Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier: bk9oOi9mFHIFk1vhEzoZttdxjIiXcQAusU7wbPT59po=
Subject key identifier: 73:47:E1:0D:48:D3:BF:43:04:71:50:0D:73:05:DE:DA:9C:E5:D4:03
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial: 01A0C0D5C775CD0E7F619706A69F121EFB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number: 1A69
Signing time: Sun 20 Sep 2026 22:00:30 +0000
Manifest this update: Sun 20 Sep 2026 22:00:30 +0000
Manifest next update: Mon 21 Sep 2026 22:00:30 +0000
Files and hashes: 1: DkVdvbXhpbo9CQqVcVFBg1LNoNE.roa (hash: qaF1R+er71d5hFs2KTiNhXAjh56KPYgioy+6tvssIEE=)
2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: VAGpuveU6dow9SdGBMqStK8Y7vrPKgjZfn8oX+MQNGo=)
3: WIQ88PUyl0Wn69b9mzqB92sF45M.roa (hash: ATP8ajAQ0MqjrK6hyWC+m5lGC/lxKRtV3XstqqIRErs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:d5:c7:75:cd:0e:7f:61:97:06:a6:9f:12:1e:fb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Validity
Not Before: Sep 20 22:00:30 2026 GMT
Not After : Sep 21 22:00:30 2026 GMT
Subject: CN=7347e10d48d3bf430471500d7305deda9ce5d403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5e:5a:7d:11:bb:2f:9a:95:5f:8e:99:27:0c:
d4:e9:11:63:09:44:3b:4d:2e:02:70:cb:c6:ed:78:
ba:60:e6:cc:a2:44:4b:bc:d2:c7:16:c2:ab:45:9d:
8d:ee:1e:d3:9a:32:0c:62:79:11:d3:94:d3:ba:1e:
9e:38:fa:9d:94:c9:47:27:ba:54:e5:00:e3:a3:98:
85:6a:4a:b7:80:63:1e:c4:51:05:b0:2e:10:ed:40:
70:5f:98:4e:7b:d9:ac:e7:dd:a2:7c:51:46:84:5a:
ed:85:a5:8a:79:c6:6f:93:df:6b:fe:d2:5f:a9:91:
1e:40:8f:31:87:69:8d:8d:a5:f4:29:f0:a5:ca:5e:
cf:7a:8b:89:72:2e:3c:c4:94:df:f3:79:f2:dc:7f:
ea:3d:39:c0:71:c4:8d:66:42:93:61:11:05:58:b4:
85:e1:7b:49:8e:63:8f:08:57:4d:e0:03:98:e2:23:
31:3c:21:01:28:b5:dd:3b:fd:ea:56:6e:8b:c3:3b:
9a:cc:bf:6c:9d:01:9d:46:eb:bc:16:f9:37:7c:de:
44:01:ef:36:56:b6:2b:04:ce:de:25:60:30:65:14:
68:3a:99:72:bf:34:42:ea:79:77:16:b2:a2:2f:4c:
7a:16:21:09:a7:f5:f5:c5:a1:cf:59:2a:f2:00:00:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:47:E1:0D:48:D3:BF:43:04:71:50:0D:73:05:DE:DA:9C:E5:D4:03
X509v3 Authority Key Identifier:
keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:43:c8:9e:9d:64:a8:9d:b6:eb:f2:c6:93:b1:47:a0:51:92:
3c:07:6c:52:b5:11:10:f6:7c:7b:38:d7:ff:cd:a4:d5:16:42:
c4:30:dc:f8:52:84:af:f2:32:47:96:00:a7:9f:e2:e4:57:6f:
0c:ad:50:f3:8d:a5:67:e9:4f:7f:2a:77:5b:14:5a:a8:56:b1:
80:ab:f7:7e:af:52:08:b7:77:11:17:7d:a2:f4:54:2c:43:bd:
d0:5e:9f:a6:72:40:be:79:34:d3:f6:b6:17:d8:27:e8:75:aa:
04:16:56:d7:62:af:d6:dd:0f:7b:a9:75:1f:4a:2f:04:29:4e:
56:f2:21:5b:49:4d:a7:b3:3e:4f:05:8a:60:6d:eb:bf:96:88:
d1:f6:05:c6:aa:06:24:75:87:5e:97:9a:8c:15:b4:85:e3:90:
b1:7e:41:6b:15:2d:ed:a2:8f:c2:89:39:6c:68:c4:6f:32:fc:
36:c3:77:18:d4:aa:53:aa:d4:5a:bc:47:05:b9:7f:7c:f7:1b:
0c:f1:a6:e3:c3:55:ae:54:dd:d0:46:16:87:07:d3:e0:44:ac:
78:22:a7:a7:d8:18:e0:d8:d8:c6:33:f2:38:b0:a3:3a:9d:d9:
64:54:51:58:22:39:37:aa:18:a6:73:e0:b4:c1:77:f4:72:c8:
c6:c2:38:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:33:38 2026 by rpki-client