Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
File: DpXDrONm20G83CVsXVs75JCk92E.mft (raw, json)
Hash identifier: Ru8k1bgMEx6YTTOEfqJeS2ElIEqlJz9+8/n6PR7/6J4=
Subject key identifier: 77:AD:00:27:45:45:AC:79:FF:90:50:65:CB:C9:33:75:A6:37:79:40
Authority key identifier: 0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
Certificate issuer: /CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Certificate serial: 01A0DE05680C8170A2D5D73EF3CFECC581BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
Manifest number: 0ECB
Signing time: Sat 26 Sep 2026 14:01:31 +0000
Manifest this update: Sat 26 Sep 2026 14:01:31 +0000
Manifest next update: Sun 27 Sep 2026 14:01:31 +0000
Files and hashes: 1: 37dXvYDoLLgkPUjF4NxD-XXFFYI.roa (hash: kSAD/e0L34SLlOnuXBzFWv60he1Bjkrs051xSNxh2jE=)
2: DpXDrONm20G83CVsXVs75JCk92E.crl (hash: dEPsIO3ZSUqAjPUaUeFGbj3Yx7uqWB4ltP6YUI8MRjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:68:0c:81:70:a2:d5:d7:3e:f3:cf:ec:c5:81:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Validity
Not Before: Sep 26 14:01:31 2026 GMT
Not After : Sep 27 14:01:31 2026 GMT
Subject: CN=77ad00274545ac79ff905065cbc93375a6377940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:01:1b:e8:a1:62:bb:d8:17:ad:75:c3:f3:
49:44:07:1c:4a:24:73:a3:74:ec:ee:f7:09:74:6c:
02:15:38:ab:d3:db:f3:5a:ce:8e:22:54:71:71:1a:
08:43:ab:0e:29:24:09:86:bd:c3:39:84:19:9b:11:
d3:5e:6b:3b:a8:19:67:6a:71:e3:1a:df:ff:59:4c:
ff:3e:6a:70:88:7e:63:ca:ac:38:5e:0b:93:65:5b:
10:83:88:b0:ba:18:e6:9d:32:35:94:b9:ef:4a:ae:
3a:a5:4c:a6:44:88:8e:f0:0b:05:e5:6b:5a:09:fb:
43:6c:14:47:bf:42:90:a9:fb:75:31:c5:3a:c1:c1:
52:60:fd:0f:77:85:23:0c:38:9c:0b:ec:5f:84:46:
34:58:95:8b:ce:b9:2e:d5:68:5e:e1:27:0c:3d:8e:
a2:72:74:d1:61:74:66:37:00:1a:f9:50:ad:78:b5:
5f:71:1f:40:9e:59:a3:c7:c4:41:6a:e7:af:fe:30:
2f:d2:b8:f2:e8:3f:1b:78:b2:ef:28:c2:69:94:1b:
e0:1f:33:cb:6e:d6:3a:59:73:e3:58:9d:02:a8:ee:
c9:44:9e:a6:e9:93:92:16:9c:cc:5d:82:12:28:14:
45:06:8e:24:a3:56:4b:da:31:75:cd:e7:80:ef:d2:
03:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AD:00:27:45:45:AC:79:FF:90:50:65:CB:C9:33:75:A6:37:79:40
X509v3 Authority Key Identifier:
keyid:0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8f:9e:44:3d:bb:c2:d4:1c:c5:f7:13:0b:67:e3:f4:29:15:
18:c1:ee:53:fb:25:79:08:56:45:b2:e9:3a:7b:b1:47:e0:11:
7c:63:17:45:3b:c9:50:55:e3:c1:41:43:ad:ba:d8:9a:23:d6:
de:ac:73:b6:e1:08:13:e8:32:76:dc:60:09:dc:f2:a0:eb:af:
0e:fe:12:69:16:b8:ba:c2:db:3d:98:67:d6:4a:a5:c5:ef:a4:
aa:7d:4a:4f:41:1c:71:bc:47:84:3d:ab:08:2b:80:88:1e:d7:
11:ad:f3:e4:e2:48:ad:84:9b:cc:1f:17:cf:39:50:cf:d3:bc:
cc:c0:f3:b8:c5:25:55:8a:be:46:93:d2:be:68:a7:40:c8:2f:
f6:97:28:1b:6f:a4:8c:6b:18:25:2e:57:0f:80:3a:4d:4a:b2:
06:81:1d:05:e5:04:f6:24:60:f8:4a:c1:0e:cb:48:5d:38:c9:
1a:33:e6:b6:e3:82:96:a9:55:ad:3d:c2:58:c2:23:13:ad:2f:
1f:70:5a:f3:90:92:26:c1:e8:40:b5:87:62:34:1f:9e:d2:17:
d3:ae:5a:65:b4:79:f1:18:11:9e:b4:81:e5:1f:84:99:81:04:
76:30:6f:cd:51:73:1b:63:3f:b8:c9:23:2c:67:ee:5a:a9:f8:
e8:a9:58:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:38:09 2026 by rpki-client