Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: OGrxe4mfwwM6VS8DLjMGYH+F4k8Vz5m6RLDX3ImwsBo=
Subject key identifier: A3:59:3A:C5:38:81:0E:6D:A0:7C:98:EE:FC:BF:3C:EC:68:15:DB:B2
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01A0D2DE68B705EBA45B7326E46F3E82AA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 1AF1
Signing time: Thu 24 Sep 2026 10:03:06 +0000
Manifest this update: Thu 24 Sep 2026 10:03:06 +0000
Manifest next update: Fri 25 Sep 2026 10:03:06 +0000
Files and hashes: 1: aTug7YNO613h0EdhaVanobAofs4.roa (hash: JO+eAjDs3aZGB9gkmGCHWKFzmsIX3/pwIhE/HLe+REE=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: 0FOnKwtGUA40y2CXLmXGvQ8djyCNsgoRI8T0YCKX+iM=)
3: tZk_CaKCryAvJRReN7aPc9CJl5Q.roa (hash: GDF5SYSr5M1uY12BBc2vpgU4RwEGW3L9n697ONqnZ8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:68:b7:05:eb:a4:5b:73:26:e4:6f:3e:82:aa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Sep 24 10:03:06 2026 GMT
Not After : Sep 25 10:03:06 2026 GMT
Subject: CN=a3593ac538810e6da07c98eefcbf3cec6815dbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:27:e8:b0:a1:10:86:5b:15:0e:da:34:32:
fa:df:16:d2:84:a4:45:05:3e:ce:64:ff:79:64:18:
13:6f:16:28:7f:e5:79:fd:c8:f7:a1:72:5c:f4:5d:
53:b4:dd:91:fa:24:9e:d6:b1:cd:94:2a:8b:95:3d:
08:6c:4f:9a:6f:48:b6:7f:33:dd:0e:f0:94:39:4c:
8b:46:06:55:87:3f:69:b6:04:2e:b1:54:db:7a:ea:
c5:8a:e6:7b:dc:01:aa:e1:8a:c2:0d:79:f7:80:40:
ec:af:5f:15:cc:49:7f:15:cd:cd:ec:f7:e9:6b:d9:
bb:ee:2d:04:32:05:db:fe:b0:ca:00:46:79:d0:3e:
13:0e:1c:a4:a1:62:9f:b0:e4:a2:3f:f9:81:39:17:
c8:c4:8a:d8:ed:68:6a:a4:99:f5:b6:3e:5c:a4:ff:
53:85:40:58:8d:98:ff:c3:2b:2b:ae:a3:1d:b7:9b:
6a:d4:19:94:b6:0d:f8:2f:72:e7:09:d8:3a:8c:e5:
57:3a:77:d4:26:56:82:69:7e:ab:9c:34:45:78:40:
ad:1e:74:5d:1a:78:a3:09:2c:be:08:ab:d7:3f:4d:
42:70:82:55:ef:63:3d:52:c9:7f:0b:e5:ab:80:05:
1d:e3:09:8a:42:be:d6:c0:bd:a0:e6:ea:a5:32:64:
3b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:59:3A:C5:38:81:0E:6D:A0:7C:98:EE:FC:BF:3C:EC:68:15:DB:B2
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d7:c8:e4:c9:ed:b7:ef:be:74:b6:70:b3:42:a0:85:0f:72:
db:55:b6:db:6d:37:c3:1e:5d:62:a5:01:e3:ba:c7:0e:a9:69:
95:50:a8:98:8d:74:78:1b:76:22:be:d8:2a:13:1a:13:bd:03:
d1:10:b8:bc:1a:65:8c:cb:8c:34:cb:5d:d7:66:00:1f:d0:ca:
7e:da:43:c2:0d:95:c9:32:bf:96:5a:48:26:16:a9:8f:39:2b:
be:76:30:1d:5a:f9:7f:88:93:67:63:b0:b5:4f:f1:76:91:d8:
07:1a:cf:75:f7:0d:96:e3:0f:15:02:ea:e4:14:47:aa:b8:08:
f7:fd:b1:76:d7:7c:53:b5:dd:1b:80:4f:e3:6e:12:ec:6b:2d:
03:17:4b:94:07:13:19:7b:58:24:be:24:ce:c1:a9:41:4e:a1:
5a:2e:e2:f8:96:55:4a:08:37:14:23:f3:9a:06:f5:02:80:64:
ec:18:f7:04:08:bf:68:c1:e8:b6:c3:d5:65:1a:fb:9c:ca:6b:
2f:fd:ec:2f:82:80:05:a2:a0:26:5b:f8:39:6e:37:c5:64:b2:
97:d9:07:0f:cb:b0:a9:3c:92:fb:3e:58:5d:03:4e:bf:11:f9:
43:22:69:76:95:92:ca:8f:5a:b2:37:3d:a4:25:1b:e2:42:0c:
bd:c3:2d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:52:55 2026 by rpki-client