Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: xHjR1ZdLYdVQCfCXSZxIEntRhFoiWOCSoi0ws2HYCf4=
Subject key identifier: 32:F1:4B:AF:1B:C4:62:50:6A:E7:E9:A9:29:5F:8E:85:44:F7:55:AE
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 01A0DF862862DC92A884E5D7493E4243B7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 1252
Signing time: Sat 26 Sep 2026 21:01:46 +0000
Manifest this update: Sat 26 Sep 2026 21:01:46 +0000
Manifest next update: Sun 27 Sep 2026 21:01:46 +0000
Files and hashes: 1: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: qgtlWgNjbv8XP8WpcC9M/i5OzrX2qI1TS9Y0QB9i/Js=)
2: qZ8aQgjdabGbDv-i6H620T5YhwY.roa (hash: UdXrLbOlQenxMN6hG/0L/eJWuifEwthlbNrK+9DhFyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:28:62:dc:92:a8:84:e5:d7:49:3e:42:43:b7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Sep 26 21:01:46 2026 GMT
Not After : Sep 27 21:01:46 2026 GMT
Subject: CN=32f14baf1bc462506ae7e9a9295f8e8544f755ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:10:12:8b:f5:d1:52:ec:8d:62:b0:7f:b5:
00:43:70:ad:ca:42:c9:3e:50:ac:cc:3c:3a:af:d8:
2a:bf:d2:76:56:21:38:5f:d4:a7:e7:42:f2:e9:fe:
0b:cb:49:22:bb:c6:8c:b5:45:c0:21:48:a7:77:d0:
20:08:b5:6c:ee:49:22:dd:e9:19:13:a6:ef:df:2f:
5e:11:9a:f8:69:af:57:ec:6f:41:39:69:d4:02:7d:
9d:9d:f4:30:0c:8b:08:05:25:4b:ba:21:37:ff:d7:
23:76:0d:95:a8:47:6b:05:0e:09:61:23:4d:80:9d:
19:49:e3:05:93:ca:51:a6:b9:d4:bb:bf:8b:b9:a7:
6b:6c:9d:f6:04:8e:24:88:e7:77:0e:ea:06:af:52:
e0:85:f5:b2:91:ae:6b:ca:d4:90:52:22:7a:d7:c1:
85:d6:db:fa:8d:3c:f1:c4:26:ce:83:ca:e6:77:4c:
ec:93:2f:bb:db:c2:49:a8:aa:03:a9:9c:6c:2a:cb:
5f:00:c1:f7:b6:15:c6:2b:a0:a1:8a:61:1c:a7:4f:
98:75:41:da:21:3b:40:06:c9:ae:62:81:5c:95:f3:
ac:8c:42:32:69:73:6b:8a:14:86:cd:74:37:9e:a0:
1a:50:2c:87:9a:0d:65:d7:41:55:b0:b2:c2:3f:4b:
37:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F1:4B:AF:1B:C4:62:50:6A:E7:E9:A9:29:5F:8E:85:44:F7:55:AE
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:91:f7:0c:d5:73:59:df:96:ce:29:c8:1f:69:f6:4f:22:4c:
4d:70:fd:57:86:21:e8:4e:45:18:b8:1a:7b:c6:95:bc:22:41:
95:b8:03:fb:17:ba:4a:5a:f5:b4:83:2c:f0:c4:0a:31:1d:66:
22:fe:b5:95:9f:39:16:91:51:25:cf:7b:73:df:d3:4b:ac:d3:
99:66:ac:7f:43:d9:b1:86:00:d7:49:2f:d6:bf:e1:de:a8:02:
4a:c8:df:f6:33:f9:bc:3a:76:c3:0f:30:e6:e7:6e:d3:7b:bf:
d2:0d:5a:00:69:ab:0e:97:4f:69:27:96:1d:ff:93:51:b0:e4:
4c:76:c7:52:b9:24:ed:17:11:ea:95:7d:b7:f0:8d:ae:bc:f0:
5b:00:77:23:f9:a3:c7:ae:ba:c3:a2:67:0b:74:c3:6c:89:dd:
18:f3:ed:61:e7:71:a4:06:1b:ec:7c:24:0b:3e:5f:86:40:35:
2f:21:1b:ce:f1:28:e4:e9:3d:cd:fc:e8:34:1e:18:66:0e:a8:
e4:34:1a:d2:b2:c3:e1:b5:73:8a:7f:06:6f:73:a8:5d:1f:98:
e5:cf:03:1d:16:03:5f:cc:43:bf:e3:73:15:51:62:bd:b0:5e:
6a:06:2a:99:dc:65:98:cf:7d:71:b0:90:df:47:f3:98:34:5a:
42:b6:08:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:18:28 2026 by rpki-client