Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.mft
File: dXkGpvZU8QWwxDaMy_iTlQ5j01g.mft (raw, json)
Hash identifier: Jtmy8kCpEnzmDHMFywUdthgv0ns2ymdaz82KTnml6is=
Subject key identifier: D5:C1:BB:2B:C3:D5:42:98:84:B6:54:14:10:8D:32:ED:02:81:47:BB
Authority key identifier: 75:79:06:A6:F6:54:F1:05:B0:C4:36:8C:CB:F8:93:95:0E:63:D3:58
Certificate issuer: /CN=757906a6f654f105b0c4368ccbf893950e63d358
Certificate serial: 01A0E9D26F3B9CCBFDDF063BCD05423F0FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXkGpvZU8QWwxDaMy_iTlQ5j01g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.mft
Manifest number: 4E
Signing time: Mon 28 Sep 2026 21:01:17 +0000
Manifest this update: Mon 28 Sep 2026 21:01:17 +0000
Manifest next update: Tue 29 Sep 2026 21:01:17 +0000
Files and hashes: 1: dXkGpvZU8QWwxDaMy_iTlQ5j01g.crl (hash: OzV7P5gjGeTP5R7xNZmNSUKfqIySaQgfyTCtwfek+AM=)
2: tl0OBmf8MnBulWTdK9V197lEdpc.asa (hash: /XgkkQXTtxStbqhMJsiGKYRiPgEqgz/otau+qpTZwuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXkGpvZU8QWwxDaMy_iTlQ5j01g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:d2:6f:3b:9c:cb:fd:df:06:3b:cd:05:42:3f:0f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757906a6f654f105b0c4368ccbf893950e63d358
Validity
Not Before: Sep 28 21:01:17 2026 GMT
Not After : Sep 29 21:01:17 2026 GMT
Subject: CN=d5c1bb2bc3d5429884b65414108d32ed028147bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:75:55:25:e1:64:5b:6f:8a:be:35:5e:86:
e5:b5:32:19:ab:13:70:04:be:ff:e1:38:7e:a4:c0:
fe:69:68:b0:f6:22:9b:11:85:6e:5a:d1:05:e8:bd:
fb:f4:40:df:d1:db:3b:9c:e8:6e:d9:b6:4a:27:ad:
52:9c:a2:e6:40:f7:18:56:2a:3e:34:f2:d2:27:c5:
00:fe:11:0a:8c:17:7d:93:53:45:ec:93:4d:44:ef:
72:7b:3e:b3:79:43:42:4c:6a:d2:ad:b0:de:b1:82:
d6:89:a5:d2:23:14:a0:d8:22:f1:6f:fa:cf:66:5e:
d8:2c:67:bb:07:76:56:55:f4:7c:55:1f:d8:96:b0:
17:fa:87:93:26:4d:20:3e:4a:42:95:0e:d7:cc:8b:
f4:4e:b5:bd:07:bd:39:2d:1a:2e:d7:eb:6a:97:0d:
f6:7e:17:cd:61:7a:48:2e:28:9c:8c:b5:54:b1:48:
51:cc:38:e7:61:dc:bb:aa:a7:d2:3b:27:69:35:32:
f3:2c:bd:bb:2b:47:8a:c2:65:ab:84:4f:7e:d5:68:
62:46:98:78:0a:4f:a8:7c:55:24:2b:fb:c8:f6:e8:
d0:b0:1e:a1:11:fe:3d:5a:44:35:8b:4b:76:75:af:
fd:64:73:7e:7f:eb:fc:9c:15:63:b9:fe:88:3a:29:
52:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C1:BB:2B:C3:D5:42:98:84:B6:54:14:10:8D:32:ED:02:81:47:BB
X509v3 Authority Key Identifier:
keyid:75:79:06:A6:F6:54:F1:05:B0:C4:36:8C:CB:F8:93:95:0E:63:D3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkGpvZU8QWwxDaMy_iTlQ5j01g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8b28e5-1c7b-4690-8690-73720a974f0d/1/dXkGpvZU8QWwxDaMy_iTlQ5j01g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e1:ec:dc:f9:27:52:7b:54:68:85:91:b0:17:51:33:6b:5a:
12:fa:1b:df:ad:c0:b4:90:98:ef:d2:a4:f0:5d:52:30:9c:9e:
57:b2:b5:9e:0b:03:4e:f7:f3:99:b5:a2:12:f0:b2:8e:56:6e:
63:e6:a1:d0:db:60:a5:14:3c:eb:9e:78:2f:e8:bd:78:fe:b5:
eb:aa:d3:22:fd:d7:68:5d:18:f0:b7:4a:ac:38:12:d0:94:d1:
cd:2e:2f:e6:92:54:f4:ac:1c:fd:01:5a:c0:3f:ff:d0:9e:e6:
a0:2d:f9:22:ca:30:6d:53:1c:06:5a:a1:ed:fd:05:88:f7:4a:
a2:ad:ff:29:fb:2a:37:8b:ab:f7:d5:03:42:3e:04:17:1c:84:
8d:3b:98:96:c1:95:3f:29:e4:59:f9:f6:dc:1c:5a:fb:3d:1b:
c9:d4:d5:f5:70:9f:a1:a4:fa:7c:53:62:fd:ad:1d:77:a2:19:
1a:d8:48:4f:49:5c:ca:c8:41:17:b3:08:1a:c8:34:e6:1e:52:
9b:49:8e:1c:c9:4d:48:ef:9e:fd:66:56:4e:b7:c7:44:72:36:
2a:db:06:86:ef:87:52:2e:7f:c2:20:fb:a6:6b:e0:ce:bd:e4:
41:e4:ee:91:db:9f:67:f5:86:32:72:9a:0d:59:71:ba:e6:5b:
cf:ef:51:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:27:46 2026 by rpki-client