Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
File: DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft (raw, json)
Hash identifier: KFFOkTXL0IsXE+6202r1aPfM5uxCy8/0lMGBlQEDlxA=
Subject key identifier: D6:9E:85:67:33:5B:C4:BE:9E:70:25:D4:FB:77:2D:A3:31:76:7A:42
Authority key identifier: 0C:56:23:4B:C7:3D:0C:AC:81:96:11:CA:DE:29:87:48:22:FF:5D:54
Certificate issuer: /CN=0c56234bc73d0cac819611cade29874822ff5d54
Certificate serial: 01A0B8E5C0C4EE45830AA6FB10CD8289AAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
Manifest number: D9
Signing time: Sat 19 Sep 2026 09:00:59 +0000
Manifest this update: Sat 19 Sep 2026 09:00:59 +0000
Manifest next update: Sun 20 Sep 2026 09:00:59 +0000
Files and hashes: 1: 2zJJEln3aMuBWTTX2Wghm64WL1c.roa (hash: 5hVuyCxLA7+9VBEWVzzqiucZv/QNutyUowFs04GW0IQ=)
2: DFYjS8c9DKyBlhHK3imHSCL_XVQ.crl (hash: PgKhJkT2VgfNOn3aQJao3FdrCTkpn9BKpFW9+e77IQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:e5:c0:c4:ee:45:83:0a:a6:fb:10:cd:82:89:aa:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c56234bc73d0cac819611cade29874822ff5d54
Validity
Not Before: Sep 19 09:00:59 2026 GMT
Not After : Sep 20 09:00:59 2026 GMT
Subject: CN=d69e8567335bc4be9e7025d4fb772da331767a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:18:2f:e4:91:00:af:a5:c5:2f:f8:a4:92:
91:d4:24:55:60:22:db:37:1f:30:52:4f:a4:72:ec:
96:bd:d2:9e:7a:99:4e:b5:71:2d:dc:1d:43:b5:0f:
9c:61:6d:7a:94:bf:9e:38:dc:79:a1:65:79:0d:89:
d6:e8:4b:39:ea:27:7a:a4:7d:be:11:c0:ed:87:09:
ce:1c:00:d4:9d:7a:15:99:61:11:8a:3c:90:ff:80:
74:6a:d2:5a:be:bc:a2:39:d3:ab:1a:bd:3a:85:cd:
b4:9c:c1:0c:d4:56:85:4d:3a:54:bb:14:45:df:5e:
1e:f2:2e:6b:b2:b8:a6:85:5f:04:f6:f3:5f:d5:d3:
1e:63:d6:b8:82:d0:04:8c:7d:6c:63:08:e6:56:fb:
01:9d:a0:a5:5e:60:b1:51:85:39:a5:80:1f:29:d9:
7f:80:a2:da:8c:81:09:7a:53:0e:0c:56:30:c0:ae:
db:ec:d0:c8:96:3d:59:3f:51:80:c5:72:cf:1a:27:
a8:89:19:6a:43:e8:0c:b0:5b:21:5a:b0:92:60:7a:
9f:63:e9:79:7f:ac:f9:46:96:2e:e7:93:f9:48:e6:
35:61:fc:f9:73:c1:ce:d9:e7:8e:59:d5:c6:41:c9:
ba:4a:28:bf:3c:6d:4c:88:ad:78:a9:e5:d5:96:2d:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9E:85:67:33:5B:C4:BE:9E:70:25:D4:FB:77:2D:A3:31:76:7A:42
X509v3 Authority Key Identifier:
keyid:0C:56:23:4B:C7:3D:0C:AC:81:96:11:CA:DE:29:87:48:22:FF:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a1:6d:7c:7b:63:da:1f:c8:5e:db:a4:2e:08:b0:96:47:9e:
6f:ff:ec:70:2e:6d:a4:03:8d:93:6b:a7:0b:0a:2e:c3:4c:7e:
a4:72:23:85:f6:f5:21:b2:a8:10:2d:5d:57:68:84:29:8d:f9:
a6:92:4a:2f:bf:98:09:fa:8a:da:00:f2:a3:34:1a:5f:5e:35:
ae:5d:e8:0c:a7:85:6d:46:4d:e6:a1:37:e8:87:aa:4b:18:47:
fb:fe:0d:2e:57:ea:b8:45:16:18:5b:84:c6:ad:d0:99:ad:ee:
54:97:24:aa:94:d1:6e:49:c4:cb:63:ae:51:31:ba:1d:44:91:
f6:e0:02:b3:4b:de:a2:51:2d:41:39:e4:98:e6:03:5f:30:d2:
3a:d2:af:87:38:95:54:19:6d:fc:68:98:e3:d5:5e:01:ce:2b:
e8:90:8b:94:a5:81:cc:06:e5:da:3b:c6:89:26:cc:cd:d5:b2:
52:34:f6:e4:cf:8d:f0:20:55:b1:74:1a:a6:de:98:48:f8:a6:
d8:c9:84:c9:18:05:87:ab:f7:be:a7:5f:53:29:b1:d7:cb:d1:
07:52:65:7a:10:2e:50:d1:d0:de:3d:7e:30:cf:7e:ff:fe:34:
b3:be:95:21:1a:fb:6e:d4:e9:42:61:d1:0f:fc:7d:00:aa:37:
9e:08:34:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:46:26 2026 by rpki-client