Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File: DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier: lwd16vLcKFnKxi5sSjuDgIm4hN1bFrzbqm+YYNLkfIs=
Subject key identifier: 32:04:B2:FF:DE:16:6F:9B:7A:89:F5:57:33:D4:9D:22:C6:2E:E0:DF
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial: 01A0E43E6A81F865BE1321FD9C5FEB447A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number: 0C65
Signing time: Sun 27 Sep 2026 19:01:30 +0000
Manifest this update: Sun 27 Sep 2026 19:01:30 +0000
Manifest next update: Mon 28 Sep 2026 19:01:30 +0000
Files and hashes: 1: 96SX2S5aBWouZ5qx7BRgteL4iq8.roa (hash: M3a2yFufjkSiLfAokMv1+05AOpH8jhB4+9skztdJecg=)
2: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: EVxtlL4aKnAAahw7IZYbozwIoboQdPi0wuN0COCL/9s=)
3: Fy__JVL_Lepo6mUUM4F3EM-X7dg.roa (hash: 841fgQfyyxsP5yvIt805yflD9ODKBpncCMo1CIp2tRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:6a:81:f8:65:be:13:21:fd:9c:5f:eb:44:7a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
Validity
Not Before: Sep 27 19:01:30 2026 GMT
Not After : Sep 28 19:01:30 2026 GMT
Subject: CN=3204b2ffde166f9b7a89f55733d49d22c62ee0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:2d:c5:c2:1e:61:c6:ba:16:96:cf:93:79:
d3:d2:46:79:64:c3:18:9b:e4:0c:77:74:5d:bd:72:
5c:94:94:c1:4b:77:38:1c:0a:f0:fb:8c:5a:18:e5:
b9:43:50:34:e1:7a:06:3b:6c:c4:e4:97:52:35:70:
7a:52:93:39:15:0d:e7:b5:54:18:4c:fe:51:15:c9:
5f:76:27:6b:82:98:70:bd:af:37:1c:36:f8:b8:56:
fd:0f:dd:8c:a5:83:03:44:96:62:62:33:8f:f6:85:
bd:c6:6b:a6:f5:88:09:4e:f1:ab:68:c6:03:67:6a:
14:78:82:a3:b6:64:09:2b:50:74:09:5f:a8:fb:66:
11:1e:01:0a:c2:51:a8:6a:c1:d8:9a:30:76:67:5a:
29:05:5a:a8:de:5e:2d:46:ea:8b:c5:37:e3:23:6f:
44:11:d2:53:fc:6b:5e:04:69:6c:2b:80:47:8a:78:
80:20:1b:94:59:71:fa:37:cf:15:a5:f1:9f:96:96:
51:d6:99:cf:be:ee:c1:04:84:12:0b:db:24:3d:3f:
76:4d:62:14:32:52:d1:ca:8b:16:b4:0e:92:73:6b:
80:73:f9:59:19:4f:51:4e:05:b1:45:ec:3b:2d:9a:
5a:fb:85:a1:f8:8d:e1:0d:c0:5b:64:1e:a8:6c:3b:
05:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:04:B2:FF:DE:16:6F:9B:7A:89:F5:57:33:D4:9D:22:C6:2E:E0:DF
X509v3 Authority Key Identifier:
keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f0:f0:7a:de:6d:ed:c7:c1:6b:a0:c8:73:b8:8c:ea:45:c5:
6e:dc:e6:bb:33:d1:44:a6:76:4c:f6:22:46:e8:fc:59:c2:00:
89:80:e4:fc:7e:64:f3:3e:c5:23:d5:cc:14:80:d2:c5:cc:ce:
50:4d:0b:ae:3a:09:43:37:c0:8c:ee:71:78:df:bc:55:42:1e:
a5:95:4a:32:e5:55:18:9e:51:30:b3:dc:02:c1:4e:ed:5f:0b:
58:73:f5:35:80:3a:12:37:58:4c:0b:d1:41:a5:c2:6d:e8:cf:
e7:36:fa:1a:21:ce:e9:7a:cd:44:d1:1a:4e:14:0c:3e:07:ea:
79:44:f6:f5:54:b5:15:34:3d:b0:bc:15:89:77:c6:e9:93:c0:
38:bc:c7:e0:78:54:44:ee:d5:a2:1a:42:53:08:ab:54:b8:c2:
6c:22:b5:ac:41:28:d1:2a:fc:18:88:1d:87:60:c1:a1:ca:2c:
65:c6:dc:49:67:49:88:fe:20:d3:31:20:f2:7b:e7:6f:16:dc:
03:6f:44:76:7e:c3:ca:d2:a1:a2:bb:ea:1c:46:41:0a:8b:c5:
49:42:68:4a:87:af:cf:11:a7:d6:9e:08:ca:5f:ad:d3:fa:12:
a1:87:8c:a2:9f:6f:bc:ff:f4:a9:54:57:a6:20:a3:1f:bb:99:
df:f8:42:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 04:35:00 2026 by rpki-client