Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
File: DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json)
Hash identifier: stYZihSMUFZhffgoXd6QUJTthU8fXaYxMWfxmeyTNQI=
Subject key identifier: D8:1E:8B:D4:9C:B4:5E:28:08:5D:0D:80:C4:6F:42:BC:55:7D:BD:E5
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial: 01A13E5CC9180D7D8F6066597B092436804E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
Manifest number: 1AAC
Signing time: Thu 15 Oct 2026 07:00:30 +0000
Manifest this update: Thu 15 Oct 2026 07:00:30 +0000
Manifest next update: Fri 16 Oct 2026 07:00:30 +0000
Files and hashes: 1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: BjVeaLNRwMmZl4LHExEXuGCPZxQRZwnJK3pO7uPRltU=)
2: UHX8LoJItxLXbSSkLElmcrzzhts.roa (hash: j+K6pcnA4SNCVnoj07hqtnhu76mvNIjpIA6tG3zdI5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:c9:18:0d:7d:8f:60:66:59:7b:09:24:36:80:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Validity
Not Before: Oct 15 07:00:30 2026 GMT
Not After : Oct 16 07:00:30 2026 GMT
Subject: CN=d81e8bd49cb45e28085d0d80c46f42bc557dbde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ff:09:4e:57:3f:17:85:5f:95:69:6c:d6:9c:
0a:c6:ac:75:c4:20:2d:a8:7e:37:1f:96:b5:07:80:
92:83:8e:c5:fa:1f:d8:5b:bf:d7:99:e5:30:69:43:
ee:ee:96:32:4a:82:38:fb:af:e7:1d:66:ec:c8:3d:
01:b6:1c:a0:eb:b2:ce:18:f2:ba:88:d0:a1:5c:70:
be:cb:6f:06:e8:b0:58:c5:f5:8d:69:7e:46:14:60:
c3:41:4a:6e:31:55:2b:1c:ba:7c:88:29:51:cd:e0:
19:c9:de:cf:fb:6a:f0:82:30:6a:75:84:81:49:9a:
c5:e3:20:ab:c1:03:c0:fc:2d:10:51:a5:c7:0c:23:
1f:a4:a6:a5:c7:ee:09:15:6d:e1:65:bf:ed:82:94:
a0:41:88:fc:a2:dd:44:7a:34:8e:43:30:9d:f6:12:
00:97:0b:2d:f4:8e:48:23:aa:ec:2a:a7:31:f3:7c:
cb:a6:bb:ec:34:de:ca:06:42:7b:49:f5:9b:db:61:
d4:68:79:83:7c:74:26:88:27:bf:e2:73:86:fd:c5:
a5:cd:19:e2:2d:7a:88:f0:26:cc:b1:dc:44:f9:7d:
d2:a4:dc:a3:6a:1c:ae:f6:36:b4:b1:aa:13:39:ea:
db:a0:b4:b6:10:73:b8:13:5f:8a:0c:e6:80:d8:37:
a6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1E:8B:D4:9C:B4:5E:28:08:5D:0D:80:C4:6F:42:BC:55:7D:BD:E5
X509v3 Authority Key Identifier:
keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:87:de:4a:c2:f8:f3:4c:5d:d9:2a:d0:11:ce:c7:f9:cd:43:
72:13:ad:bb:5c:e4:a9:04:c2:ef:05:e4:8a:fa:9d:56:61:31:
9b:71:62:01:ff:70:c7:94:d0:9e:08:5f:6c:e8:0b:2f:25:fc:
f8:bd:78:92:5c:40:d7:98:ed:75:50:19:7b:d1:21:52:0d:12:
f1:26:ca:35:83:73:34:eb:6f:6e:36:c8:40:65:b1:d3:c6:f8:
b8:2e:be:8b:b8:d9:8d:38:d7:ac:26:19:07:db:9b:15:20:27:
73:eb:74:2d:7d:65:75:cc:bc:dd:5d:44:d5:a2:db:dd:05:4e:
8b:58:e4:4d:b1:ab:09:f3:f7:8d:d3:f6:2b:5d:5c:83:52:b4:
22:3f:24:de:57:33:53:16:99:90:e9:e7:cf:a1:ce:80:f6:45:
d8:a1:2f:12:cb:ec:51:0a:d2:12:4d:cb:23:0d:62:5a:95:38:
62:96:67:29:bf:45:83:fe:8b:81:7d:23:c6:54:b6:5d:7d:c0:
e9:79:06:6f:66:fa:ff:04:4f:a6:9e:1d:38:e8:7e:af:3d:a1:
26:e3:48:a5:0b:09:9f:fd:50:86:f1:9c:85:96:35:b6:0e:58:
12:4d:0e:e4:0f:36:51:a1:09:b2:67:d6:7d:89:62:f2:21:67:
18:11:08:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:27 2026 by rpki-client