Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: 5rGAyv6yNp/jlgslxk1U5v3kd3pTCRIVgeUtdO7dEmA=
Subject key identifier: 51:2C:D2:E5:28:09:9F:AF:75:0E:1A:73:4E:91:BF:01:E7:12:48:63
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 01A0C6A12E067E513F7A12432CFEEF8E8C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 1958
Signing time: Tue 22 Sep 2026 01:00:46 +0000
Manifest this update: Tue 22 Sep 2026 01:00:46 +0000
Manifest next update: Wed 23 Sep 2026 01:00:46 +0000
Files and hashes: 1: 2lfnmN1-dLZH09vmQWL0x_KLc8Y.roa (hash: JmmqwM4dV5ZCDyqAq/Au9vdb5ogccNfE+4IrV1SqD54=)
2: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: Y+EWd7NgWbQy3xJYFmvkTctqG9wC0BECsM49mwMQ58k=)
3: cpBLfVVbG2Bg4TA77UzT5VjhgRE.roa (hash: N0d6jFAymHdRViLXYwxHMPIvLpjH51TdzFY5Ek5D56g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:2e:06:7e:51:3f:7a:12:43:2c:fe:ef:8e:8c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Sep 22 01:00:46 2026 GMT
Not After : Sep 23 01:00:46 2026 GMT
Subject: CN=512cd2e528099faf750e1a734e91bf01e7124863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:65:cc:dd:a8:5c:bb:3b:99:14:af:40:72:00:
94:f0:dd:a0:38:84:9c:6f:f2:83:c2:b7:28:a2:2c:
3f:56:33:df:3e:23:b4:63:d1:92:63:16:20:03:1c:
7b:69:32:69:b7:44:18:df:48:1e:01:6d:cf:17:40:
54:8e:e0:17:f9:22:e1:43:8f:74:59:91:d0:e9:48:
fe:93:b3:73:a9:ef:63:21:36:fb:71:4b:06:84:eb:
19:81:68:c0:d2:78:e2:2d:f1:b5:7f:53:a8:aa:35:
78:a0:43:51:93:97:15:5d:6b:dd:c7:c5:82:29:06:
d7:e6:3b:85:ba:52:72:26:89:e7:9a:d6:74:5e:49:
f6:10:76:86:a0:ca:6d:fc:1d:85:4f:83:0e:13:e2:
ce:06:b7:b2:5f:ea:1a:2b:a1:f2:aa:e3:74:40:b1:
c3:4d:0a:63:0c:61:97:2f:c1:2c:6c:01:cc:a5:66:
80:07:e7:bb:29:22:ab:50:24:07:48:94:3c:2d:00:
a8:39:2d:69:d3:7a:32:5e:00:b8:b1:81:f4:8a:b5:
20:79:66:b9:8a:c4:c3:37:96:e2:d8:b9:25:d4:04:
c9:0b:de:d3:47:98:d5:3f:ac:4d:ad:76:9f:98:0c:
e8:47:5c:ec:ab:1c:d6:93:a0:72:f0:ff:3a:ba:11:
14:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2C:D2:E5:28:09:9F:AF:75:0E:1A:73:4E:91:BF:01:E7:12:48:63
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7c:f7:a8:7c:74:e4:54:1f:5c:a3:55:f7:b3:6f:6d:ed:33:
82:7e:c0:c4:81:c0:e3:da:37:e5:75:db:88:2a:b4:ee:d7:0a:
7c:30:8b:95:e8:e6:e2:9b:e5:a6:5d:01:74:c0:d4:c6:9d:ff:
09:b4:91:c3:e4:69:8f:65:d8:f9:fa:37:63:e8:b5:0f:0d:54:
34:93:6d:2e:19:b2:d5:40:6c:0d:b2:58:1a:33:ef:04:94:07:
7f:be:dd:9d:0f:af:5e:81:75:ad:3b:ad:b8:6f:d7:4c:67:ec:
3e:71:f9:a7:d3:51:c1:58:bd:06:1d:f4:02:12:3a:59:15:c8:
e6:82:7d:0b:43:ec:00:5a:9b:14:bb:c0:c5:c9:f5:08:a9:b9:
71:87:a4:21:3b:bc:6d:2a:b8:b1:6c:c6:f4:9c:97:7c:91:ec:
df:62:fe:9a:f6:ae:57:d8:b8:98:67:9d:0e:0d:c5:31:e0:b9:
ba:d4:a4:23:91:f9:fa:4c:5c:74:c8:6b:4b:49:b6:4d:fd:be:
d4:33:2d:55:a9:6f:20:98:d6:f7:6f:12:d8:93:e2:e6:01:c5:
0f:f4:f8:06:ae:34:f4:d5:aa:39:3e:d2:7f:d0:ef:dd:76:b9:
0c:f7:6e:9d:9a:54:0f:95:61:9a:c9:8f:2d:ac:c3:a8:10:3f:
85:7f:7f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:55:51 2026 by rpki-client