
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
File: DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft (raw, json)
Hash identifier: CT+oDh4/L+eDC4zb+PB8fg4xrPn4ByPKhdEJ8YsxBbc=
Subject key identifier: 24:4C:56:2A:7A:AC:8F:F7:27:EA:24:47:D0:D9:45:12:96:23:10:06
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial: 01A12A9FCB92488A138D858B2EE546AD0433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
Manifest number: 173A
Signing time: Sun 11 Oct 2026 11:01:17 +0000
Manifest this update: Sun 11 Oct 2026 11:01:17 +0000
Manifest next update: Mon 12 Oct 2026 11:01:17 +0000
Files and hashes: 1: DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl (hash: dt6D9jskGdD9kzMjYytNzTBl8jd97vaHRFI7ddhFdGA=)
2: u6dKU2x8O3xV7S3OaviPva82180.roa (hash: 9A10Ud5zhJp6APcwr5M/hOCYfKIxkVszIE4bdVZOg/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:9f:cb:92:48:8a:13:8d:85:8b:2e:e5:46:ad:04:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Validity
Not Before: Oct 11 11:01:17 2026 GMT
Not After : Oct 12 11:01:17 2026 GMT
Subject: CN=244c562a7aac8ff727ea2447d0d9451296231006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:bc:b1:b1:c3:eb:a3:ea:fe:44:ce:a8:b4:
cc:dd:70:9d:67:51:0a:3a:fb:8b:70:e2:d5:71:2c:
bb:40:18:e6:0d:3d:43:9b:30:7c:e1:17:89:f8:de:
c0:3b:d5:2d:63:3b:8b:0f:47:08:e4:e7:38:60:5b:
46:51:d0:85:ed:ad:b9:f8:57:bb:05:7b:d2:ee:6c:
6b:bf:63:e1:fc:c0:f7:0a:35:ea:45:52:6b:26:8c:
c8:d9:c4:1e:f6:95:08:44:05:15:73:57:f8:1d:b0:
d8:0a:bd:42:01:15:08:75:06:b1:b3:44:23:32:96:
4c:a2:cc:0f:96:1d:70:bf:be:3e:f9:94:18:55:8b:
69:e1:bb:71:8c:01:24:4f:2e:88:b0:43:94:12:de:
97:3e:37:dc:aa:c6:71:a3:9f:38:b3:03:ab:bd:68:
30:82:76:8a:e1:68:bb:03:d0:bd:c9:24:6b:02:ee:
6e:08:b6:70:d5:00:09:57:93:97:36:cc:60:7c:51:
c0:6e:01:2d:d5:d3:74:75:97:99:e0:f9:2b:8e:17:
c6:1f:bc:0e:e0:12:99:c4:07:96:23:f8:de:9e:8b:
55:65:42:70:14:b9:4f:a7:b9:32:e6:6f:81:ee:9d:
52:03:15:06:09:4b:e2:7e:9e:ce:a0:c9:bf:15:ed:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4C:56:2A:7A:AC:8F:F7:27:EA:24:47:D0:D9:45:12:96:23:10:06
X509v3 Authority Key Identifier:
keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fd:ea:e0:a7:58:84:4d:6b:50:1c:fb:1b:84:69:42:e5:ec:
bd:28:ec:80:26:bb:da:99:e8:c0:29:5d:5d:d5:20:55:35:80:
36:06:80:b5:5b:51:7f:0f:c2:c8:06:93:24:89:8f:6d:77:cd:
25:e7:0f:95:00:ae:8a:99:e9:0d:0e:0c:b0:33:02:17:c0:e0:
8f:f3:79:cf:cc:64:0c:ea:60:da:99:6e:f3:96:7e:21:d8:80:
05:76:f6:da:87:61:f1:e5:46:3d:f2:51:b9:28:aa:92:34:46:
0e:71:0f:86:51:73:4a:be:87:82:f2:16:53:4f:52:e8:fd:f1:
98:e7:3b:7b:3c:b4:68:80:e9:76:00:c7:a8:e5:34:58:d6:22:
73:a3:12:dc:6b:e5:bb:10:bb:41:4a:dd:07:8d:15:86:67:3a:
32:4a:ae:df:60:50:59:eb:e5:fe:b8:63:94:a9:2d:06:cd:30:
0b:8c:18:2a:22:35:5c:3f:8d:be:3d:5e:a0:a0:2b:f5:93:7b:
a3:a0:71:00:47:cc:17:81:f1:77:d8:e6:01:19:d1:e7:d6:d9:
0c:b1:6c:08:88:c5:e7:98:cf:c6:81:c4:e4:44:6f:1d:3e:ad:
90:90:3e:e8:8b:e2:f6:44:5f:2b:fb:e6:d8:72:b6:e0:32:61:
a5:fa:e5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:37:30 2026 by rpki-client