:43 +0000
Manifest next update: Mon 16 Nov 2026 02:01:43 +0000
Files and hashes: 1: HTJC2qZTBYDhGgfALmgUlKoz0kM.roa (hash: Vg72KYq8FpDkXlgW/uLekPa+EBrW49AgOGqNznkZa4Y=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: fCX7x34bPQOLH97Z2Jj/BkApU4mEvci8BtEk3nbpicA=)
3: tZk_CaKCryAvJRReN7aPc9CJl5Q.roa (hash: GDF5SYSr5M1uY12BBc2vpgU4RwEGW3L9n697ONqnZ8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:60:4e:b8:bd:b9:96:90:d0:8e:21:70:f1:38:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Nov 15 02:01:43 2026 GMT
Not After : Nov 16 02:01:43 2026 GMT
Subject: CN=970c2a7daa08e24a7f214e4e37cc256f31774836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:8a:2b:82:9c:cd:a4:3d:70:17:40:1a:b8:
33:ba:5f:a9:55:9b:c5:88:7f:52:dc:93:5c:e8:b6:
a7:18:47:7c:92:e7:3e:be:95:dc:bf:de:d5:71:64:
81:59:e1:6d:c0:56:fd:6e:36:31:a3:a7:94:12:0d:
eb:17:40:be:91:40:20:8e:c5:f1:db:08:fe:b5:d0:
7a:8e:50:c4:e6:41:19:32:f7:1c:a7:eb:6c:48:9f:
02:4b:30:93:8c:47:88:71:dd:67:c0:43:88:a3:b7:
ed:d1:bb:ff:cf:48:d6:6f:8d:a3:94:c4:3c:50:38:
22:bd:dd:5d:53:a8:7f:2c:ee:18:ac:06:b4:72:0f:
a3:0f:d3:54:5f:29:ed:1b:04:eb:ad:ff:a8:1f:03:
2c:3d:6b:e8:89:16:fb:c2:f8:6f:77:61:e3:93:9e:
bc:9d:25:ba:2d:3a:30:e0:9a:77:5d:1c:67:09:87:
60:6b:89:e2:49:36:f4:5d:aa:8c:17:00:43:f4:9b:
6c:32:b8:ef:90:e6:ee:d9:a8:55:c7:36:65:7b:eb:
8c:20:2e:2f:61:ce:ab:44:1f:a9:86:eb:8f:15:3f:
3d:81:8a:3c:ec:fe:7b:ec:f1:c3:af:4f:eb:cf:ea:
82:4c:4b:ba:81:2a:01:02:d1:09:24:3e:d7:49:9b:
5b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0C:2A:7D:AA:08:E2:4A:7F:21:4E:4E:37:CC:25:6F:31:77:48:36
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1b:b7:b4:a7:5f:25:50:9e:21:a0:c3:56:28:95:42:57:4d:
a8:fb:fa:48:01:60:ab:3c:43:b2:c8:52:41:6f:28:f8:e9:e5:
88:48:15:bb:b7:29:39:e6:09:12:b3:d1:17:19:40:5a:77:88:
1c:6f:b5:85:7b:5b:51:ac:b4:59:4b:84:fb:f7:5d:f8:cb:d2:
94:0c:71:6b:7a:07:3e:c8:be:18:fc:ad:25:a2:e2:ab:31:ad:
89:7d:7d:e3:86:96:ef:31:35:27:98:7f:42:5d:e1:11:7a:d7:
88:68:45:72:ec:a9:c7:2d:ca:df:48:bc:16:9d:22:d2:59:72:
ff:fa:05:92:9e:94:e0:b7:db:2a:04:f6:34:19:84:ad:55:e5:
7c:80:ce:99:79:12:63:82:0f:31:fd:4f:10:97:bd:b3:ca:3a:
a7:0e:fc:47:24:95:d3:5d:35:65:68:6f:2e:53:d1:bd:be:4d:
f2:27:94:07:54:e8:e4:fe:f6:ab:79:c2:3a:e8:d1:5b:94:c6:
24:02:b5:78:d8:7d:b1:6a:63:88:f4:bf:71:72:d2:7d:c5:d2:
e2:ea:bd:fe:bc:16:c0:2f:94:8f:e1:c7:a0:37:ee:03:73:25:
79:e6:0d:24:72:12:62:f7:e1:bb:76:ca:9d:28:41:9e:10:e0:
58:48:49:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:32:06 2026 by rpki-client