Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: mTEU1WwCOA/BjgOTKWrpRo8bgTXM6mLA4SYUtTzy4tQ=
Subject key identifier: FF:35:F2:65:F8:72:1A:0E:3F:6C:C3:FC:84:55:ED:58:BF:19:5A:AF
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 01A0EEC1981409AB2DE108008EA8C29BBCCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 1086
Signing time: Tue 29 Sep 2026 20:00:59 +0000
Manifest this update: Tue 29 Sep 2026 20:00:59 +0000
Manifest next update: Wed 30 Sep 2026 20:00:59 +0000
Files and hashes: 1: BCXtQModd3nAhdeMkRMBuZx_cZc.roa (hash: jtOOBxUO8skySjopVxcruyx6WiDS/7xnyuAQI3lDFqk=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: lSrYYuqDIiV++ESbVuogK1ALVo56ooyA8cpOum11yd8=)
3: L9a6XlmixBDgTngX3OesnHMjCvQ.roa (hash: yfr3OyuPpoSecdibTgJg+ch8pCeShfs+7iwZpZSIKv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:c1:98:14:09:ab:2d:e1:08:00:8e:a8:c2:9b:bc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Sep 29 20:00:59 2026 GMT
Not After : Sep 30 20:00:59 2026 GMT
Subject: CN=ff35f265f8721a0e3f6cc3fc8455ed58bf195aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:4e:22:88:b2:c5:ce:27:19:20:5d:b3:be:
ed:15:49:ce:00:20:c9:e3:27:c7:40:42:28:29:b5:
b6:69:a6:73:3b:ff:33:d4:54:fd:10:6c:c8:1a:d6:
3c:6f:db:0b:bb:0c:ff:0a:5c:05:b1:de:24:06:83:
8c:87:44:83:8d:33:d2:02:3e:19:42:fa:c6:0d:d3:
39:d5:6f:ee:86:fa:ae:ad:9c:0b:d7:8b:87:04:03:
87:52:f5:9a:0b:ba:e2:32:c0:6a:ba:27:f6:60:4f:
12:88:2a:ff:5f:14:f1:86:3a:1c:50:22:c8:f5:77:
34:a9:b2:7b:1a:bc:0d:3f:46:f5:46:80:21:ea:7b:
50:81:fd:c0:96:13:af:5b:d8:83:a8:e4:4f:e4:1d:
07:bc:1f:71:9c:87:7d:b4:6b:b7:9f:ac:0d:65:6a:
19:c4:72:9c:7a:a8:a8:71:bf:02:2e:ad:75:b9:71:
ed:7d:61:61:bc:40:74:45:d5:8b:55:f0:2d:84:a2:
3d:9a:80:33:40:8c:7b:01:4f:cd:f6:f4:e4:4b:a1:
9c:0b:6f:a6:0f:e1:bb:1b:47:85:54:d5:c8:38:2b:
c5:f1:38:22:93:45:8b:98:4e:93:19:76:8e:3e:72:
59:c0:46:43:47:2d:da:dc:6d:f6:90:8e:f7:39:f3:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:35:F2:65:F8:72:1A:0E:3F:6C:C3:FC:84:55:ED:58:BF:19:5A:AF
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ae:dc:4f:5b:dc:35:b4:a9:97:9c:f8:ca:a9:08:64:69:f3:
2e:4d:95:9e:f1:83:00:71:54:3c:80:48:9f:83:1f:66:41:c3:
a5:43:8a:73:05:fb:0d:c4:4c:97:1a:4b:17:48:c9:7c:f9:c4:
67:a9:03:35:d2:d9:df:cf:ad:27:34:ff:3a:fe:13:92:b4:c2:
d0:08:e1:b0:f7:50:f9:78:97:79:ab:0f:47:8d:3c:81:f8:88:
ff:93:e0:a2:81:e7:00:de:aa:45:3e:61:0c:52:85:0e:2a:24:
19:d5:8c:be:2b:94:af:a6:9b:30:15:61:60:c0:fb:28:e2:77:
0f:99:57:39:6f:46:d7:1b:55:d9:2a:d6:af:e4:2f:c1:29:3f:
bf:d9:33:c6:16:5f:ff:59:3b:6a:34:1e:da:72:c2:e4:af:ff:
8d:35:f0:37:2f:d0:e9:f8:39:92:02:7e:0f:d5:7a:bb:78:c6:
5c:85:ac:bc:66:fc:a7:d9:3e:be:fc:35:ed:fd:00:fc:ba:4a:
c8:73:57:b9:29:5d:7f:8c:23:27:4a:f9:85:be:59:1d:05:a9:
a8:a9:80:98:6c:87:20:ad:b3:5f:c9:61:8f:90:81:ae:cb:04:
7f:58:56:cb:45:60:8b:0a:11:5d:3a:24:1c:06:b8:3a:cc:85:
ae:f8:08:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 02:13:51 2026 by rpki-client