Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft (raw, json)
Hash identifier: Q5kX9r0pyiAdY0U6RBZurmUvNaLQqKipoeqbujlEw0o=
Subject key identifier: 97:D6:DB:B2:5D:09:6A:D9:F1:BB:3B:00:EE:52:6C:46:79:D2:D3:8C
Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Certificate serial: 01A0D0ED982C2A08FC9EB94F7E85CB8D1F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
Manifest number: 11D1
Signing time: Thu 24 Sep 2026 01:00:26 +0000
Manifest this update: Thu 24 Sep 2026 01:00:26 +0000
Manifest next update: Fri 25 Sep 2026 01:00:26 +0000
Files and hashes: 1: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl (hash: Wtv5neV9rQ1M4UmvSUWj6I+oDnn4M4GdHTJ67Lpdy7o=)
2: _Ma0eGZ-z0n1VYqlad5Keq9wR4A.roa (hash: 3N14sFvn0+1bgJyRiEeYpdH6Wj5+13bYO0jZXdPYIJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:98:2c:2a:08:fc:9e:b9:4f:7e:85:cb:8d:1f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Validity
Not Before: Sep 24 01:00:26 2026 GMT
Not After : Sep 25 01:00:26 2026 GMT
Subject: CN=97d6dbb25d096ad9f1bb3b00ee526c4679d2d38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:ae:ee:b6:9d:22:a5:3b:4e:62:b9:74:ce:
93:8e:0b:4b:35:11:c4:ce:c0:33:5a:dc:3a:30:13:
37:e2:d1:42:84:3c:6b:e3:48:59:d6:b1:ca:d5:54:
6b:83:94:6c:6f:78:7d:f1:bb:f3:6a:d3:dc:0b:1a:
0c:75:82:17:ae:06:cc:ac:34:f9:5d:2a:59:f2:60:
e3:d3:cc:dc:39:32:20:44:29:5e:43:67:34:76:a4:
9c:fe:f2:76:31:7d:ee:ee:fc:f8:2d:fb:72:ad:c9:
07:f1:2f:4b:5b:6b:9d:52:6c:f9:f3:61:ff:64:b1:
27:f5:38:9d:b7:68:92:f5:15:5c:45:5d:83:ca:ce:
65:81:c1:80:5d:b5:75:0d:05:ca:4e:a3:ce:1a:b8:
7d:67:7f:11:8e:fd:c3:10:ac:24:5c:1f:5d:fc:aa:
03:75:6d:57:d9:7a:18:8a:5f:60:12:9b:df:15:d9:
98:c7:7b:d2:73:39:99:27:af:f3:a4:ca:56:bf:bb:
90:83:51:76:70:d4:2b:de:e6:1d:a2:62:23:11:d9:
cf:02:99:70:4a:22:fc:a2:96:9a:80:f3:07:66:bb:
df:3a:4c:bd:bd:6d:27:db:ee:c4:8d:86:f2:00:7a:
5e:11:48:82:6e:03:39:5e:a5:91:ef:66:d4:f7:31:
e9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D6:DB:B2:5D:09:6A:D9:F1:BB:3B:00:EE:52:6C:46:79:D2:D3:8C
X509v3 Authority Key Identifier:
keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c9:d9:b1:8a:37:a0:20:93:4b:fc:73:ed:80:93:68:bc:31:
f4:c7:de:75:b4:25:4a:e6:02:b3:e9:d2:e8:ee:88:6a:05:6d:
19:88:a5:1e:82:44:b9:0e:75:03:04:da:88:85:e3:13:58:d8:
bc:73:5f:65:4e:7a:20:23:65:50:dc:80:8c:20:e5:3a:7b:ad:
c6:32:a4:bf:62:a2:01:ad:a6:9d:d0:55:e6:13:bd:66:1e:67:
0f:f5:8b:06:2b:06:84:7f:7d:1b:93:fe:8c:0c:fb:76:38:5a:
a5:6e:51:51:1e:9f:bb:ae:5f:73:e7:bf:a9:74:35:e8:7e:78:
31:ce:08:12:4d:43:65:c3:75:e2:49:d4:fe:3f:d4:99:e2:1f:
a2:a9:28:c1:29:c3:b0:93:aa:21:fe:cb:3a:69:94:d5:cd:16:
dc:ee:8f:18:e9:47:f1:93:bc:a8:c1:2a:dc:20:bc:4d:e4:9f:
1c:0b:7a:0a:27:e8:92:e5:ee:70:66:49:1d:84:9c:8b:7e:cc:
99:36:ec:6d:b0:81:52:1a:51:16:ea:9f:c0:d1:81:9c:28:30:
ab:a5:66:40:15:48:b1:19:b9:3f:ce:09:e4:99:60:56:3d:e9:
e2:6f:5c:ca:c8:5f:1b:37:67:13:7c:cc:8b:75:6b:34:3b:5c:
33:d2:3f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:13:38 2026 by rpki-client