Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier: oz8gebPhU7lIFDjnO+cxIfDyH7QTREtm0Y0ZY80vnic=
Subject key identifier: 1F:7C:5F:74:2F:60:52:1D:C1:CB:82:21:D0:33:C6:EA:AB:DE:CD:11
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial: 01A13E25D26985AB57A78589B35CAE90F6C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 06:00:28 +0000
Manifest this update: Thu 15 Oct 2026 06:00:28 +0000
Manifest next update: Fri 16 Oct 2026 06:00:28 +0000
Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: tK0N534fzt8OOLFt+3iEAXFhsxM+Nu99KPSAacOCb+o=)
2: dCps6FnO6mvWjOZhqC1yU38bvlQ.roa (hash: yetOlkwiuyExkdcVMH2qiiR88aNkz2bMNlY5zaV0IOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:d2:69:85:ab:57:a7:85:89:b3:5c:ae:90:f6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Validity
Not Before: Oct 15 06:00:28 2026 GMT
Not After : Oct 16 06:00:28 2026 GMT
Subject: CN=1f7c5f742f60521dc1cb8221d033c6eaabdecd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:3e:20:2b:cf:19:d8:db:0b:d7:ea:81:c8:
8c:7f:40:2a:1b:aa:0f:7a:78:e9:97:43:40:37:ea:
7a:f5:51:82:96:a1:36:ab:03:8d:33:d1:b8:4b:ed:
40:7b:e0:df:d5:08:5b:5c:5c:3c:3a:5b:90:ab:5c:
0b:38:6f:2f:f7:37:f0:40:38:d1:23:30:26:69:aa:
1e:6c:cd:4a:1d:83:15:48:fb:48:be:9b:2a:c1:6d:
e4:63:d5:89:94:4b:9c:3c:d6:64:5f:7b:25:b7:7e:
45:e8:85:dd:6b:b5:c6:ff:6f:01:cf:23:7f:39:49:
bb:ec:55:5f:4f:8b:1e:36:62:76:3b:cb:3b:bf:3b:
dd:e4:e5:e2:65:fa:42:1e:a9:7c:24:9c:b2:a5:0a:
6b:a1:58:15:ea:9a:61:63:01:93:13:3a:22:98:05:
93:32:7a:51:e7:33:57:ab:a7:0b:74:d1:f0:e0:93:
9d:23:47:77:73:56:7a:c2:7f:c5:7f:4f:b1:74:23:
60:11:6e:04:92:c0:82:5a:9c:ab:66:0b:c3:84:57:
60:d9:0d:54:8b:fd:97:74:2a:33:68:e1:dc:22:3d:
49:33:83:ff:58:08:52:8c:76:23:b7:74:b9:f6:84:
f6:fe:d1:75:a1:a1:d4:a3:98:90:4b:ec:4f:3f:9c:
6e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7C:5F:74:2F:60:52:1D:C1:CB:82:21:D0:33:C6:EA:AB:DE:CD:11
X509v3 Authority Key Identifier:
keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:40:84:1b:c0:7d:c3:78:83:d4:ed:8f:2e:ab:58:96:10:6b:
8b:32:94:83:1a:36:f7:88:c4:84:25:11:ef:e5:a6:05:7e:31:
3f:0d:a9:bb:dd:c7:f0:b0:20:d4:34:06:b2:cb:46:7d:c7:d5:
f7:01:1c:5b:37:bc:d6:73:5c:a7:4b:24:cb:49:47:8d:c9:a7:
47:56:d4:e1:4d:02:18:6c:00:6c:18:83:7a:21:3f:c7:89:5e:
df:80:ec:9f:9f:9f:a4:f0:48:c3:f8:11:fc:b3:0c:3e:d8:6f:
39:3a:28:33:34:d4:d1:c3:4d:cf:b5:7f:f6:8b:bb:12:23:cb:
4a:0e:a8:75:2b:26:91:f4:59:38:3b:4d:0d:34:5e:14:4e:df:
2f:8d:ea:04:54:69:b9:b8:93:5d:5c:ad:76:f1:db:e4:be:44:
17:40:65:cd:05:95:5a:72:de:5b:0d:2f:d2:b8:9f:ff:72:ca:
01:5c:26:63:a6:38:69:15:23:ec:45:d6:ae:48:dd:ca:3e:4a:
41:f4:0c:63:6b:48:3d:a6:71:42:e5:67:73:51:d9:eb:b9:7d:
27:45:e3:f1:2a:5d:53:37:b7:95:57:dc:d0:8d:c6:52:ad:ad:
a8:58:d9:d4:37:24:fa:78:ff:6c:77:75:bb:c8:96:ad:e4:d5:
40:cc:04:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:36:24 2026 by rpki-client