Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
File: 1-dhnzCTQvonwX8hyWOCHemAVgLk.mft (raw, json)
Hash identifier: q5u0eGdeMaaRQG1Tt8Fn1AXJfgmEItF9zzfQZU58Tds=
Subject key identifier: 0A:44:9F:90:6C:B7:72:5E:64:7D:81:52:16:09:65:78:38:1A:90:DF
Authority key identifier: F9:D8:67:CC:24:D0:BE:89:F0:5F:C8:72:58:E0:87:7A:60:15:80:B9
Certificate issuer: /CN=f9d867cc24d0be89f05fc87258e0877a601580b9
Certificate serial: 01A1377F7DD8EF2CC628730A122079A879A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
Manifest number: C0
Signing time: Tue 13 Oct 2026 23:01:04 +0000
Manifest this update: Tue 13 Oct 2026 23:01:04 +0000
Manifest next update: Wed 14 Oct 2026 23:01:04 +0000
Files and hashes: 1: 1-dhnzCTQvonwX8hyWOCHemAVgLk.crl (hash: tEJoib8BmD4oj8Ru0oaDb3aMo3lIpD6xLVRupaG+bZk=)
2: eI9NerJ1c6tinDx9yJcsboAQaCc.roa (hash: /4R9eBzzDT2s1cbNz4Ys3Jws6eQW6QelhjomMlmRAmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:7f:7d:d8:ef:2c:c6:28:73:0a:12:20:79:a8:79:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d867cc24d0be89f05fc87258e0877a601580b9
Validity
Not Before: Oct 13 23:01:04 2026 GMT
Not After : Oct 14 23:01:04 2026 GMT
Subject: CN=0a449f906cb7725e647d815216096578381a90df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:e7:4f:28:74:93:a5:a1:47:ad:0e:87:66:
e8:fa:b1:4f:2a:56:17:4a:09:10:fd:37:af:ab:2e:
57:22:76:4f:2c:e2:fd:b9:0d:a5:b4:16:37:24:e2:
75:2b:96:94:8b:20:07:8f:44:10:9c:7c:9a:6e:19:
35:fa:02:a9:93:3a:15:64:16:89:fb:00:9f:a2:fc:
cb:47:59:a1:1a:dd:11:56:4a:53:2e:3e:ae:06:64:
47:8e:b7:48:f0:73:3e:80:66:dd:9e:3e:a7:79:1f:
3b:ac:f5:49:29:e1:5c:b6:77:b6:7a:06:0f:7a:b0:
52:14:e6:5a:d8:47:e7:b7:4a:6b:59:3f:b3:af:d1:
c1:2f:fa:72:ed:da:6a:06:88:1e:70:c2:8f:43:30:
04:58:e2:1c:3b:be:48:d8:69:db:44:26:ac:5c:e4:
cd:bf:7c:a8:a7:64:07:22:78:b6:a2:d1:71:0e:26:
1b:59:11:13:de:1a:ef:9f:40:28:77:19:07:2e:74:
41:18:65:25:c0:9e:a5:f9:c3:10:80:e8:e6:58:77:
b8:a3:a8:63:97:87:8d:cd:f8:2f:6b:22:09:4f:4b:
43:8e:cb:f2:9c:24:19:2e:8a:52:4e:37:84:c1:d9:
7a:3d:f6:db:15:14:19:91:d3:9f:49:a5:11:6b:fd:
08:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:44:9F:90:6C:B7:72:5E:64:7D:81:52:16:09:65:78:38:1A:90:DF
X509v3 Authority Key Identifier:
keyid:F9:D8:67:CC:24:D0:BE:89:F0:5F:C8:72:58:E0:87:7A:60:15:80:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7c:6c:63:2d:c0:a4:d1:d7:19:45:c7:d0:1c:de:ff:f8:16:
c8:12:64:49:2e:5b:23:58:a6:4e:ab:f7:46:f1:5b:d8:6d:53:
0e:6c:65:f5:4f:c3:95:e6:2d:ac:61:f5:73:df:57:eb:2c:ca:
ea:04:a1:ba:53:7a:60:d2:2a:3c:10:b5:94:f9:0e:d2:e5:82:
a4:fc:3f:9e:08:43:4e:bc:08:37:bd:45:93:f2:1b:45:e8:cd:
92:80:02:d0:84:27:53:ed:1e:8c:8a:0b:40:35:d0:6a:d2:97:
8c:13:5c:79:f4:79:10:84:f1:f3:03:77:eb:1c:11:75:6b:9b:
04:29:ab:6c:50:22:6e:b5:18:bf:a6:66:d2:10:6b:7d:61:49:
d7:b5:ba:47:1f:48:d2:d6:16:2d:04:b2:bb:11:48:57:5d:81:
a7:0c:d7:5b:86:d3:43:f9:ef:58:7d:d2:38:6f:4c:b2:fb:f1:
0e:88:a9:eb:36:2f:d6:a3:28:87:66:a9:36:06:07:39:88:cc:
0f:50:7f:4c:b9:37:58:eb:15:d4:23:ab:cc:78:46:0e:4c:d3:
7c:d2:b1:2e:43:0b:ca:d5:4d:d0:01:07:66:0f:f2:62:00:e6:
f0:88:bf:78:39:9f:5c:3a:22:7f:7a:8e:d0:5e:26:42:cc:45:
f3:5c:3f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:00:27 2026 by rpki-client