Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: WOgLXjq2Ms8MrNO0FqkV7CpEVdRY9DHoWPa8xHDBQA8=
Subject key identifier: 2C:26:BF:FF:64:EE:75:11:CF:3E:E3:C9:B7:BE:40:28:48:B2:43:02
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 01A14873103A9E2182135655627B09E2E0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 1541
Signing time: Sat 17 Oct 2026 06:01:02 +0000
Manifest this update: Sat 17 Oct 2026 06:01:02 +0000
Manifest next update: Sun 18 Oct 2026 06:01:02 +0000
Files and hashes: 1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: BaKPiPcneI52i7SmFABuZR2/ulVBfgOWYxPqhOUjHt0=)
2: KRcQChyIkdk17z-o88DTXwkNu_Y.roa (hash: k4ZBkPTraQNZ31kK5NnaOy56WVAVKO/c8Q/xt3FDIoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:73:10:3a:9e:21:82:13:56:55:62:7b:09:e2:e0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: Oct 17 06:01:02 2026 GMT
Not After : Oct 18 06:01:02 2026 GMT
Subject: CN=2c26bfff64ee7511cf3ee3c9b7be402848b24302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e3:d2:45:c7:2f:78:9c:81:44:fc:39:17:02:
f1:55:70:19:12:c0:65:6e:32:88:5c:04:14:fd:f1:
e9:3f:a2:79:17:a4:3b:45:54:52:54:7a:ec:36:fe:
4b:7b:ff:6f:96:69:3a:8c:d5:d9:32:ea:83:52:49:
d5:5f:e7:20:35:73:09:f3:11:cb:43:0a:bd:80:5d:
f0:d9:45:ba:b6:5d:aa:58:09:56:c3:75:a5:d1:18:
d6:2d:42:61:be:5b:33:fa:d5:ef:5c:21:af:a5:40:
cd:8c:63:39:1c:15:8f:9e:62:76:f1:61:3a:e3:60:
1c:48:0b:1e:55:a0:c8:03:69:d8:75:d9:e1:90:9e:
5e:bd:fc:5c:7f:d8:b1:27:af:3d:e7:b5:b1:ce:07:
c1:0a:50:42:9c:7b:63:3f:97:3f:e5:4c:c2:d6:12:
e3:f3:a4:4d:8f:68:c3:e7:9f:a0:7b:ad:a0:aa:ab:
ea:b1:96:e2:c5:5b:f7:c8:84:07:52:df:a8:cc:56:
26:ce:de:9d:b4:a7:27:31:f2:78:7b:36:31:6e:30:
10:b2:cb:75:66:ca:d8:14:73:79:74:cd:f1:99:47:
71:ce:50:f9:66:86:28:94:cd:01:97:f1:1a:c8:2f:
a4:fe:9e:c6:5a:98:70:98:16:3d:3a:64:b5:5c:70:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:26:BF:FF:64:EE:75:11:CF:3E:E3:C9:B7:BE:40:28:48:B2:43:02
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:85:17:52:59:b5:ad:47:64:5b:07:3b:ce:be:da:63:94:56:
5a:93:d2:50:25:83:91:b4:a6:39:2f:9a:d2:50:06:2c:80:d6:
4d:d0:85:ee:f1:9d:8e:63:0e:e4:63:5e:63:82:0e:73:79:d1:
4b:70:08:b9:7d:14:07:23:04:98:df:c3:45:9b:17:b6:25:18:
0d:a5:fe:f3:5b:64:1d:56:1f:58:f5:45:c1:17:72:e9:c3:13:
70:58:b9:ae:62:3f:f4:24:89:07:ac:df:6c:06:b3:5e:85:61:
6b:34:ef:86:3a:ef:a2:d2:bf:a0:db:ce:f1:bd:de:f1:df:08:
69:a2:8c:ae:d1:72:da:52:13:c3:6a:83:76:20:1a:d2:e2:a2:
20:ee:c1:1f:78:c8:25:dc:b6:7c:ab:7f:e0:34:83:ea:0d:bf:
ea:af:9c:d8:1c:19:54:12:50:61:8e:7b:72:f0:04:ff:7d:26:
30:bc:e6:c7:0a:54:5f:13:92:2f:f3:49:dd:31:77:0c:d3:1b:
b4:11:71:2c:b0:b2:1d:85:5a:c1:73:11:64:44:e3:c2:4d:8c:
9b:ea:91:28:05:b0:46:74:11:07:01:d3:be:45:6c:6a:d6:d8:
4f:b6:d0:55:0e:dd:ce:6c:38:c7:e8:b1:2c:61:6c:f9:c6:b1:
61:b2:e3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:14:03 2026 by rpki-client