Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier: Ja+lA9Gh+G9k2070geFgDDyA6GD/RcuKBP1dsbEeGJY=
Subject key identifier: 82:46:90:33:A1:90:08:F6:67:E2:64:DC:39:FD:60:49:81:61:99:B4
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial: 01A000CA4AB8CE0A632A4B5EE45056FFDCCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 15:00:52 +0000
Manifest this update: Fri 14 Aug 2026 15:00:52 +0000
Manifest next update: Sat 15 Aug 2026 15:00:52 +0000
Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: MNlgUgtM+paVLFHCWHz2pu9h9WjYyv1oXoVkbwThUKE=)
2: xOh8rPz0fCu_Rdtl4qREsx0riTQ.roa (hash: 51BbJDIoI2b7sQWeISHrMYtf3JjGMl3uwds3WWJ64wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:4a:b8:ce:0a:63:2a:4b:5e:e4:50:56:ff:dc:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Validity
Not Before: Aug 14 15:00:52 2026 GMT
Not After : Aug 15 15:00:52 2026 GMT
Subject: CN=82469033a19008f667e264dc39fd6049816199b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:15:39:e2:8d:5d:e9:b2:77:af:d5:b6:22:
6e:6f:93:8f:ca:21:f9:8a:f2:9c:9b:5c:d6:6c:eb:
17:30:25:4f:68:2b:66:2e:7f:5b:b5:9b:e0:fe:c5:
dc:c7:ed:44:66:8f:06:71:b5:79:cc:62:e2:3d:5e:
00:65:8d:30:6c:d0:80:3c:7e:62:5c:ea:d2:7c:27:
ce:58:61:99:63:c0:96:e9:b9:8e:68:1c:61:55:0f:
f4:e1:17:05:3c:27:16:b0:70:8d:8a:37:4d:62:d2:
b2:3f:73:b1:db:85:cb:9c:42:a4:66:4c:50:89:f6:
60:e9:b9:c7:6f:39:97:f6:b6:18:da:4b:b2:5a:ce:
5e:2a:2b:86:9e:ea:7d:cd:1a:91:98:f4:b6:1a:9b:
55:ca:2a:82:ec:ce:d2:cb:0a:0c:45:2f:15:98:73:
6d:61:e9:d3:7e:81:99:90:b0:49:95:82:40:fa:d5:
7c:d5:14:53:fa:ce:cf:07:27:ec:61:5d:70:89:39:
17:bd:89:c6:02:21:24:21:53:20:96:7c:d7:3a:5d:
9e:0a:0c:32:5d:4a:66:17:42:e7:34:41:32:41:7a:
af:81:e6:07:b4:c1:9e:60:69:32:b1:38:c2:3c:ee:
5a:7e:c9:fc:e6:1b:6e:ff:5c:4b:62:08:7e:63:2e:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:46:90:33:A1:90:08:F6:67:E2:64:DC:39:FD:60:49:81:61:99:B4
X509v3 Authority Key Identifier:
keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fc:8c:42:c7:7e:dd:0c:ef:d4:22:71:b4:92:87:a8:05:f1:
b3:9e:d9:6c:6e:61:19:cb:b7:8f:56:d1:e3:4d:6a:66:13:62:
7c:46:ca:be:f0:1b:3f:70:8b:64:39:81:ee:59:c3:f0:1f:00:
23:f0:40:66:c7:ce:15:e7:16:45:4a:9c:fd:05:c0:69:ec:42:
f4:9f:52:a9:bf:92:78:e4:c2:30:fb:01:1f:7a:f0:6e:dd:cf:
33:0a:73:d9:bb:81:15:9e:a7:ae:d6:94:6a:62:7f:57:be:4e:
ff:f3:b3:04:04:7c:75:c6:f1:58:27:38:dd:a2:d2:4f:13:70:
58:26:e6:3e:5d:30:98:c0:38:a3:ae:a3:38:e6:46:f1:aa:ec:
80:b3:41:ee:40:a9:57:3c:f3:88:b6:49:dd:27:dd:ae:e2:31:
1d:a0:7a:50:18:cc:5a:f7:1a:52:96:eb:6a:af:f2:0b:91:68:
f3:8d:b3:5b:72:77:b4:b3:61:c1:d0:e6:15:b6:9c:a0:b5:5b:
84:a3:73:da:f0:b7:d8:3a:5a:3a:65:5e:93:4a:7b:d0:4c:b2:
88:f3:dc:77:df:3e:2b:e2:21:ae:cf:3d:c5:f9:fb:41:89:6c:
7d:05:2b:4e:2b:f6:26:b1:08:bd:1a:26:db:05:ed:21:29:96:
ee:67:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:29 2026 by rpki-client