Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: kGRMzuQDtlmiWXcxb5mo6RjxXH5Gs80kL5EqsaQhPPY=
Subject key identifier: A5:7D:A5:CB:C0:58:0F:C8:65:15:97:19:5A:94:E5:B0:1F:44:6E:81
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 01A1163C6CC4D30085167DE99A44CAFB80B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 1A8F
Signing time: Wed 07 Oct 2026 12:00:20 +0000
Manifest this update: Wed 07 Oct 2026 12:00:20 +0000
Manifest next update: Thu 08 Oct 2026 12:00:20 +0000
Files and hashes: 1: HeTj1rlCLTtvBYW1onGZ7LauPQY.roa (hash: weFl57AveWg1aEff8nmfajyotthwbCTL0U0EBzxk8Zk=)
2: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: rMob4qZJwRr73CRubT7kbKB7vDcXL1ZC/1rJsCa9040=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:3c:6c:c4:d3:00:85:16:7d:e9:9a:44:ca:fb:80:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Oct 7 12:00:20 2026 GMT
Not After : Oct 8 12:00:20 2026 GMT
Subject: CN=a57da5cbc0580fc8651597195a94e5b01f446e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:fd:b9:88:90:2c:57:c1:fc:89:14:42:65:
50:ce:ae:ba:f4:d0:4c:4f:5c:e9:8e:c7:a8:6e:57:
09:cb:b8:45:74:5e:52:39:19:9c:2b:63:19:23:98:
1a:22:39:9e:32:10:81:c7:29:44:5d:2f:cf:ae:3e:
17:9e:3e:c0:d1:da:ac:82:ed:0f:a7:a9:df:df:c9:
33:19:ef:2d:00:b5:1e:c3:55:33:a4:65:01:e1:36:
ff:2a:d8:13:0e:a9:ac:f9:98:e3:40:48:3d:e5:d8:
d3:64:f4:07:8a:15:77:f7:ab:2d:d5:c8:fa:ae:61:
ac:e6:5b:8a:4c:4b:02:22:cb:c1:46:86:24:5d:80:
0c:6f:5c:77:47:61:00:24:96:19:46:a7:2b:56:db:
c0:0d:2a:fa:44:1a:d1:1e:90:f4:8f:94:cb:63:3b:
9a:56:38:a2:81:5b:e0:00:1a:79:38:76:c3:b6:d3:
18:7b:6f:03:44:2a:98:d1:18:ea:ca:c1:f1:48:1a:
43:62:3f:fc:e7:66:ba:12:e5:99:48:fc:38:cb:2d:
30:4b:df:91:f1:56:ea:8a:14:76:fa:f2:ce:f4:1c:
a5:05:ec:9d:d9:e9:84:74:bf:c6:72:9c:45:26:db:
72:a5:50:d1:26:87:0d:7f:45:fc:1f:21:20:67:4c:
21:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7D:A5:CB:C0:58:0F:C8:65:15:97:19:5A:94:E5:B0:1F:44:6E:81
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:35:d8:3e:f2:5b:f5:36:6e:09:de:c9:00:83:7e:39:fa:95:
99:b7:bd:aa:f3:9d:4d:7e:e6:07:68:09:ff:85:50:13:63:55:
57:6e:51:ea:88:1b:28:5e:6c:a6:bb:de:95:6c:50:50:72:33:
e3:32:fa:88:bb:5a:c8:11:3d:a8:fe:03:96:ef:10:81:91:eb:
9a:17:f2:0e:78:f3:fd:22:a0:5b:4f:53:d8:be:68:33:79:5f:
57:45:db:a5:2e:8a:93:c0:5f:94:ce:5f:2b:51:63:3e:86:5d:
0c:7e:2e:9b:0f:e2:e7:fd:78:6c:0e:18:7a:b3:19:34:a4:30:
70:a8:d6:b9:93:76:44:d3:c5:72:c1:75:a6:5e:de:b6:2e:fd:
f1:d0:e4:4f:b3:88:40:92:c2:ac:53:cb:f6:80:94:02:ee:2d:
2e:da:4d:71:ec:d1:1c:50:6d:2b:54:45:23:91:50:5c:2a:de:
6b:ee:1b:ce:f6:fe:78:9e:00:79:28:4a:80:33:e4:2b:61:15:
a0:38:4d:75:b2:38:51:c3:44:70:b8:31:75:8a:d6:1b:4d:5c:
fa:9b:13:a4:c4:31:f7:19:8a:94:b0:a0:97:f4:67:e4:bb:d8:
75:35:35:dd:ab:2d:3f:83:9a:81:83:04:2b:d5:11:15:29:00:
a4:08:c5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:03:02 2026 by rpki-client