Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: 897m4cflZqRtgL0aOZu1c5lwWU43QmdAU7885qTiZHY=
Subject key identifier: 24:1E:46:6B:A9:62:37:F6:89:75:60:B0:F3:A6:B5:DB:FF:95:0D:28
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 01A13CA53B115E12C252E453DCB910449DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 0DCC
Signing time: Wed 14 Oct 2026 23:00:23 +0000
Manifest this update: Wed 14 Oct 2026 23:00:23 +0000
Manifest next update: Thu 15 Oct 2026 23:00:23 +0000
Files and hashes: 1: 0ySGeIDrXtZFxjKASUMVzdc0Dlc.roa (hash: l2+MJdgyr6VqnECFLRIqzXDoWHq/3WTx2ApaEcFXd9c=)
2: 2MIYePrvuVOPunZ0cCU587P-UNo.roa (hash: 87FdzdFETynQoJd/9d3TWFG9LHhJseAqTkXpKmEANyg=)
3: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: MRP6lMtoYgYXkwffvM/zsjwRZOGi/pFLNCj8AYLRgGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:3b:11:5e:12:c2:52:e4:53:dc:b9:10:44:9d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: Oct 14 23:00:23 2026 GMT
Not After : Oct 15 23:00:23 2026 GMT
Subject: CN=241e466ba96237f6897560b0f3a6b5dbff950d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:51:53:d2:3e:8d:d5:fe:1b:59:f2:ac:e9:67:
5e:c2:ce:cb:8a:55:56:a6:23:91:a5:05:7a:5b:64:
95:99:2f:f8:f3:13:82:c5:3d:0c:b2:04:0a:ab:26:
a3:cf:21:74:a3:65:f1:40:6e:aa:dc:26:8f:45:8c:
30:57:90:08:f4:61:90:71:93:6b:f6:3f:cc:6b:9b:
e6:c7:d6:60:90:05:3e:ca:3f:48:ad:bf:02:c1:61:
20:d1:41:fc:23:ff:64:16:b4:c5:89:d2:78:56:b6:
3a:db:f3:4c:01:92:51:ab:fd:e2:f9:61:31:fb:2e:
75:5b:bd:3b:df:5d:50:9b:76:24:5d:67:df:dc:73:
32:1c:26:a2:c9:a2:68:c0:49:d5:1c:e7:9d:15:bf:
f5:ff:fd:ce:02:a9:71:84:f8:d4:ba:b3:8a:c8:4e:
7c:ab:3a:26:87:67:a0:17:bd:8d:76:22:f4:84:4a:
3a:6f:c3:f5:24:29:e5:01:9a:b9:81:47:3b:4c:38:
b1:8e:a1:35:11:f7:12:38:19:8f:dc:92:92:85:34:
f9:68:e8:53:39:2e:d6:72:46:93:59:38:99:32:ef:
e8:70:69:f1:00:71:e4:89:67:a1:ac:3f:aa:21:16:
4a:8f:0d:a2:54:47:df:75:7e:63:a0:06:05:07:82:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1E:46:6B:A9:62:37:F6:89:75:60:B0:F3:A6:B5:DB:FF:95:0D:28
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ae:8d:3c:21:11:c4:01:f0:8a:a7:b1:06:93:c9:34:00:3e:
99:1c:5c:92:1e:39:8a:43:96:32:27:bf:9b:89:b5:c3:24:69:
85:95:93:20:73:45:77:04:53:ed:56:97:78:37:43:2e:9d:fb:
68:b6:12:6d:93:45:a0:45:cf:09:cb:d3:ef:de:ad:01:56:64:
a1:e5:c4:14:8f:fb:dd:31:bb:49:cb:4b:c0:6c:b6:61:89:7c:
da:f5:1e:2c:32:f4:67:20:7d:41:c5:88:29:86:9f:be:e8:f5:
50:fe:b4:2a:c4:b2:af:7e:f4:d2:a0:ef:95:a0:84:19:e5:14:
b8:ab:8b:87:31:0c:63:6d:fa:e9:ca:50:d1:17:43:7c:5d:c7:
b9:aa:71:eb:c4:e3:15:5a:53:2c:a1:50:dc:ef:f2:00:5a:88:
f3:06:fb:95:a1:7b:2e:1d:cb:6c:fa:d5:73:ea:4e:26:c4:db:
18:50:fa:09:55:ce:be:04:1a:cb:b1:65:e1:41:a6:4f:22:0f:
e8:dd:82:40:61:ca:35:36:00:ba:e9:b8:1c:ba:90:20:60:7c:
c1:1d:2a:0d:f1:a2:b4:8a:05:3e:bc:51:cf:9d:e5:51:bb:ef:
ff:ef:c6:b0:c2:17:c3:b8:5a:1d:d7:5d:28:20:f9:fa:a2:b2:
b7:a0:d9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:20:16 2026 by rpki-client