Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
File: Dxd9Rq5RS92RniRMevdK337bqNU.mft (raw, json)
Hash identifier: Lkd1ifAlLKs5Y8u3lYTrmgynHnzX7tpfuwfcXpqD4ZY=
Subject key identifier: DE:F1:60:47:30:8B:9E:8F:BC:1F:99:90:EC:92:A3:50:BF:9C:A5:EE
Authority key identifier: 0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5
Certificate issuer: /CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
Certificate serial: 01A0C220301832C13A630A596251267530E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
Manifest number: 027C
Signing time: Mon 21 Sep 2026 04:01:24 +0000
Manifest this update: Mon 21 Sep 2026 04:01:24 +0000
Manifest next update: Tue 22 Sep 2026 04:01:24 +0000
Files and hashes: 1: 25aFLsrtr-3cg85dYuCtUtJ12DI.roa (hash: Q6BbhiSVhBcdb9sUM5J8K87QWD5MUDWEKTLkdgJwJhY=)
2: Dxd9Rq5RS92RniRMevdK337bqNU.crl (hash: YaJQOXz+3JzlG5TUUXNQvCNaMu1R9JwPyHh1CBaPn9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:20:30:18:32:c1:3a:63:0a:59:62:51:26:75:30:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
Validity
Not Before: Sep 21 04:01:24 2026 GMT
Not After : Sep 22 04:01:24 2026 GMT
Subject: CN=def16047308b9e8fbc1f9990ec92a350bf9ca5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:f2:39:39:6e:c8:33:62:d7:b4:31:66:2e:
bb:2e:a1:b6:eb:9b:06:91:07:14:e6:b8:65:94:33:
6f:5f:1b:d0:28:f3:31:3c:1b:be:df:ba:d0:65:0e:
ca:8b:ec:82:4d:75:0e:bd:68:cf:43:03:97:f2:3a:
6f:66:f9:51:e5:bf:64:3b:9a:e7:81:01:c4:89:3f:
b5:c2:77:f3:b3:36:a4:7d:23:11:d3:c0:a2:ee:62:
9e:86:d8:73:8f:9e:b1:1b:f5:ee:62:18:ab:50:ee:
eb:e5:4c:bb:3b:60:de:ff:d6:3d:34:4a:ca:3c:a9:
23:f4:b7:25:30:10:65:ec:67:97:5d:d0:99:63:c0:
0a:a6:11:0e:91:1d:d7:b2:1e:ed:43:93:12:2e:1a:
bc:4c:91:82:08:b8:f6:cb:ee:69:d5:f9:8e:45:81:
50:c1:19:02:d0:a3:74:04:35:e4:b1:e2:3c:fc:50:
74:09:4f:4d:29:eb:0f:45:49:fd:4d:cb:b8:a8:cf:
c6:9c:1a:6b:06:84:e2:40:ae:7c:ab:ca:1a:fe:ff:
1b:31:6d:0e:81:19:1d:74:d2:50:55:e3:12:ff:2f:
ee:0e:e4:80:e7:7b:ac:85:5d:d7:f8:de:17:0e:f1:
86:b0:5f:28:fa:eb:eb:6a:83:4d:1a:17:f8:4e:2a:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F1:60:47:30:8B:9E:8F:BC:1F:99:90:EC:92:A3:50:BF:9C:A5:EE
X509v3 Authority Key Identifier:
keyid:0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:58:a7:d8:61:52:f7:de:c9:84:be:a5:1b:29:a0:8f:aa:7e:
dc:96:47:7a:2f:2a:ed:97:e9:e7:e3:d1:df:b3:43:7a:c2:2d:
2e:82:62:a2:92:09:99:c5:1d:eb:a4:91:3f:a8:1b:60:f7:cc:
82:1f:0a:f2:62:65:a6:13:c7:9c:c4:1e:44:2e:75:60:71:42:
f0:b6:45:af:65:f8:ea:d7:78:97:2f:fe:70:2a:42:70:f4:13:
ca:a0:90:6b:04:84:7a:00:a1:95:d0:5a:7b:db:ab:e0:8c:a8:
c1:61:fb:61:b2:28:4e:f9:e7:de:1d:34:c7:25:9b:79:d4:98:
20:7a:89:71:f3:a5:0f:f5:9a:7c:6e:03:4d:e1:9e:2d:65:f0:
cb:dd:b4:70:87:ce:29:f0:1d:45:b4:16:ff:4a:c7:52:8a:09:
38:9e:b3:cf:e7:ae:70:4f:7f:96:ff:44:06:71:c8:b3:85:3b:
85:70:b4:71:c4:10:00:f3:3a:ef:90:a8:87:0c:1d:47:d3:5a:
d0:14:22:4b:32:b8:de:bc:3e:ce:b6:07:d1:05:cb:f5:93:ff:
1d:dc:3c:f4:00:0e:3a:28:93:10:08:d9:ef:e7:d1:33:47:b9:
79:d3:d3:66:ee:81:0d:1f:2e:56:e3:1a:2a:ca:f7:5e:db:d4:
3e:19:88:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:25:11 2026 by rpki-client