
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json)
Hash identifier: PkAEz63GKH+hSD9wJo8ocT3iiBWDnI247aiClv3UnIw=
Subject key identifier: FE:47:67:90:C4:5B:F9:93:1A:DF:D1:70:73:B6:AB:78:BB:C8:9B:4B
Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Certificate serial: 01A0F343974FEA335CDF960FC44881B2A318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
Manifest number: 0621
Signing time: Wed 30 Sep 2026 17:01:28 +0000
Manifest this update: Wed 30 Sep 2026 17:01:28 +0000
Manifest next update: Thu 01 Oct 2026 17:01:28 +0000
Files and hashes: 1: S00d78TItkDHq888CPL8snBiq8U.roa (hash: xbbWOfkY4EBmGgNTfua9nJ1QvCvgAkZPsqc/WKzPEio=)
2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: l5sWWoTU8VdjAgq+PvzHfSSrWMgR+x8C5146rF+Lizc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:43:97:4f:ea:33:5c:df:96:0f:c4:48:81:b2:a3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Validity
Not Before: Sep 30 17:01:28 2026 GMT
Not After : Oct 1 17:01:28 2026 GMT
Subject: CN=fe476790c45bf9931adfd17073b6ab78bbc89b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:cb:e5:b8:17:e1:d6:47:90:d9:4c:c5:c9:
df:f6:22:01:0d:a5:97:a1:98:fc:79:6d:b2:74:29:
bf:96:82:a2:25:26:9a:3b:3e:2f:f1:be:32:2a:ea:
58:9d:49:ca:c3:cb:d2:e9:ff:6c:d6:62:fe:6b:fb:
7c:6d:54:d3:25:38:0b:8b:11:b3:8e:bf:7b:d3:8e:
fe:cc:e3:bd:4a:bc:c3:67:3e:3d:dc:5f:dc:44:50:
d6:a7:e5:15:f7:6e:2d:1d:e2:35:e6:ae:2a:af:c2:
2c:3e:1c:99:8a:7b:c4:70:bc:7c:2e:71:78:6d:11:
91:22:11:63:9e:c8:d8:bf:f7:79:82:b2:11:7d:9c:
3b:9e:c3:a7:c3:05:34:57:85:b0:ff:a1:94:f9:59:
33:4e:b2:7d:04:5f:9d:20:a7:43:aa:08:60:00:7d:
54:d3:0e:6e:4e:3e:5d:98:3c:b5:de:32:b3:b8:cb:
b1:a1:79:8c:15:e3:6c:b6:32:2f:a1:5b:c6:30:7f:
16:fa:fb:b3:b7:27:be:4f:ef:06:e0:ca:17:64:21:
69:c0:ba:30:aa:7f:79:9f:12:94:54:8f:a5:7b:97:
cc:4c:2e:7e:34:65:50:ec:73:25:24:93:a5:6d:dd:
d0:e1:9f:e6:fb:28:f4:b4:cd:23:77:23:cf:85:8f:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:47:67:90:C4:5B:F9:93:1A:DF:D1:70:73:B6:AB:78:BB:C8:9B:4B
X509v3 Authority Key Identifier:
keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d9:5d:62:97:6f:38:0b:71:81:4e:6f:ae:07:c7:1d:a1:9f:
3d:e7:c1:cc:38:61:92:ed:69:0f:2d:15:29:c4:19:e1:46:67:
23:bf:62:21:df:0f:c9:cb:ff:7e:f9:35:0a:4b:e4:12:0c:c3:
fe:bb:e1:4e:3c:35:96:d4:51:7e:1e:a0:18:23:64:ef:7b:2b:
89:07:fb:60:14:25:01:a6:38:2d:ac:52:ac:f7:83:13:35:2f:
7a:39:b6:58:60:4d:ea:2e:e7:55:6c:c9:a2:20:6d:6d:17:83:
96:25:0e:ba:b2:0a:35:fb:3e:22:c7:5f:bb:bf:55:86:bb:bb:
c4:ea:9c:34:32:18:d4:c6:f2:a0:69:8d:88:e2:21:ab:0f:ac:
72:a8:88:a9:39:b8:b6:66:bc:ee:e0:a8:9a:12:89:09:0b:ce:
f1:30:32:ab:0a:e2:d9:d1:29:30:b7:b5:d5:61:1d:cb:6b:f9:
d7:2b:0b:bc:22:1d:17:07:a5:18:ae:b5:f1:0b:6a:02:a0:ae:
64:68:1a:03:21:b0:c0:b4:93:98:74:f9:bd:00:2f:33:06:1f:
d2:bb:a9:63:8c:3c:04:59:90:88:64:95:1b:d9:f4:f9:2b:a5:
6f:9d:cc:19:b9:13:05:a3:d2:b1:0d:c0:cb:a2:3c:ca:3a:e8:
38:8b:b8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 03:06:41 2026 by rpki-client