Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier: q2iQb3chrBSPpTvAAhg2nAO2khhlMexZmj0UjjuBKc4=
Subject key identifier: E8:10:07:A3:F3:6D:4B:24:0F:17:B5:B5:79:55:0D:01:88:55:79:F8
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial: 01A0C2FB65BAEE75B3A4218F1444E0336BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number: 1A6A
Signing time: Mon 21 Sep 2026 08:00:50 +0000
Manifest this update: Mon 21 Sep 2026 08:00:50 +0000
Manifest next update: Tue 22 Sep 2026 08:00:50 +0000
Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: 3+0VF0xD3MoJk/WAeMCqlpTdhnx8xW4Rl3O4dIwFaw4=)
2: iDDbiSH2d_40GsJwPvUC4BGeuXA.roa (hash: vwX7F1KiY4ZWTpCyVu83FRegfcFV6IZjqYP0GrVArzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:65:ba:ee:75:b3:a4:21:8f:14:44:e0:33:6b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Validity
Not Before: Sep 21 08:00:50 2026 GMT
Not After : Sep 22 08:00:50 2026 GMT
Subject: CN=e81007a3f36d4b240f17b5b579550d01885579f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:a3:e0:0d:77:95:5f:68:30:e8:4c:28:7d:
69:d3:df:a0:14:cb:09:5e:65:3a:77:b3:bc:de:c3:
6c:4b:cb:6d:57:9e:52:cd:ee:7d:2d:f2:c2:ce:9c:
29:45:fb:f7:dc:7e:e0:eb:9c:08:62:74:12:3d:85:
17:77:c2:65:19:8a:ae:76:fd:d5:c8:0d:28:cf:cb:
3e:e7:dd:46:52:db:ab:6c:7e:6d:a9:d6:9c:53:72:
02:d3:43:27:e0:af:4e:94:0d:e6:78:00:d1:87:44:
f7:1f:e4:09:37:ca:6d:14:08:5c:87:22:9c:c5:cc:
c7:0f:d1:21:a3:5d:25:f8:81:ca:0f:c5:48:41:d1:
a9:d9:be:4d:b7:6c:7c:82:2f:6c:89:39:e1:e0:dd:
0c:84:4b:c9:74:45:a8:0b:69:17:22:a3:aa:28:72:
a5:0a:86:76:aa:02:99:81:95:0c:47:ae:a4:11:64:
73:f5:93:36:75:73:85:76:f1:b0:f8:3d:1b:de:e1:
a9:4a:bc:61:16:0c:7f:1c:f4:b3:f1:3b:01:e5:96:
b7:52:26:0c:c2:c9:5a:78:19:e5:d3:34:96:5c:03:
6a:7c:e1:ac:2f:30:31:91:71:30:20:43:1a:f6:c7:
c0:3c:79:a2:f2:e7:ce:ce:a9:5b:1d:42:32:ef:5c:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:10:07:A3:F3:6D:4B:24:0F:17:B5:B5:79:55:0D:01:88:55:79:F8
X509v3 Authority Key Identifier:
keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:23:e9:17:1f:01:b0:60:20:1c:25:b7:8b:24:20:1a:3b:d7:
ae:db:41:67:f1:20:b0:86:92:e7:0d:e5:d3:7f:40:5d:ed:1f:
b7:4c:f4:df:f9:8b:59:f3:7a:2c:13:5d:11:1a:cd:96:82:cb:
08:11:f1:2b:65:56:01:09:9a:db:d7:bb:56:7c:e3:20:6e:8c:
87:bb:46:7b:c9:ff:f5:90:b1:e7:7a:84:97:f8:0f:e8:fc:82:
87:b8:ed:ec:93:3e:41:bf:79:46:f0:22:8d:b9:f5:af:f1:47:
94:08:88:9b:d9:74:ee:06:13:4b:88:36:ba:bf:bd:3f:28:54:
67:47:c9:90:8d:ca:0d:f0:58:3a:35:64:e1:58:07:ec:ff:3e:
54:1d:a1:2d:a6:09:5b:b3:32:6a:10:85:a0:ca:ef:00:39:a1:
23:8a:64:c5:f6:c5:42:4c:ff:47:01:85:bb:fc:00:ef:10:92:
71:4b:61:ae:9e:d3:27:8c:69:f6:e1:2b:7d:98:d9:6b:15:5b:
9e:df:00:c2:7d:01:84:7e:5d:6c:f7:97:9c:eb:0f:87:2c:e6:
2c:bb:f3:ba:95:6d:91:62:4c:4c:90:0e:1d:70:35:cc:9f:7b:
33:51:1b:35:12:ee:a7:05:33:22:27:5f:5c:90:9b:26:ed:3e:
cb:1d:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:00:34 2026 by rpki-client