Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File: DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier: 6xSOw/m6CGD5jdR05UvkktgFXyd96PLolK8Sd07uR3g=
Subject key identifier: 11:69:FE:28:CB:33:03:87:9A:27:94:B0:EB:06:52:6E:B5:F1:E3:D8
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial: 01A0C88F826FB116824F8B58298ED5505F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number: 0541
Signing time: Tue 22 Sep 2026 10:00:43 +0000
Manifest this update: Tue 22 Sep 2026 10:00:43 +0000
Manifest next update: Wed 23 Sep 2026 10:00:43 +0000
Files and hashes: 1: 1-nukkIR6QW9cgqOuKheFLpvicPM.roa (hash: E0YmmZeDYH8nWMQd2BPTkT+OQ+zyRbNJxd4dp/aCenc=)
2: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: Rg90x2gpJp863g7aJGJguGkD1/XbZlr+R8qjW6JBst0=)
3: rJtFAaihKwhTzfzLn9-a6P1w8XI.roa (hash: B8CZ2EbQTKFiK2knWInh1wLJvgTohC2zNRpfKKdNVRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:82:6f:b1:16:82:4f:8b:58:29:8e:d5:50:5f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Validity
Not Before: Sep 22 10:00:43 2026 GMT
Not After : Sep 23 10:00:43 2026 GMT
Subject: CN=1169fe28cb3303879a2794b0eb06526eb5f1e3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:25:55:73:38:2f:94:2e:cb:37:3d:54:e5:40:
6c:50:29:8a:ff:11:65:31:0c:dd:f2:ba:5d:f7:e4:
3c:bb:91:76:03:f9:81:4c:63:93:db:ee:33:9e:cb:
c5:1e:12:16:22:b6:78:16:ee:4e:b1:18:b8:23:2e:
1e:98:6b:9d:81:3d:62:30:97:b9:38:bf:a5:fb:61:
5a:89:84:43:f1:b0:81:2b:87:8f:dc:46:e8:34:7a:
ae:04:57:b1:21:bb:90:37:12:47:8a:48:bb:8e:7a:
57:7b:c0:84:39:0f:b2:5a:98:11:29:88:d1:6a:d3:
4b:55:21:15:2b:46:ed:cb:d2:fe:1a:7d:4d:50:8e:
cd:aa:bb:e1:31:17:ac:fb:a2:f6:f2:26:08:5f:e1:
5c:07:11:62:86:f8:24:92:36:32:f8:3e:16:fc:fd:
c8:05:ab:8d:a9:61:23:02:1f:f7:cb:79:0c:6f:d7:
3c:4e:5d:28:78:cc:49:92:4d:2b:f3:1e:1a:b1:d5:
19:e9:9e:0c:1f:d0:8b:44:60:8a:be:cd:55:66:86:
49:43:bc:24:3b:0d:68:0c:28:a3:dc:99:c0:ba:fb:
b7:3b:d3:3d:11:1c:4d:f1:c7:e4:e9:01:4c:93:8e:
dd:96:98:39:50:c9:27:a3:9e:5f:fb:67:b7:5e:b0:
a0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:69:FE:28:CB:33:03:87:9A:27:94:B0:EB:06:52:6E:B5:F1:E3:D8
X509v3 Authority Key Identifier:
keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b9:bc:fc:b1:97:0a:02:b2:7d:57:78:39:54:35:9d:22:c4:
4c:14:39:2a:e5:10:a3:2a:36:8e:1e:9f:4c:08:87:9c:9e:e4:
7c:43:df:9e:d8:0c:43:b2:fd:d9:ed:cc:38:bb:f5:96:6a:aa:
9a:9b:80:e4:88:15:36:55:04:0d:c2:ed:22:24:ba:03:fc:a1:
d1:26:88:32:b9:7e:32:e7:2e:d4:b7:e8:73:75:87:3e:a9:6a:
d2:84:52:1c:1f:a0:42:81:dc:1c:23:71:d6:c1:28:5d:cc:36:
aa:55:94:b0:8e:27:3c:6f:6b:79:82:71:c0:68:bb:7e:ae:6d:
94:34:08:74:88:0e:79:7e:50:6c:49:81:26:45:72:ae:38:22:
9b:da:10:fc:22:c4:d0:39:b3:70:c4:6b:fb:4a:ab:c3:80:be:
ce:70:22:6a:71:cf:47:8c:53:6e:8f:ed:b8:b2:1c:c0:9b:99:
f9:b1:06:71:97:38:16:94:2f:5f:ce:c5:8a:c1:03:86:42:ed:
5f:b7:26:65:5e:26:b8:8c:9c:4d:0b:ea:b8:a1:70:29:53:f1:
13:66:c7:62:bd:15:18:6a:b3:39:3b:a3:a0:0d:6f:ac:53:15:
51:78:89:37:e7:ca:41:88:cb:bc:60:a5:b2:61:84:a0:0a:7b:
96:1a:54:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:58:09 2026 by rpki-client