Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: uFhk+kMSVyXEppeHgxZYDbJWuB+JQGyV30xjlasBsqQ=
Subject key identifier: 40:3F:E1:84:18:9B:E7:E3:38:D1:5B:3B:BF:48:41:8D:16:E6:79:2B
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 01A08AFAC06C322B10005CD4071F4C52DA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 15D1
Signing time: Thu 10 Sep 2026 11:01:23 +0000
Manifest this update: Thu 10 Sep 2026 11:01:23 +0000
Manifest next update: Fri 11 Sep 2026 11:01:23 +0000
Files and hashes: 1: VXfQ6NsG8mJQzkrAYILY85OMwDM.roa (hash: hHH+oXv9dUAcJXxcAv3HS+2a0elTC1lXlHvBusz7xaE=)
2: ZigwfFDMTq9p3ufVtUZkAGSvOE8.roa (hash: hCk1IHYdcTCr5kX9GXFGk1z+A8RaamqdMUb21r4V0lQ=)
3: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: 8R5DzQHUsgdHAOjXEI/d3Ur9r80uI0UsBDkxCJjr4kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:c0:6c:32:2b:10:00:5c:d4:07:1f:4c:52:da:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Sep 10 11:01:23 2026 GMT
Not After : Sep 11 11:01:23 2026 GMT
Subject: CN=403fe184189be7e338d15b3bbf48418d16e6792b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:5d:e6:6d:d3:7d:e6:3d:8d:d4:37:8a:83:
d4:aa:c6:3f:34:51:df:ce:8a:8d:d5:4a:6c:ed:76:
e7:47:4c:73:01:c3:f1:34:cb:d7:4a:b0:9a:cf:c1:
af:63:52:2b:ca:10:eb:09:24:14:dc:d1:cd:0b:40:
21:e2:77:e9:fe:e3:b1:16:d6:b9:2d:dd:01:e1:44:
aa:2d:df:41:4e:7a:76:3c:f2:cb:14:66:d1:ee:2c:
f3:30:19:c6:cd:e7:c2:7d:e9:07:53:c4:f4:26:65:
8a:43:50:66:21:fe:92:80:41:9a:d0:24:fc:90:b5:
ab:29:c4:d6:0e:ed:28:22:f5:f7:48:76:e3:01:81:
eb:15:02:76:ec:f4:a3:50:f5:29:d0:38:8b:04:0c:
fa:d6:f5:20:48:f7:a3:44:28:ad:90:e6:3d:22:bc:
a4:ea:10:59:a0:d7:58:4d:bf:4b:8f:4d:51:a4:3c:
27:ba:bc:71:35:32:5e:e0:51:4e:67:cb:bb:0b:ae:
36:15:f0:b5:84:84:fb:9d:ab:cb:2f:02:20:f1:44:
89:fc:f6:1c:16:4b:f8:21:95:e6:e6:ec:3b:c3:98:
97:a0:54:b6:80:48:df:ca:40:60:fa:04:18:58:00:
8e:43:6b:f4:0b:be:2d:fd:4f:03:35:af:86:84:79:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3F:E1:84:18:9B:E7:E3:38:D1:5B:3B:BF:48:41:8D:16:E6:79:2B
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:e8:41:9e:06:60:48:19:07:2c:91:06:75:0c:02:6d:9e:53:
58:2c:36:27:20:fa:0c:a8:bc:96:24:08:1c:1d:c2:84:5f:11:
08:22:e4:c6:64:46:dd:8c:10:4f:74:db:ef:58:3d:1f:6c:ae:
e5:30:e8:fa:15:c5:0b:1e:68:ec:8c:34:76:53:f4:4d:d3:f6:
aa:a6:41:56:9a:6b:8f:1f:8b:c9:db:92:46:da:6e:76:89:27:
b9:87:58:21:e5:e6:7e:d0:dd:9c:72:f9:83:01:de:33:41:bb:
62:47:93:3b:10:c2:22:45:b9:6f:4b:b1:21:08:91:4a:4c:bc:
ef:b1:f8:4d:ef:8d:c4:2c:8b:09:29:14:89:5c:a4:45:ef:82:
c3:83:f5:3c:1f:3a:3c:e2:00:bc:a0:3f:fa:59:ee:1d:d8:98:
5e:28:bc:dc:8e:c4:5e:55:02:57:03:45:ee:44:fe:ad:c4:44:
3d:34:84:be:ee:a0:c7:72:34:0c:ad:68:05:b5:31:fd:8f:08:
3c:d7:45:5a:57:9c:a3:90:64:d8:ea:29:01:47:46:b5:32:44:
cf:ab:8b:14:11:22:bc:6d:f1:cf:ad:0b:4d:fd:4e:58:d5:b0:
f3:5f:1d:d8:29:d3:46:14:f1:e4:0c:f1:40:fe:f0:c7:93:97:
e8:2b:44:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:06:11 2026 by rpki-client