Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
File: DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json)
Hash identifier: 1q/Q6QXVjbOUOfiBP8z0JEwTCy+tIFmXaxCF4iS9/Ag=
Subject key identifier: 5C:BE:9D:EC:2B:35:DA:29:4A:94:4B:7D:CF:C3:74:6F:5C:5F:A6:ED
Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
Certificate issuer: /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Certificate serial: 01A1280C2953329D768623D628174AD45EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
Manifest number: 1A9A
Signing time: Sat 10 Oct 2026 23:00:47 +0000
Manifest this update: Sat 10 Oct 2026 23:00:47 +0000
Manifest next update: Sun 11 Oct 2026 23:00:47 +0000
Files and hashes: 1: 4qZtNptb8ER3904DdA6MFe8pZsU.roa (hash: Lxa0NTdMnJxLEjdaVFMPjQXrKW0qd4O0NLrjMIPI/ME=)
2: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: 8CzpYulAgEyb6VM0UTMAdX3qUf98tobnxvmhSPilwr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:29:53:32:9d:76:86:23:d6:28:17:4a:d4:5e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596
Validity
Not Before: Oct 10 23:00:47 2026 GMT
Not After : Oct 11 23:00:47 2026 GMT
Subject: CN=5cbe9dec2b35da294a944b7dcfc3746f5c5fa6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:3c:5c:59:6b:ed:14:c6:47:8d:43:3d:26:
09:65:78:33:e2:fe:df:a0:a9:94:49:75:c1:bf:49:
e2:60:b6:47:a7:23:cc:46:1c:b4:55:71:86:3a:0d:
68:69:4a:a3:a6:8d:47:cd:8e:c3:62:fb:e3:30:b3:
e9:80:c9:e6:8b:11:43:d7:61:ba:02:a1:a8:2c:60:
dd:61:28:d3:39:b1:8e:d3:d8:15:d4:7a:7d:8d:48:
11:97:e3:bc:aa:86:62:07:03:08:63:2e:82:13:ab:
30:ec:f2:59:c7:65:cc:be:77:88:9c:b5:b6:9d:9b:
5a:44:8b:d3:ad:9b:a3:36:13:34:b3:68:94:30:d4:
75:7f:93:4c:2b:2d:ca:b0:36:74:10:68:7b:3c:12:
7c:36:b2:56:92:99:9b:f3:31:cb:7e:9d:1b:35:65:
5a:fb:48:d6:39:08:5b:e6:49:df:fd:73:d1:db:82:
bb:d9:23:76:8d:d6:7b:89:fc:f0:00:a2:40:86:a5:
2c:48:66:c7:d5:ec:ac:f1:d5:b5:75:0c:0d:e2:c5:
fb:ef:b4:3c:79:ae:c8:3a:e2:43:58:fe:aa:90:6c:
8b:47:96:95:5c:cf:04:d7:67:7a:d0:83:e7:3b:5c:
94:c8:e4:6f:e5:bb:8f:02:86:e0:a4:99:9c:3e:00:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BE:9D:EC:2B:35:DA:29:4A:94:4B:7D:CF:C3:74:6F:5C:5F:A6:ED
X509v3 Authority Key Identifier:
keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3f:d9:b6:3d:2a:d0:c1:41:db:b0:73:20:b1:fb:7c:15:63:
69:e0:34:73:5a:22:be:80:44:8d:27:0c:aa:52:22:dc:4c:ea:
11:2b:37:03:3c:de:85:e5:eb:89:b6:29:f9:f2:3a:c6:58:b2:
d7:27:18:4f:f2:49:b9:23:0b:ab:99:db:6d:08:54:08:1f:11:
e5:2a:f7:fe:d6:6e:ce:65:e8:3a:ae:91:14:8c:36:63:f6:93:
d1:10:23:c0:7d:55:19:2f:b7:44:47:06:29:17:09:09:fd:8d:
e2:f1:31:bd:04:a5:05:f6:72:28:28:96:30:2c:11:b0:fa:77:
ea:dc:c1:4d:51:92:66:e6:42:9e:3b:c3:9a:fa:f5:12:ff:cb:
6f:42:9a:c1:fa:95:cd:48:df:e6:72:05:5c:08:dd:58:91:7d:
ac:a9:24:24:78:2d:8b:c5:19:88:e3:16:4d:97:0a:4f:45:9d:
f3:73:f8:10:78:45:95:07:e2:5b:9f:d1:8b:e9:fd:e8:66:94:
7e:fb:04:d2:c1:b8:0d:36:4f:31:7e:9f:c4:b0:02:c7:16:58:
ac:60:db:68:23:2a:e7:c0:f6:b2:f3:39:ed:e3:5d:40:17:d8:
75:34:c2:00:de:d1:fa:41:a0:d1:7a:5f:2e:bb:ec:7b:8d:5f:
ba:26:3f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:25:03 2026 by rpki-client