Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
File: DIXrpeHV0Efz2lfeYnX968At-5g.mft (raw, json)
Hash identifier: NtRVNeco3yKNrgARaNrMXiwFtyjaZyIAS9aHZDTGu0U=
Subject key identifier: B9:F6:63:47:56:15:D9:78:A6:ED:E6:DA:D7:7E:E9:44:14:35:DF:E0
Authority key identifier: 0C:85:EB:A5:E1:D5:D0:47:F3:DA:57:DE:62:75:FD:EB:C0:2D:FB:98
Certificate issuer: /CN=0c85eba5e1d5d047f3da57de6275fdebc02dfb98
Certificate serial: 01A0BEB0EB97032D9DCFB0F7122D1AE51E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIXrpeHV0Efz2lfeYnX968At-5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
Manifest number: 0145
Signing time: Sun 20 Sep 2026 12:01:00 +0000
Manifest this update: Sun 20 Sep 2026 12:01:00 +0000
Manifest next update: Mon 21 Sep 2026 12:01:00 +0000
Files and hashes: 1: 07X4-aly_fwzIPkdRTVK5Fls7IE.asa (hash: PSrwFcPr+F0Ok6ZKKWr4uBgYHzYBf4fKh4J9YvDEC+k=)
2: DIXrpeHV0Efz2lfeYnX968At-5g.crl (hash: wenFgdyesIYzsJlwyjLjPA76/khxOscy6cPDOfTNnO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIXrpeHV0Efz2lfeYnX968At-5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:eb:97:03:2d:9d:cf:b0:f7:12:2d:1a:e5:1e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c85eba5e1d5d047f3da57de6275fdebc02dfb98
Validity
Not Before: Sep 20 12:01:00 2026 GMT
Not After : Sep 21 12:01:00 2026 GMT
Subject: CN=b9f663475615d978a6ede6dad77ee9441435dfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:cb:75:19:bd:17:18:c8:f3:10:70:0a:e4:
8f:c4:03:13:f8:db:4d:ca:88:c7:57:6b:30:77:44:
35:fb:1e:bb:b5:ef:b3:ae:c5:dc:2e:de:47:f1:c5:
73:84:fb:7c:b5:8e:57:7e:47:64:c3:d7:2b:3e:67:
57:95:bc:f0:23:e7:b4:92:86:c0:d5:42:8e:af:2c:
4b:76:8f:f8:8d:cf:ff:83:47:d2:63:49:6e:40:50:
cf:03:31:49:d1:97:0e:1d:54:31:1a:53:6d:3d:2d:
d3:81:77:58:28:1f:7f:2a:12:c6:a4:3e:34:05:69:
97:76:9a:92:b0:a4:42:8a:28:cb:85:fd:f0:e3:22:
e0:38:4b:3c:62:11:c2:af:3f:19:f9:f2:94:15:fa:
9e:3c:d6:f0:aa:fb:cb:86:12:f6:b5:69:46:ca:c2:
d4:ad:93:65:2a:26:7e:46:75:55:8c:47:bd:3c:76:
6d:8c:58:1c:e7:0b:03:a2:4b:2c:bd:b9:d2:c7:0b:
4e:5a:00:b3:51:7a:22:d1:dc:e7:e5:9f:f4:ad:b4:
a0:ce:aa:0f:19:d7:af:bc:3d:14:af:4c:37:72:e5:
77:64:23:a3:3c:98:d9:3c:a2:0c:eb:56:0a:7e:29:
2d:f2:4a:9f:f5:1d:24:6c:7c:87:f0:d6:34:be:6f:
01:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F6:63:47:56:15:D9:78:A6:ED:E6:DA:D7:7E:E9:44:14:35:DF:E0
X509v3 Authority Key Identifier:
keyid:0C:85:EB:A5:E1:D5:D0:47:F3:DA:57:DE:62:75:FD:EB:C0:2D:FB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIXrpeHV0Efz2lfeYnX968At-5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5d:bb:9b:f1:8f:14:bf:4f:ae:ce:42:dd:47:7c:3e:05:1a:
31:a8:80:72:4f:29:bf:e0:67:fa:59:0e:73:77:fe:c2:60:bb:
95:e3:97:f6:c6:ee:da:3e:a8:0b:75:8f:bd:0c:34:81:09:f6:
de:a0:7a:c3:d6:f6:e0:8f:82:2e:75:36:7f:61:71:bb:71:65:
fa:db:08:76:b6:99:cf:91:6a:80:af:00:04:d9:16:55:eb:15:
4d:a8:81:9a:d9:f7:25:f8:e8:46:86:1a:29:6a:46:d7:fe:90:
0c:b7:32:fa:8d:82:8d:b1:26:86:17:f6:0f:32:17:70:7d:cb:
05:ac:26:22:49:57:b5:07:76:9b:b0:a1:68:ef:3c:4e:ac:5e:
21:5d:8b:43:99:91:f5:a5:48:58:71:56:72:74:a6:16:8c:ba:
99:fa:9a:a6:3f:aa:1d:34:7c:67:89:69:66:1b:06:23:e0:9d:
b4:7c:7a:6e:36:c1:b7:34:5e:78:22:2a:8e:47:8f:48:87:c3:
e1:fa:90:c5:72:a0:a3:22:2f:28:db:11:81:92:66:00:96:82:
9d:dd:82:89:37:a3:c8:c1:0b:6a:89:72:7c:07:c1:e3:99:a6:
68:24:65:4f:bf:f8:b6:22:e0:e9:35:f0:2c:f4:0f:ea:87:f6:
19:48:f0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:44:15 2026 by rpki-client