Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
File: DkOg3wWaUlGkALWh8TIboA0xINI.mft (raw, json)
Hash identifier: A2f0fOEguyNmMJhWvSXD7Ng/HhHBTRA4HUf+/aIw8BU=
Subject key identifier: D4:5B:C5:A5:3C:11:0D:8F:78:46:0C:F7:C3:52:BE:F4:21:1B:17:97
Authority key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
Certificate issuer: /CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Certificate serial: 01A0C3D6BBFA0D210D3FDCCD8478421218E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 12:00:24 +0000
Manifest this update: Mon 21 Sep 2026 12:00:24 +0000
Manifest next update: Tue 22 Sep 2026 12:00:24 +0000
Files and hashes: 1: 4dMXi4_OZ1hIYb5lfSEix8dXAV4.roa (hash: pso0l4AjjbTbnTQh+xQFS2oQ9IVZGMVy1LttU/eMjhU=)
2: DkOg3wWaUlGkALWh8TIboA0xINI.crl (hash: E4mx9/VIQ70vZZErJtho7MVNLmG5gFaiojojEQIR3MY=)
3: X5rHphgjA2Ovs-Yct52WJKfW_k8.roa (hash: fS9NXooFPX4VLQ4SoiMsokXMu0rmiVlmUkYsHNO+cLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:bb:fa:0d:21:0d:3f:dc:cd:84:78:42:12:18:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Validity
Not Before: Sep 21 12:00:24 2026 GMT
Not After : Sep 22 12:00:24 2026 GMT
Subject: CN=d45bc5a53c110d8f78460cf7c352bef4211b1797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:05:eb:3d:e9:6f:0a:08:04:77:00:f5:b8:d6:
ae:67:05:5a:02:11:03:4c:b0:a9:6d:5c:e9:ab:08:
90:c4:88:86:be:fd:92:00:83:fd:ac:11:3e:09:27:
67:0b:e3:f2:e6:bd:1e:86:ff:7c:55:bb:67:4a:db:
1c:9b:9d:47:2b:b0:12:f5:22:58:c0:78:d2:29:d6:
73:34:83:25:14:dc:1f:c8:43:48:30:e7:a5:91:af:
f8:0d:52:22:32:f6:e8:42:bd:f2:c0:cc:a3:38:7c:
ce:4a:b4:8f:41:e7:f4:a8:2c:06:66:29:56:9d:f8:
cc:84:e4:0e:69:67:b9:4e:e2:65:a1:3e:50:4a:e5:
f7:d5:ce:c7:61:1b:b4:cf:bd:29:c7:ef:e1:41:04:
1e:3f:13:c8:2e:90:d1:1a:2d:b0:bb:25:e3:58:48:
ae:46:6d:e9:73:4d:82:64:e8:10:ca:e0:1c:1e:f7:
3a:4e:8e:a8:ef:ef:94:ff:f6:d5:29:72:3c:67:6e:
e0:be:83:a6:cb:f0:22:d7:57:26:7d:90:55:f5:0f:
7a:e2:4f:ef:b1:bb:12:82:a9:93:ce:5c:ed:a5:dd:
25:77:9d:8e:c4:46:93:b1:fe:65:72:99:e0:56:f1:
74:f1:79:6d:a4:20:2a:8b:bd:cc:ed:a5:56:b7:f5:
40:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5B:C5:A5:3C:11:0D:8F:78:46:0C:F7:C3:52:BE:F4:21:1B:17:97
X509v3 Authority Key Identifier:
keyid:0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0e:a8:73:18:e1:02:14:45:1c:89:49:e7:0d:ed:6f:6f:6d:
fc:91:d2:03:5d:2d:06:23:fd:e5:4e:df:dd:47:cd:4b:d5:6a:
4e:5b:2d:79:d5:73:df:af:99:82:8f:7e:76:40:cd:e8:42:59:
09:46:3a:99:86:50:9c:e6:a9:fd:55:bd:30:81:d3:ce:1b:20:
38:00:ea:82:1f:09:c2:43:e2:5b:59:75:da:f3:1c:7c:3d:29:
01:1e:a7:9d:49:63:49:3c:c7:8c:04:2a:79:01:d8:42:cf:5d:
ef:b9:a5:7c:0d:0f:33:34:81:e3:03:87:b3:cd:17:b8:67:96:
02:dc:c8:dd:20:68:d2:f7:9c:7a:e0:3b:11:3f:85:46:96:6d:
1f:6e:5b:39:52:a3:94:ad:43:5f:89:ea:a7:4f:c5:59:a0:81:
8c:44:28:1a:b3:90:86:1b:d7:c0:12:c5:14:55:f5:d8:21:18:
c7:95:e1:8e:da:f4:bb:62:98:34:2f:01:7d:13:bb:fd:88:fd:
de:42:cd:0a:69:24:d9:16:8b:e8:06:1f:50:dd:0f:5a:33:ab:
56:dd:12:25:c6:6a:09:41:fb:43:0f:0c:13:4a:61:0f:86:7f:
89:a9:70:42:d6:c8:15:28:1b:c8:67:0f:22:d3:23:5e:0d:b1:
92:e6:92:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:12:51 2026 by rpki-client