Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: 2K4A2w5ZpjLX7ntVU38rRExgdHj0o23DGWUcnm2w5ok=
Subject key identifier: F0:24:39:92:43:C3:30:AD:59:A6:CA:9B:DB:43:39:CC:C0:4B:87:34
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 01A0BDD4BCADCA5294790C22827C6C151A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 1A64
Signing time: Sun 20 Sep 2026 08:00:30 +0000
Manifest this update: Sun 20 Sep 2026 08:00:30 +0000
Manifest next update: Mon 21 Sep 2026 08:00:30 +0000
Files and hashes: 1: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: LYOmxv3Gpt9dM+t0UYZnk6/Lu8I0LOsgwhAw9DWX7QQ=)
2: vWKPs1EksdLNehXFmCXDKSULnXk.asa (hash: yNn9JtBbsWodt41KzrmjveQKUch9zXpyA0sczkLauf4=)
3: yV3n7Of-XfxujJs_oZpOk9T5zxc.roa (hash: RWU+lLoWMG+Uf+PGBYW1EPxQGP3cMIviVCgLyu7si9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:bc:ad:ca:52:94:79:0c:22:82:7c:6c:15:1a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Sep 20 08:00:30 2026 GMT
Not After : Sep 21 08:00:30 2026 GMT
Subject: CN=f024399243c330ad59a6ca9bdb4339ccc04b8734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:b0:02:95:39:01:db:aa:02:92:97:c2:96:
e7:a3:5c:b3:af:f2:34:34:27:92:26:ad:1d:98:b8:
38:5a:7d:c7:1c:b5:58:aa:12:2d:ad:f0:f6:3a:0e:
39:db:cf:d0:64:af:dd:23:76:08:6c:20:ae:b2:f1:
19:6e:db:8b:19:d3:25:9d:0e:04:52:dc:86:1c:df:
12:03:4d:e5:5b:e8:2e:2d:5c:e7:86:96:f0:2e:1c:
8a:1d:71:3c:2a:fd:da:fd:22:d9:95:da:27:4e:b0:
a8:ec:7a:5f:ad:03:50:00:f0:5d:37:ea:e2:fc:19:
51:8b:d0:72:41:8c:ee:92:2f:b7:f3:70:bd:de:16:
29:08:53:b5:f1:4e:41:5b:df:3f:59:ac:c1:68:11:
3f:26:78:2a:ce:47:a2:b4:e3:dd:54:55:b2:ac:30:
0c:e4:04:b1:57:6f:48:44:fe:3e:b6:ce:78:78:62:
41:11:4b:1e:b0:ce:98:31:f0:8d:5d:c2:e4:18:50:
30:84:46:a3:ef:06:2d:3b:62:2b:8b:53:e6:0d:5e:
2e:fc:39:5b:86:d0:30:00:e7:52:c2:6b:1b:e8:a7:
3c:25:17:68:f5:68:40:bc:6b:e3:9d:6a:6d:79:e6:
ce:1a:8b:06:1b:db:81:ad:a8:3e:78:7c:37:2b:c9:
a9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:24:39:92:43:C3:30:AD:59:A6:CA:9B:DB:43:39:CC:C0:4B:87:34
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:83:37:67:f8:e5:e9:06:07:b9:72:ee:52:de:62:9c:45:73:
a8:55:34:ee:44:11:fa:ba:b0:3a:46:2f:e4:4e:e2:93:c5:90:
c3:20:22:64:0c:02:15:72:7f:3f:3d:33:58:38:cf:a4:e3:93:
76:0c:89:45:dc:d0:9f:af:3c:6d:89:96:34:45:d6:27:2a:4f:
ed:c8:2f:f8:29:0b:b2:0f:6d:20:f0:5b:02:3f:34:fe:f3:75:
47:01:17:5d:78:16:c7:df:e3:8c:54:f6:2e:ab:6c:72:8b:fb:
81:52:f7:6a:44:c7:ea:f2:f6:95:f2:10:6b:6c:19:4c:f4:19:
8a:0d:ba:a6:d8:bf:ed:d1:0c:74:0b:92:06:83:b6:24:7b:a0:
99:fc:18:4b:6b:33:77:06:d5:6c:3f:4c:27:3b:31:f5:b4:78:
5a:b5:c9:90:a9:d9:81:44:70:6d:31:43:4f:c4:85:58:a6:f1:
d5:87:76:f4:e0:6a:23:22:1a:d8:7f:8d:67:79:f4:ff:4c:24:
e6:18:be:2e:f5:22:a2:c4:3b:01:b7:d9:92:05:1e:f4:c6:b9:
20:0d:b6:a3:60:dd:d2:f3:40:5a:0d:e2:6f:13:69:e5:ef:4f:
58:61:e2:36:3f:cd:40:5f:3a:1a:e5:9b:05:9f:73:85:64:0e:
0e:1a:87:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:52:14 2026 by rpki-client