Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: 1dwNRJ5JFG81Dczpy3OWVCehnXqIT4tsShJFBAQ9Cs0=
Subject key identifier: B4:CF:3C:DB:96:5C:12:CD:50:79:2C:BD:E6:C8:25:0B:00:9C:ED:40
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 01A0C17B10DFF1C93877DDEF25D0DA8EC04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 1787
Signing time: Mon 21 Sep 2026 01:01:02 +0000
Manifest this update: Mon 21 Sep 2026 01:01:02 +0000
Manifest next update: Tue 22 Sep 2026 01:01:02 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: IEVQMXiRA8DZRAuLbwgMBQoPycARIDk+HW/jZUyiuAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7b:10:df:f1:c9:38:77:dd:ef:25:d0:da:8e:c0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Sep 21 01:01:02 2026 GMT
Not After : Sep 22 01:01:02 2026 GMT
Subject: CN=b4cf3cdb965c12cd50792cbde6c8250b009ced40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fc:8f:b2:87:f9:db:f5:30:18:2d:81:fa:06:
19:60:a7:b7:81:69:db:42:82:49:7e:d6:b6:d2:38:
ca:e9:a5:9b:ed:5b:47:68:54:e7:3b:1f:f2:1c:5a:
fd:b1:fa:f4:6e:b9:7a:c0:f1:fd:f8:2c:cb:20:b6:
4b:03:39:97:73:67:4e:26:80:58:d8:2c:1f:75:8f:
39:85:97:5b:f4:ef:11:8a:51:6e:a8:c4:c9:99:57:
19:23:2f:2b:5e:12:f0:38:97:11:d1:01:59:70:3c:
f8:b6:0e:1d:7b:0d:24:1e:4b:be:cf:c5:e7:16:1f:
a4:a4:23:e5:4c:7f:84:0e:5f:25:b9:bc:ff:3f:67:
45:16:22:ca:2b:d2:87:57:34:a5:28:49:98:f2:2b:
b3:ec:88:b0:6c:e7:da:24:e6:82:fa:b6:ba:9c:9f:
b9:02:d5:6f:4d:51:33:3f:78:a1:ff:17:9f:cb:38:
d8:f3:4a:28:cf:f2:b9:13:70:b2:60:08:1c:7b:49:
fa:59:1b:e1:1f:23:12:f0:6e:de:26:16:30:a0:52:
fa:19:dc:a9:0b:56:2b:37:a8:68:b1:6f:4a:59:cf:
f3:92:51:3b:cb:50:8f:df:4a:12:6f:70:5f:77:25:
05:6c:75:7f:cb:7e:5e:33:1a:7b:ad:f5:ce:8b:a9:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CF:3C:DB:96:5C:12:CD:50:79:2C:BD:E6:C8:25:0B:00:9C:ED:40
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0a:4d:36:a6:28:dd:f0:d0:e3:31:6b:5b:ad:e8:cf:49:2a:
55:9b:7a:87:d5:25:01:75:c6:d2:40:11:d8:0f:ad:ae:f3:c1:
3a:3a:91:fe:5f:b0:c0:26:ce:34:31:e6:85:47:7e:8c:88:20:
2d:6b:84:09:ae:64:94:30:49:97:91:73:64:3c:06:59:30:83:
7e:c1:09:8a:71:f7:b4:2c:4f:a8:94:75:40:41:bf:a4:f0:40:
34:1f:17:e8:89:30:a3:b7:5c:54:1e:a4:2d:68:24:e9:b1:77:
35:75:f1:41:fe:cd:a9:3d:07:75:7f:c0:c4:25:5e:3c:65:9d:
93:af:67:92:fe:64:79:10:6f:7f:ae:4d:c6:27:5a:06:42:71:
a1:1b:be:ce:4e:ec:9a:c6:49:f8:fa:50:f2:40:b5:4a:89:0e:
c3:ba:7b:61:b3:d6:cd:2a:9d:97:39:1b:2d:40:36:6f:f4:c3:
88:5a:f7:39:79:15:48:fd:91:d2:1d:cd:11:12:34:49:7f:e4:
cb:3c:26:d7:0c:25:76:b1:ab:af:be:ec:57:93:5e:db:16:31:
9f:a7:c2:f9:58:07:9b:9e:1c:bc:d1:2c:52:98:a6:b3:e7:a3:
56:83:60:ce:ce:ef:6d:d2:6f:4b:8e:c5:ca:15:ce:8b:f3:4e:
90:11:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:18:34 2026 by rpki-client