Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File: dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier: /Nd0tJSmkHmDl9+iRkH9qdK8Pmu3lsRR3V8nJKoYIGw=
Subject key identifier: 20:7B:70:E7:11:4B:7C:31:EB:2D:8C:17:6E:6A:ED:71:8D:2F:BD:27
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial: 01A0D9BAF07FD8D01971EF5546D8F9D9F2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number: 13C7
Signing time: Fri 25 Sep 2026 18:01:42 +0000
Manifest this update: Fri 25 Sep 2026 18:01:42 +0000
Manifest next update: Sat 26 Sep 2026 18:01:42 +0000
Files and hashes: 1: 24LmoNlDA3mTST7ILFjXRoavbLc.roa (hash: ChZQ2voHnXOpu6Bgdd654y5XHIYOuPkH15v1qaYadLA=)
2: RDZxalDBba-KXcD-MDsp1kF4DmQ.roa (hash: RfbDrqRTWuSJ+e1Z40xGqlEQmsc4zVr3kOeTExU0ca4=)
3: _I5ZyNzs_5Q4toW0cmKShzzyGvc.roa (hash: CAZwJiEdqc66XP0aQOYr0r6o81HABrE7ATqPwsQle/M=)
4: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: MHwkZ0akM6yLn0cBrSQdhHXC+oUb1EvHrEBmmc1OtEc=)
5: iB4-Lv4Y5pfev06wgUUTf3MkuqE.asa (hash: v6oTaVMB32ysT0WuXZ0EG1XMy1UYjDtrDIPZoAi/1TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:f0:7f:d8:d0:19:71:ef:55:46:d8:f9:d9:f2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Validity
Not Before: Sep 25 18:01:42 2026 GMT
Not After : Sep 26 18:01:42 2026 GMT
Subject: CN=207b70e7114b7c31eb2d8c176e6aed718d2fbd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b9:18:00:35:92:a7:78:f2:95:37:57:3d:2e:
89:0e:e8:3a:a1:b4:80:1a:ac:6a:3c:44:84:aa:85:
1e:5a:67:6e:4e:30:7a:34:16:88:71:72:0f:de:c0:
95:eb:7b:cb:31:66:8e:8b:59:5c:4d:78:e1:82:d4:
80:20:aa:45:6f:43:a8:9e:43:c1:dc:39:4a:3e:27:
fb:db:c3:a9:a3:00:af:17:2e:05:52:21:3f:15:fb:
e5:df:0e:df:9e:79:3e:f0:0b:a1:95:85:ad:93:db:
f2:17:bc:4c:94:21:4a:c9:9c:c9:14:65:39:3e:f3:
be:11:77:d8:3d:80:d1:31:13:5e:28:14:0f:b9:44:
5b:5a:ca:e5:3b:10:d2:f6:7c:3d:1f:3c:e1:75:cd:
c8:f4:dc:87:a9:64:44:3e:41:97:a1:37:73:47:41:
cc:3d:94:77:a6:c5:65:a0:4f:02:96:19:b8:d8:67:
77:25:48:7f:0e:cf:6b:cc:0a:0e:cd:70:7c:6d:ad:
38:c9:56:57:fc:50:d2:83:1b:d8:1f:00:af:51:ee:
0a:2e:37:ae:1b:6a:f7:ff:1b:16:d2:eb:95:5a:31:
60:61:ca:cb:b1:f3:01:a6:ca:8a:a1:b2:f1:d5:18:
1c:52:3c:a7:38:f4:65:5f:6e:b3:ee:de:7d:66:cd:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7B:70:E7:11:4B:7C:31:EB:2D:8C:17:6E:6A:ED:71:8D:2F:BD:27
X509v3 Authority Key Identifier:
keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:47:ac:c2:d9:0b:35:14:68:e7:d2:2d:db:b4:89:e5:e0:b9:
93:b3:36:1c:32:d8:ca:f3:56:16:c0:14:34:bc:74:14:fd:13:
7e:28:78:b0:71:18:38:ef:eb:76:1d:61:8c:93:4d:b5:2f:c6:
89:09:27:b5:4f:24:f7:3c:ad:00:36:2f:3f:90:db:37:07:1c:
a9:05:94:db:b8:44:ff:07:31:0a:fc:07:45:7d:95:4a:79:bc:
30:9b:68:43:33:a3:cb:5d:72:fc:00:6b:5c:c6:ab:97:36:22:
f3:57:a8:b5:75:db:40:67:ac:16:8f:18:e4:e3:db:e9:35:47:
af:70:d6:87:31:cb:86:a8:76:0f:9c:9e:a3:7b:56:61:34:0b:
b8:ac:c6:b7:21:ea:73:98:db:4c:2a:ea:6e:32:6c:e7:9d:db:
7e:79:e4:fe:a3:82:58:0d:92:c3:32:91:5d:c3:9a:d1:f6:47:
d7:90:79:5e:b8:10:0d:ec:b1:59:65:29:0d:ce:e1:81:77:97:
fd:2c:df:7b:e8:df:82:83:a4:9f:05:c4:a3:b8:5b:f1:23:2e:
9d:d5:c8:a9:06:91:39:4b:31:f2:61:e2:bd:d7:3f:85:7c:2c:
9a:42:a5:fe:f7:32:99:64:3f:09:a4:45:27:b7:29:cd:00:6f:
7a:fc:d7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:25:14 2026 by rpki-client