Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: bDQAjJ0JecKo9QsGRCw/HL21BZMRorz2bS1tPhomqLw=
Subject key identifier: 39:92:4A:38:83:AC:D7:2E:A7:58:C5:F6:10:97:ED:04:FC:DD:30:1E
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 01A0C47B8C410F80CE06F52D66761EDB563C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 15:00:26 +0000
Manifest this update: Mon 21 Sep 2026 15:00:26 +0000
Manifest next update: Tue 22 Sep 2026 15:00:26 +0000
Files and hashes: 1: 3D6ST7VPwU1ruJHTqcORchHTAiE.roa (hash: NASIK7MkKYD9o//4ZODXB3XY9C+uWrjRQevxzYiJxB0=)
2: FsryNOkpTRhYXYiVpfSErxkdF5I.roa (hash: 7TnmsucFlZLELXfMUZN9SGlpQMX8+cF0eWaXdVfCFOM=)
3: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: a2l7YdYt4t8Nhol9m0t775GPghK9gRnav8x3dwNH8S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:8c:41:0f:80:ce:06:f5:2d:66:76:1e:db:56:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Sep 21 15:00:26 2026 GMT
Not After : Sep 22 15:00:26 2026 GMT
Subject: CN=39924a3883acd72ea758c5f61097ed04fcdd301e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a7:b7:e3:96:86:bd:dc:97:9b:80:e2:77:5e:
d0:2e:16:34:51:7b:ca:eb:2f:a0:2b:e7:7f:6e:78:
99:e9:d4:02:d0:9f:67:3c:f8:56:d5:1b:63:b6:cf:
bc:b4:ca:bd:9f:b4:26:96:02:38:fd:ae:34:d8:18:
29:51:67:a9:2d:c4:a1:32:6c:d1:ef:cf:0d:bc:81:
7f:7b:be:44:8f:ce:35:27:e4:30:48:ea:4d:d5:02:
a9:2c:f6:3f:84:a2:20:f6:06:e4:5e:a8:d5:99:93:
9f:82:1d:05:ef:6e:57:b6:9c:4b:ab:da:ee:24:dc:
3c:1c:d0:b2:4b:a0:2b:c1:18:95:28:2c:67:e8:fb:
07:97:92:31:5c:80:0a:85:cd:0e:10:a6:5d:f1:36:
4d:32:3d:3d:25:22:0a:f7:d3:9d:48:73:0c:65:30:
76:e5:75:09:37:fb:65:a0:41:ed:10:7a:9d:dc:2a:
35:af:30:68:39:e8:0e:3e:5c:7d:17:0d:a0:65:9e:
b6:6e:c4:b7:b1:df:38:c0:5c:e6:75:54:d5:89:4e:
d4:b8:9d:68:c7:4d:d0:01:f0:8a:ec:db:d6:bb:44:
7f:b4:cb:16:a5:5d:9a:26:b1:a4:25:0b:71:20:ac:
15:aa:34:35:35:b4:cb:16:bd:1c:11:ed:b7:77:98:
8e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:92:4A:38:83:AC:D7:2E:A7:58:C5:F6:10:97:ED:04:FC:DD:30:1E
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0f:d7:c4:51:4f:e6:92:18:18:31:32:cd:28:3e:92:ce:80:
83:a9:90:a3:03:22:70:e4:fc:6a:de:3d:16:d2:af:47:07:e3:
ff:34:75:68:72:fd:a9:6f:88:51:bb:61:2f:ae:0b:bf:fb:93:
41:67:36:f4:38:26:a0:99:81:17:5e:ac:93:e9:ee:b9:9f:4a:
be:76:e9:02:b8:60:dd:73:2d:bb:eb:a5:bd:ab:51:eb:94:29:
f6:b2:b1:54:21:8a:ae:0c:35:bb:6e:ef:88:f3:9c:30:d4:b6:
95:16:d1:02:f8:3d:fc:94:32:ae:2a:27:d9:1e:29:43:f4:d5:
a3:8f:93:cf:12:dc:80:8d:15:75:0a:93:d5:d3:ba:c8:ab:c0:
39:78:72:6c:82:53:d3:d9:69:c1:50:62:09:69:91:f1:30:33:
7c:5a:ba:82:9b:fe:0a:66:19:9a:a1:ac:17:87:91:f7:95:e9:
42:fa:d4:d0:a6:ee:ae:4d:e2:66:7f:16:32:54:e2:42:ce:1b:
80:a6:a9:81:af:a7:5d:90:89:c8:80:0f:24:af:62:bb:f9:e2:
cd:4a:c6:30:f6:93:c2:5d:68:8a:95:a9:24:a3:cd:a3:3f:15:
c3:be:4a:db:1f:94:ad:38:f7:33:f7:b7:06:c7:9f:14:be:b7:
26:2b:44:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:58:45 2026 by rpki-client