Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
File: DxgybgAap_xW-DUxMVN2-equCYg.mft (raw, json)
Hash identifier: kDGJT9GxGt+WmcvkrFd1asfnM+YOY0R5S68KcTkKa1g=
Subject key identifier: E1:83:27:4B:CD:9B:92:83:71:4A:A2:D2:8E:CB:93:08:8B:B9:B5:1F
Authority key identifier: 0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
Certificate issuer: /CN=0f18326e001aa7fc56f83531315376f9eaae0988
Certificate serial: 01A13DB86F9A11BA9225823DBF51F47E9B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
Manifest number: 0D1C
Signing time: Thu 15 Oct 2026 04:00:59 +0000
Manifest this update: Thu 15 Oct 2026 04:00:59 +0000
Manifest next update: Fri 16 Oct 2026 04:00:59 +0000
Files and hashes: 1: 64Gcj0h8vNXf7GFNZxmMm2mfr1E.roa (hash: pu8wgjr4VrA4g+LsPAV0cojDn7FfUUvf2NSJDNpkiw8=)
2: DxgybgAap_xW-DUxMVN2-equCYg.crl (hash: fRIv7i1fnNvV7+JPwKxxjlkeKRr9U9sWN4ZMEqWk5k8=)
3: OtyG0WjLHxgUI-iQk8ihNnEXEfM.roa (hash: GlWW+c/cVj2N0GB90BwkmqV4TKDnrZJEURd8gG8a1Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:6f:9a:11:ba:92:25:82:3d:bf:51:f4:7e:9b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f18326e001aa7fc56f83531315376f9eaae0988
Validity
Not Before: Oct 15 04:00:59 2026 GMT
Not After : Oct 16 04:00:59 2026 GMT
Subject: CN=e183274bcd9b9283714aa2d28ecb93088bb9b51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:39:d4:40:bb:13:44:2b:fb:f7:4f:76:cc:76:
b0:f4:57:07:09:45:1a:c9:e3:2d:91:04:96:1d:50:
44:89:3c:45:ce:63:fb:0c:76:39:55:c4:bd:f3:10:
86:c3:be:c3:13:74:90:6d:50:fb:56:56:69:64:eb:
25:ea:37:9f:ac:29:64:e9:5a:c8:ed:95:c9:29:0d:
f5:d8:81:e0:63:23:4d:a8:2f:4e:63:b5:35:56:b6:
10:bf:82:06:f4:58:91:53:b1:62:b5:76:5c:a7:6f:
ac:22:d0:1f:d2:0f:57:3e:e2:29:19:4e:51:e2:25:
2b:d3:89:f5:7e:ce:85:e6:6b:c0:49:31:ba:99:51:
bb:65:b9:ce:35:7a:32:7e:c4:ed:65:a7:e8:61:23:
cf:e1:eb:cc:8f:d9:01:91:61:cc:59:e1:96:f8:46:
4c:9f:67:0b:e6:90:a2:3d:dd:c6:d0:a6:ac:a7:c4:
46:fe:f0:81:c9:b3:c6:16:86:4c:e8:34:e1:f2:77:
b5:7d:8e:e1:51:61:f0:f4:40:67:a5:40:cc:3e:1e:
d9:d1:47:15:88:a1:6c:15:30:45:77:0f:07:32:8a:
51:6f:f6:3d:36:fa:6c:8f:72:6b:5d:6e:ee:9d:94:
e2:3c:f7:36:00:90:a4:d6:44:49:f9:a8:3a:7b:24:
b4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:83:27:4B:CD:9B:92:83:71:4A:A2:D2:8E:CB:93:08:8B:B9:B5:1F
X509v3 Authority Key Identifier:
keyid:0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:30:59:21:20:e4:6a:32:ec:67:eb:ca:ad:ab:d1:2b:f9:e9:
e9:76:1e:41:bf:dd:5b:f1:6a:f4:f6:f2:22:12:01:10:a9:64:
38:1f:48:3f:52:ce:99:cd:6b:99:23:62:c6:75:51:2b:4b:55:
83:55:34:4e:87:ad:90:35:6f:3a:26:aa:cf:fe:a1:4a:cb:af:
c0:c0:84:aa:5f:d9:e7:87:b6:88:29:c5:4b:aa:51:a8:a8:9e:
73:45:9e:38:cf:e5:9f:31:bc:6f:ba:bc:21:ad:7b:fa:3d:c1:
87:77:8a:ce:e7:3f:66:06:87:44:89:43:d9:f0:a9:e0:9f:29:
5b:57:f3:6b:31:65:d9:da:76:44:15:0d:04:31:70:e5:c1:0c:
9b:44:9d:6e:85:db:f9:cc:1c:96:df:32:2c:28:cb:0e:97:34:
c4:bc:a2:b8:69:8f:2a:7f:1f:0a:8f:8e:5b:04:a7:21:72:6c:
6c:a9:cd:76:53:a9:da:c7:e1:80:55:19:8b:25:f7:d4:6d:17:
b5:35:8e:69:6e:db:21:54:96:92:b5:21:16:39:04:6a:c5:8b:
7b:2e:fb:35:28:4c:78:5f:9b:88:e6:d1:0a:cf:99:08:71:1d:
88:5c:7d:2e:38:d0:79:73:c6:81:34:b3:01:a9:d5:ad:d7:ba:
1a:5a:8d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:50:41 2026 by rpki-client