Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
File: dpjJmefwST7jZjTokrN8nzv5QH0.mft (raw, json)
Hash identifier: fGRDdy7/sygoCOKLsQ2H6CyqGA3oY/Uq0wcvxTMRdCU=
Subject key identifier: D6:A0:A2:8A:6B:1B:FA:3D:51:64:B0:77:87:8C:41:32:C7:2E:B8:83
Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
Certificate issuer: /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Certificate serial: 01A0CB59997D4F166F183F9EDA51090F9280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 23:00:41 +0000
Manifest this update: Tue 22 Sep 2026 23:00:41 +0000
Manifest next update: Wed 23 Sep 2026 23:00:41 +0000
Files and hashes: 1: M14xo_CjfWqzAqnbxh_nHmNq1aA.roa (hash: 4CoJeZzMAxXXWnHh4hW+p8AyqZ5yU/74Z6UgXwaueCY=)
2: dpjJmefwST7jZjTokrN8nzv5QH0.crl (hash: LW7q5JuWekaba5atwWce05xaSmbpSXcI71bY60TZmWc=)
3: xrp0HnIK2w9afEJM1GDVJOl5JvA.asa (hash: 55HCFpG/ZJNwGEZUAcO2TsiWkfEa5pv4wg7vR6XeG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:99:7d:4f:16:6f:18:3f:9e:da:51:09:0f:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Validity
Not Before: Sep 22 23:00:41 2026 GMT
Not After : Sep 23 23:00:41 2026 GMT
Subject: CN=d6a0a28a6b1bfa3d5164b077878c4132c72eb883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:cf:25:e3:33:21:18:86:7d:8b:dd:c3:f7:
cc:34:d2:38:2e:69:90:98:51:d2:96:1c:73:66:87:
ad:aa:5a:d9:8e:76:7a:84:c9:44:20:c8:0b:5e:ec:
45:99:50:d8:fb:04:83:01:58:a9:78:36:76:44:b4:
5c:02:7a:34:52:80:70:ff:11:f0:61:d5:4b:9f:41:
96:b2:08:31:8e:95:80:99:70:80:e4:1f:2b:f8:4f:
cb:e9:ad:48:74:9d:8a:84:ba:96:f6:5a:df:d7:fd:
42:9c:06:14:b5:d1:94:92:2a:7d:b7:25:d6:ca:81:
15:bf:f5:19:2d:5c:ef:99:7c:0a:e6:55:05:4c:51:
c5:08:73:39:1a:4f:4b:31:4c:64:5d:c1:cc:13:7d:
fc:15:f0:6e:c0:2e:00:b5:73:f4:d4:3c:d4:d6:db:
72:7c:3c:c2:81:65:85:b9:e3:0c:a4:af:54:fd:d1:
b5:46:b5:9e:fb:00:a0:05:d1:94:0c:40:78:f9:57:
f0:b8:70:25:f4:cc:8f:41:08:35:1e:10:e0:ec:3f:
4b:fa:50:b0:a8:65:7a:2f:b2:c9:aa:c8:83:33:f1:
07:b2:da:40:26:e1:4d:5c:36:fc:c8:83:2d:b3:f2:
82:f0:1a:0c:19:48:1f:85:a3:b5:0d:36:40:fc:5c:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A0:A2:8A:6B:1B:FA:3D:51:64:B0:77:87:8C:41:32:C7:2E:B8:83
X509v3 Authority Key Identifier:
keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:f7:cc:de:0c:51:9a:cf:3a:1c:de:2e:72:eb:e0:21:b7:36:
bd:dd:c5:2a:a3:ce:c9:66:2b:0d:7c:6c:4a:3a:7d:9c:e7:7b:
3a:a3:ee:27:66:bf:b9:bf:99:f5:ad:29:9f:46:51:a9:95:2a:
7a:4f:8e:14:73:d9:87:5e:73:2f:9d:17:01:52:ef:3f:a4:8c:
ae:6d:8d:5b:88:e0:ba:c6:79:ea:f5:03:1d:3f:a7:9e:18:53:
cb:6b:a4:22:ea:4e:cc:a8:2c:d5:57:9f:b5:1c:2e:8b:3f:3e:
fc:d8:7c:87:aa:6f:2e:98:ec:62:54:bc:55:50:b0:6d:5a:07:
27:b6:93:74:62:95:1d:98:0c:31:8b:3f:0b:70:7e:c2:78:c9:
ab:62:4b:6f:e8:52:94:9d:21:aa:a5:42:ce:64:61:33:1e:bb:
9b:c9:81:76:78:4b:06:74:ff:44:c6:54:26:be:9d:27:60:f3:
58:ee:e6:4b:fe:56:d0:aa:91:db:37:79:30:ba:72:2a:89:35:
5b:19:34:62:99:70:3f:a7:80:8c:d9:90:ab:ae:ce:95:7a:64:
5a:16:42:38:99:f7:1c:53:29:99:40:f2:6f:de:3a:13:6d:53:
62:4d:1a:e7:61:21:9e:48:2c:c0:95:45:ba:64:24:1c:de:af:
59:fa:79:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:30:05 2026 by rpki-client