Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
File: DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft (raw, json)
Hash identifier: Ik2MJvPfmTcg2nWa1TXtvamVxiTldvv9chtDWRLBfqY=
Subject key identifier: 1C:03:BE:32:E6:A5:B6:1B:EE:A3:18:26:5D:5C:E6:6D:8F:7A:E8:ED
Authority key identifier: 0C:56:23:4B:C7:3D:0C:AC:81:96:11:CA:DE:29:87:48:22:FF:5D:54
Certificate issuer: /CN=0c56234bc73d0cac819611cade29874822ff5d54
Certificate serial: 01A0C85902AB81857B61C8467539B138FA28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:01:11 +0000
Manifest this update: Tue 22 Sep 2026 09:01:11 +0000
Manifest next update: Wed 23 Sep 2026 09:01:11 +0000
Files and hashes: 1: 2zJJEln3aMuBWTTX2Wghm64WL1c.roa (hash: 5hVuyCxLA7+9VBEWVzzqiucZv/QNutyUowFs04GW0IQ=)
2: DFYjS8c9DKyBlhHK3imHSCL_XVQ.crl (hash: tgpB5Zl29nYIswqMjMzYWErJylLqjC2djg7J2A31kPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:02:ab:81:85:7b:61:c8:46:75:39:b1:38:fa:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c56234bc73d0cac819611cade29874822ff5d54
Validity
Not Before: Sep 22 09:01:11 2026 GMT
Not After : Sep 23 09:01:11 2026 GMT
Subject: CN=1c03be32e6a5b61beea318265d5ce66d8f7ae8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:39:19:a2:3c:f0:31:cf:28:b5:2b:1e:f0:
0a:47:30:25:af:34:4c:89:de:86:4e:7f:2e:24:4d:
55:09:28:61:c8:b2:3d:96:cb:13:7f:01:e9:60:c5:
99:93:e7:e0:79:b2:cc:bc:36:6d:bc:e3:58:42:35:
e5:b8:a0:5a:7b:67:4d:d7:7f:a5:a3:56:e1:05:9b:
5f:d1:7a:a9:e4:bd:e4:e4:da:4f:06:df:b9:19:ea:
56:96:78:bc:dd:41:16:08:9b:70:82:24:9b:54:21:
18:6b:fa:7a:8f:80:ae:df:36:5a:42:29:18:9d:8f:
f1:c5:c1:64:09:90:b0:f5:5a:0d:9f:e3:90:fc:ad:
71:b3:47:c5:cb:f3:de:0e:1e:30:04:ed:93:8b:fa:
80:24:47:8f:06:8b:4a:a5:1b:0f:16:43:fe:61:5c:
4c:b0:bb:63:34:4f:57:29:77:be:3e:85:41:9d:b4:
77:69:91:74:4c:f0:66:9e:88:12:31:ba:73:ae:20:
b4:65:cb:54:8c:7e:b1:b6:4e:09:61:6e:80:3c:7a:
55:47:27:28:70:3b:c0:01:71:33:db:30:45:61:11:
1f:f6:ef:6c:b2:1a:af:ec:b1:9e:73:88:02:b9:6f:
a7:7b:24:82:98:62:50:5c:e7:b8:5f:78:7d:83:10:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:03:BE:32:E6:A5:B6:1B:EE:A3:18:26:5D:5C:E6:6D:8F:7A:E8:ED
X509v3 Authority Key Identifier:
keyid:0C:56:23:4B:C7:3D:0C:AC:81:96:11:CA:DE:29:87:48:22:FF:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:35:e3:a6:e2:1f:1f:7a:9f:62:ac:43:49:19:73:65:3e:4a:
38:44:84:98:06:3c:19:a6:e9:4a:65:dd:2f:6c:8f:63:97:e7:
be:a7:ad:36:86:81:e9:bd:d8:1b:74:c3:03:0a:9e:7d:c8:19:
89:ba:5e:04:06:bd:dd:c2:2b:32:16:0f:2a:15:d8:75:28:25:
5a:0a:5d:ab:8d:0e:66:38:1c:b3:cd:94:43:bb:db:cd:ff:3f:
6d:2a:66:bc:c6:de:d7:f5:f0:46:1d:92:30:85:b2:80:ba:c9:
44:86:3e:9b:54:56:3a:a0:48:8b:72:99:13:88:ac:e6:2b:34:
01:8d:54:51:05:de:4b:c9:ba:f9:49:02:76:59:6a:8c:43:7f:
ef:f1:34:32:f0:3e:7a:84:bd:22:d7:75:55:f7:4c:a6:ec:03:
f7:17:a4:15:52:5d:e8:19:c6:7a:7d:28:da:2c:a2:f9:ba:84:
f4:c0:43:e6:c1:50:83:11:93:d1:9a:4c:31:1b:51:83:5c:c9:
64:76:a9:2b:88:3f:e3:2c:09:e3:8c:6e:b0:3b:ef:a6:7c:db:
8e:a0:36:bd:84:83:9b:79:b6:76:80:1f:b9:e4:81:1e:c7:cb:
5c:cc:34:fe:02:2a:1e:a8:a0:07:b4:7a:43:a0:b0:1a:6a:3b:
34:f8:a0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:09:13 2026 by rpki-client