Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: hMywqQEdvC49Et75hVSxV2ugAFyDgJh+lOR6IFWUsI0=
Subject key identifier: E1:12:89:BE:25:F7:D7:FF:54:08:B8:FF:1F:39:84:8E:12:B0:C8:C4
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 01A0C70E8CAEEB9B0D1606D14B5DE16A0576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 14FE
Signing time: Tue 22 Sep 2026 03:00:14 +0000
Manifest this update: Tue 22 Sep 2026 03:00:14 +0000
Manifest next update: Wed 23 Sep 2026 03:00:14 +0000
Files and hashes: 1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: P9p5PIxa1asBjEJN4fjemlET2C/7W81Hlov+KyDbmNo=)
2: KRcQChyIkdk17z-o88DTXwkNu_Y.roa (hash: k4ZBkPTraQNZ31kK5NnaOy56WVAVKO/c8Q/xt3FDIoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:8c:ae:eb:9b:0d:16:06:d1:4b:5d:e1:6a:05:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Sep 22 03:00:14 2026 GMT
Not After : Sep 23 03:00:14 2026 GMT
Subject: CN=e11289be25f7d7ff5408b8ff1f39848e12b0c8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:10:24:33:21:57:43:46:d3:69:3a:f8:c8:38:
85:1b:87:c4:18:e5:91:9a:44:c6:7f:2f:5b:50:c7:
da:a4:a4:81:8c:1d:80:e9:1a:df:85:b1:2c:25:b9:
2c:f2:ed:64:5d:7c:4a:3f:84:e8:3e:ad:2a:5a:05:
33:55:0a:34:1b:24:f8:fb:a2:43:a9:5a:92:db:ef:
9c:e4:b1:f9:a9:b8:96:24:9f:c2:50:c1:10:25:ff:
0b:5a:bc:11:8e:b4:a7:f5:b4:4e:8a:14:53:5c:33:
af:6e:44:30:4b:3a:60:a4:71:68:fc:43:62:b3:36:
4d:73:e2:d6:f5:36:4c:69:b5:92:ee:ca:a8:e4:8d:
93:a6:cb:9a:17:80:44:b2:26:02:08:bb:25:c6:9d:
b5:b5:39:20:00:5d:fc:b5:06:16:9e:0c:5f:65:f2:
26:f8:d0:06:a7:47:23:70:48:43:6e:15:e0:16:34:
f1:44:fa:ba:56:9d:fe:62:2f:29:46:0d:69:68:6d:
17:c7:3b:1e:a2:80:37:50:02:56:a3:05:29:9d:25:
7b:68:1b:63:b8:60:74:dd:21:d6:a9:47:64:72:40:
d5:bc:59:dc:4c:ff:b9:46:d4:3e:ca:a0:16:2a:af:
9a:c4:96:0c:7a:e6:35:df:17:70:ef:d8:81:ae:b1:
ea:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:12:89:BE:25:F7:D7:FF:54:08:B8:FF:1F:39:84:8E:12:B0:C8:C4
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6a:f0:a7:52:e3:e5:77:5a:08:bd:06:3a:5c:9e:27:9c:1d:
e0:20:d6:73:0c:51:1d:32:a9:bd:fe:de:80:b0:12:9d:3c:7e:
b0:5a:b4:b8:18:f9:77:45:6a:5b:54:32:69:ed:49:57:66:4c:
f4:ae:ce:bf:72:8c:9a:d3:d2:bf:9b:e7:57:c2:cb:f8:ad:38:
fa:e7:e3:c5:eb:9e:68:72:3c:9b:4f:7a:12:96:2d:5f:cc:87:
8e:cf:26:f2:94:ba:c1:43:96:b0:57:65:cb:e9:36:40:e8:b3:
32:b7:a4:3e:5c:5d:c0:e1:a6:3a:ea:aa:81:44:b4:02:1e:48:
dc:7a:8f:2e:20:ab:02:b4:d4:6b:7d:9f:2e:52:74:fb:78:7d:
f2:f7:da:b1:95:0a:0a:f1:49:dc:45:0d:28:37:0a:dd:71:c6:
30:ed:1f:30:f9:51:9e:51:a7:10:50:ca:5f:4b:48:ce:ce:58:
55:70:0b:97:07:15:47:50:ca:9e:ad:d7:92:e9:a4:5d:37:b6:
95:08:5f:61:87:25:a0:e3:83:a0:08:79:59:cf:9b:24:c6:25:
58:e8:20:1f:bf:ec:4e:8a:3d:91:05:bf:d0:77:ab:8b:c3:17:
03:46:88:9d:2f:83:ae:ba:2d:5b:cb:39:90:b1:bf:3b:19:5f:
e9:dd:fb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:31:18 2026 by rpki-client