Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
File: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft (raw, json)
Hash identifier: U5k7Td/YAFiVj+1TDjKEbU81zVwYCm/zYjcE2E1JzRc=
Subject key identifier: 34:49:1B:CD:0C:C2:55:20:53:B5:15:8E:E8:0F:E5:05:3D:9A:FC:A6
Authority key identifier: 0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
Certificate issuer: /CN=0e1dd539525a39d847014e8fea3c641d973cc866
Certificate serial: 01A0D804CD5B50821533887513C300D499F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
Manifest number: 09F3
Signing time: Fri 25 Sep 2026 10:03:08 +0000
Manifest this update: Fri 25 Sep 2026 10:03:08 +0000
Manifest next update: Sat 26 Sep 2026 10:03:08 +0000
Files and hashes: 1: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl (hash: lLvWl3jdQrIUhobVIeCls7LZnAtnjDXDp4wSC3lKKqY=)
2: wWu-RpwUyxS5-QEBD4scp9HUjmY.roa (hash: Vz+DIxi0X/mIEqFNyd8Fjt4ub221xLszyBI1vupEUnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:cd:5b:50:82:15:33:88:75:13:c3:00:d4:99:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1dd539525a39d847014e8fea3c641d973cc866
Validity
Not Before: Sep 25 10:03:08 2026 GMT
Not After : Sep 26 10:03:08 2026 GMT
Subject: CN=34491bcd0cc2552053b5158ee80fe5053d9afca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:28:f7:0c:90:31:0e:c1:6e:fc:f5:96:72:
03:a0:b9:e4:6a:1d:f1:14:21:34:77:83:bf:c3:52:
38:c9:cc:83:27:fb:1a:ca:7e:fd:7f:0e:d9:27:42:
7f:0c:b5:3e:e1:6c:5e:f5:14:bb:75:a7:1e:28:6d:
74:d0:67:c3:17:74:ed:9c:81:10:b9:22:ad:4f:68:
24:a5:0c:39:6b:35:4c:82:cf:d5:9f:72:7f:28:80:
c0:7d:7e:be:04:a4:c6:15:d7:80:8f:87:5e:61:88:
98:ab:e6:9f:68:07:05:69:c8:1d:dd:8f:84:59:3a:
e9:2e:b9:37:6a:50:ae:4e:d6:ac:8d:6e:5a:c8:4a:
87:83:35:ed:56:54:86:63:04:43:0f:20:56:89:14:
61:74:6c:be:f6:9e:27:0c:9b:f5:fc:c8:06:4e:1c:
d4:5a:8a:61:19:5e:52:7a:0d:e1:4e:83:6d:24:60:
90:7c:57:6f:43:45:39:2b:3b:b3:d1:7f:26:86:64:
2f:c1:65:cf:63:04:71:7b:05:af:00:9c:e9:8b:86:
3f:bc:e0:94:63:94:49:c1:b7:ca:45:6e:f1:ad:c8:
51:93:77:c2:df:fc:a8:19:a8:2d:9d:6e:22:e4:f6:
2d:4b:3a:3c:d5:d4:df:bb:8d:5f:ae:a1:63:9e:3b:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:49:1B:CD:0C:C2:55:20:53:B5:15:8E:E8:0F:E5:05:3D:9A:FC:A6
X509v3 Authority Key Identifier:
keyid:0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a6:6c:ce:aa:ed:47:6a:c5:39:c7:93:2e:23:65:b2:61:52:
2d:27:22:8e:13:50:8d:32:56:1c:3c:cb:92:61:17:c8:63:d3:
2c:7e:5a:2c:d4:9b:02:8e:32:af:6d:43:75:9c:05:62:1a:84:
8a:47:26:f9:9f:ed:1f:27:ce:cf:04:9e:0c:1e:65:59:52:53:
2b:4d:9f:a0:56:3c:b1:6b:f8:12:f3:42:2d:72:93:e6:d8:bb:
1f:9e:53:2a:0b:da:d8:0f:b4:86:61:4d:e4:2d:c6:cd:30:3e:
81:7f:b4:04:f6:b3:6c:7e:68:42:14:ed:fc:ea:2c:2e:1f:ac:
22:c0:32:a6:6a:09:cd:a0:16:a0:d7:ec:19:51:77:0f:b9:e6:
54:57:4b:c8:f2:15:36:42:6f:af:72:f0:a7:89:67:94:34:1a:
78:78:34:a2:d9:87:20:0d:eb:99:e3:1c:4a:ae:d5:25:2e:62:
62:76:c0:80:8b:67:7b:54:17:af:1b:94:17:bb:07:19:0f:af:
be:8e:ac:3c:55:bb:1f:40:86:a2:a5:f1:43:81:8e:29:aa:6c:
bf:ca:d8:ad:33:4b:17:80:92:b1:f5:02:f1:ac:6e:97:0b:58:
9c:bc:91:dc:2f:7d:68:d5:d6:d3:98:85:4d:8b:95:c7:be:0f:
f3:87:35:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:05:52 2026 by rpki-client