Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
File: DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft (raw, json)
Hash identifier: 7FPwcyvpYLwNOfvajsdoWy9O4ocSk7nyiJW2yZ0aAZg=
Subject key identifier: 1D:EB:0F:FF:B1:6E:37:A4:D4:1A:94:02:50:02:BA:9D:D7:4D:B5:C1
Authority key identifier: 0D:91:DC:30:C5:9E:AB:15:30:5E:C3:C8:BE:4E:52:CB:44:06:A9:2B
Certificate issuer: /CN=0d91dc30c59eab15305ec3c8be4e52cb4406a92b
Certificate serial: 01A0D76061C77B7A4B4015D426BF5029C2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
Manifest number: A2
Signing time: Fri 25 Sep 2026 07:03:32 +0000
Manifest this update: Fri 25 Sep 2026 07:03:32 +0000
Manifest next update: Sat 26 Sep 2026 07:03:32 +0000
Files and hashes: 1: DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl (hash: RteHv8vXE26Dw5KBB6c+cYpa5E3fQjglP9kkEPOb50o=)
2: G-iHoe7mwWpGmZKyDftprKnS8pg.roa (hash: 8M86BXdsas21dJjs/WQbp6DYixMlHiokbVFdj5Dah24=)
3: zg5WlcC4NX4gmrZjUBDsq1SjIJY.roa (hash: RBJVe3dHTZ47Sn+AGjBXy4sIQT9e7Zb35xuSCKcJGSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:60:61:c7:7b:7a:4b:40:15:d4:26:bf:50:29:c2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dc30c59eab15305ec3c8be4e52cb4406a92b
Validity
Not Before: Sep 25 07:03:32 2026 GMT
Not After : Sep 26 07:03:32 2026 GMT
Subject: CN=1deb0fffb16e37a4d41a94025002ba9dd74db5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:5a:ab:77:3e:0b:20:88:8b:ac:dc:71:ff:
9b:05:3c:55:30:e1:ce:7b:c9:ed:dd:fb:50:f7:bc:
2b:fb:ae:9d:b2:45:3f:83:95:55:da:52:d9:57:37:
0c:fd:a8:64:1d:4e:eb:51:12:08:3e:3c:9a:44:46:
35:c5:fd:cd:48:bb:28:81:be:9e:2c:9d:c0:c8:ba:
6f:53:35:2c:5c:4f:d5:9e:1a:33:54:7c:83:84:76:
57:44:ad:e0:cf:f7:70:3e:af:d5:5f:7a:b2:24:f7:
58:c6:b3:c5:45:39:e2:49:a8:81:85:6e:1b:ff:4e:
27:e3:85:3f:40:51:95:bf:39:30:7f:96:69:22:4d:
ef:d3:aa:7d:50:f6:64:42:3d:a0:e6:bb:7d:a0:88:
c6:55:c6:da:a9:6d:55:1d:4e:a2:f7:24:4f:7d:19:
8b:06:3b:d6:25:89:56:09:e2:f2:46:9e:b3:29:e8:
98:4c:11:22:bc:9b:a3:70:f3:90:45:5c:c9:ad:57:
4c:c4:1b:88:cf:07:b6:61:86:5d:c5:6c:42:0a:5e:
68:b7:ee:16:97:e3:36:68:5c:aa:f0:7a:f9:46:82:
21:15:02:9f:09:f2:7b:c4:36:ed:55:f4:e9:70:e7:
02:8d:67:e8:c5:4d:83:03:c6:f9:a8:8e:f4:39:76:
7b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EB:0F:FF:B1:6E:37:A4:D4:1A:94:02:50:02:BA:9D:D7:4D:B5:C1
X509v3 Authority Key Identifier:
keyid:0D:91:DC:30:C5:9E:AB:15:30:5E:C3:C8:BE:4E:52:CB:44:06:A9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d2:0a:7f:00:c8:eb:ac:6e:01:ba:5b:74:01:62:9c:71:54:
89:2e:4c:27:7d:05:a6:47:eb:e2:8b:71:c0:72:b8:88:ba:c3:
69:c1:66:a8:cb:7a:53:03:47:0c:b8:91:6e:8f:74:0c:50:69:
fe:48:14:b8:e8:a3:31:7c:1d:84:0a:6d:ae:15:e1:05:40:f0:
8d:3f:7a:7f:bb:72:53:72:76:28:9a:bf:84:8a:fe:a3:6c:10:
02:9f:62:55:34:0e:22:dc:b9:a3:c4:2d:03:24:cc:84:6e:8f:
5d:c3:06:3a:bb:dc:8a:e5:41:45:4f:ee:8c:e0:93:b3:97:44:
7c:5b:bc:c0:33:3c:00:15:65:0a:ad:85:78:27:11:1d:ef:45:
a2:7f:93:6e:7c:d9:6b:b3:04:c2:fc:85:80:43:65:06:79:08:
8a:8f:f1:78:9a:ba:bc:8e:74:1a:96:af:dc:b7:27:04:e0:e9:
33:55:61:2f:8f:4e:04:06:4f:a4:55:0f:14:dc:d0:84:cc:72:
1f:4b:a8:df:dd:51:73:d4:42:7d:bf:a7:39:57:30:02:ce:8a:
d2:9c:ea:1d:fe:29:ec:7d:d4:8f:fc:6f:3f:7b:67:05:93:67:
ad:f5:5a:59:a4:ff:40:26:d8:de:2d:18:f1:d0:6a:8f:0e:26:
0b:45:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:38:26 2026 by rpki-client