
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
File: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft (raw, json)
Hash identifier: yhvNptLYZLLpGO6gYjY06TbCbBrLElcD1uhYKxpVNFY=
Subject key identifier: 18:45:15:C8:86:6E:8F:4B:2B:F8:C5:3E:4E:39:67:3D:F0:C4:30:D2
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 01A0C93470034E7C916365D1F505AD4F48B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
Manifest number: 1A72
Signing time: Tue 22 Sep 2026 13:00:51 +0000
Manifest this update: Tue 22 Sep 2026 13:00:51 +0000
Manifest next update: Wed 23 Sep 2026 13:00:51 +0000
Files and hashes: 1: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl (hash: dXgo4uA1G0ZnoGRKN3Vl+dt2qnicFvQtKVeoA7rjaoA=)
2: eRJh73NsCl5nLTcM8L-WtjQ1i8M.roa (hash: FurWUtoK3SJ5oNGdIN9dbo+ONOIK9GXi/NLIt8LbtMY=)
3: kEe6Bn-Wm8OU0BMeJ1sgg9otE2g.roa (hash: uUTvD8lHdMsxga0kjra2N6+gIRpOiRjAnp6etvYJekA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:70:03:4e:7c:91:63:65:d1:f5:05:ad:4f:48:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: Sep 22 13:00:51 2026 GMT
Not After : Sep 23 13:00:51 2026 GMT
Subject: CN=184515c8866e8f4b2bf8c53e4e39673df0c430d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:98:b2:0d:d2:4a:98:e8:bb:cc:ea:73:1f:1f:
79:58:47:f0:0e:6f:73:a1:b9:92:67:77:cd:cf:47:
c4:b2:82:6d:4a:c0:b9:95:e9:be:aa:02:77:5f:78:
c6:65:5d:f3:18:68:ca:60:1c:ab:e1:52:17:a6:99:
50:9f:b0:34:d3:2b:48:05:2c:31:97:72:23:71:f1:
ed:20:26:83:0e:ab:8b:25:7e:40:af:30:cc:d1:4c:
4e:ae:6a:b9:b5:18:83:38:e0:bb:04:c5:91:0f:fa:
99:3c:cc:ec:45:e5:bc:75:89:eb:82:8a:ac:e9:ee:
eb:67:ad:c3:fb:66:45:15:3a:7f:a8:c0:e6:47:ec:
b7:13:6e:a2:e3:04:45:e7:8c:a4:0b:82:28:70:31:
27:0a:0d:6d:9b:00:d0:57:12:25:5e:a7:40:34:9f:
75:38:67:fe:78:85:da:b7:77:f3:c4:44:d0:e5:3b:
8b:67:28:c7:32:74:67:e1:11:dd:82:7a:fe:85:43:
66:6e:c7:8f:3e:93:c8:fc:39:3e:b5:b9:cf:ef:e3:
83:91:60:89:6e:34:c4:db:43:af:f2:fc:2c:1d:d2:
dd:b3:31:39:d1:9a:66:4c:62:1b:4c:9e:8b:4c:f0:
74:4a:f8:b7:21:d5:2f:21:3b:8e:2d:4a:2c:6c:1d:
60:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:45:15:C8:86:6E:8F:4B:2B:F8:C5:3E:4E:39:67:3D:F0:C4:30:D2
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:31:fe:4e:4d:65:1f:b3:d6:76:89:04:4f:86:ed:e1:f5:17:
92:20:25:a0:5a:b1:b6:75:4a:8b:0f:29:57:2f:f6:b3:43:1f:
74:da:67:aa:e9:da:b9:8a:5d:79:81:f4:63:b5:e5:7c:2f:7f:
df:53:61:75:2c:b4:9d:ab:9f:b3:62:df:92:90:f2:2d:9b:c6:
e3:31:25:8c:e0:3e:e2:c8:f5:c1:b1:3b:72:15:96:ad:e9:b5:
86:86:f7:f8:d4:3d:16:5a:bf:38:32:c6:52:59:19:5a:06:23:
54:1a:0a:11:e1:ea:74:1e:80:fb:4f:8a:9b:9d:76:95:27:18:
ad:5d:14:64:cf:5a:ed:74:46:ab:74:af:6c:58:eb:32:a6:77:
71:ed:da:3b:7d:d7:08:a9:05:21:47:29:6d:22:7d:ea:b1:8e:
d3:b6:da:3d:fa:63:84:fc:b9:65:9a:a0:c3:56:ca:cc:25:ec:
8a:bd:cb:d8:37:36:46:ec:1d:32:1b:ea:91:21:a3:87:8b:97:
90:45:fb:91:58:cd:3e:9b:a3:9d:c0:42:00:99:c1:0b:4c:1c:
bd:64:c1:45:62:c7:74:71:c1:ac:b9:8d:2f:32:24:2c:e3:2d:
78:b4:41:93:bd:d6:64:9b:10:c8:34:38:9f:55:67:3e:c6:2e:
76:89:53:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:57:49 2026 by rpki-client