Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
File: dpjJmefwST7jZjTokrN8nzv5QH0.mft (raw, json)
Hash identifier: E2i24pPlvJ6Z/M903jK7ajF+m2onKXBPEzfHa4sKwuQ=
Subject key identifier: 73:A7:3D:33:EA:DE:DD:71:F9:E5:6C:74:A5:C6:4D:DA:B1:30:A8:3C
Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
Certificate issuer: /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Certificate serial: 01A0EA40774767EDBDB9EF367E3447072D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
Manifest number: 1A79
Signing time: Mon 28 Sep 2026 23:01:28 +0000
Manifest this update: Mon 28 Sep 2026 23:01:28 +0000
Manifest next update: Tue 29 Sep 2026 23:01:28 +0000
Files and hashes: 1: M14xo_CjfWqzAqnbxh_nHmNq1aA.roa (hash: 4CoJeZzMAxXXWnHh4hW+p8AyqZ5yU/74Z6UgXwaueCY=)
2: dpjJmefwST7jZjTokrN8nzv5QH0.crl (hash: 4X869ANnNoUc0suBBaKvNbuKtYoW5ST8GsZ7QQ4iMcc=)
3: xrp0HnIK2w9afEJM1GDVJOl5JvA.asa (hash: 55HCFpG/ZJNwGEZUAcO2TsiWkfEa5pv4wg7vR6XeG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:77:47:67:ed:bd:b9:ef:36:7e:34:47:07:2d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d
Validity
Not Before: Sep 28 23:01:28 2026 GMT
Not After : Sep 29 23:01:28 2026 GMT
Subject: CN=73a73d33eadedd71f9e56c74a5c64ddab130a83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:cd:5a:99:5a:b6:2e:2c:6f:ed:dd:97:13:
ba:d4:4e:14:f2:6d:c5:6b:bf:9d:7b:d0:f7:25:09:
2e:ea:cf:d0:60:70:c9:b0:09:10:bb:fc:c0:d1:5c:
21:2b:c7:3b:dd:31:1f:1d:bf:8f:2f:6b:2b:11:57:
38:dc:66:77:5c:99:c9:f4:b3:80:b9:7e:44:c1:d6:
ba:01:3b:3d:6a:69:d2:13:33:35:33:56:cb:db:d6:
03:6f:e6:00:a9:26:34:83:11:fa:cb:54:ac:cb:b5:
57:de:70:ca:a0:61:d3:6c:38:b4:b1:89:fa:05:62:
4c:46:1f:87:fb:b3:ca:08:01:a4:b3:2a:04:0e:6d:
71:bc:46:5c:71:5b:ee:a3:e1:da:11:96:ad:7d:5e:
7c:b7:c5:d6:a8:51:d3:6c:fd:d7:35:65:cd:4d:3c:
c7:61:7f:0f:bf:c1:d0:9a:47:c1:a2:1d:bb:39:ac:
ca:1f:b5:16:3a:d1:96:83:9a:c5:d1:27:56:a6:d0:
25:c6:51:f6:b9:37:78:06:d5:04:79:ae:a5:f4:dd:
88:74:07:97:38:16:c8:c5:b1:43:6b:6b:d7:39:e7:
88:39:40:15:df:b7:f4:7d:88:fd:0a:7d:23:e9:05:
84:19:0c:93:43:4b:e9:99:7e:96:83:cf:f6:cf:d6:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A7:3D:33:EA:DE:DD:71:F9:E5:6C:74:A5:C6:4D:DA:B1:30:A8:3C
X509v3 Authority Key Identifier:
keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4d:6e:ba:72:d9:c1:21:a2:1c:85:49:e1:76:66:be:fb:f9:
fb:18:17:5c:41:6b:44:ff:c8:ce:04:b8:64:20:f5:34:67:26:
99:d8:c0:45:e9:68:ee:08:a3:47:91:05:3b:1b:7d:e2:48:29:
62:d4:5f:0d:57:92:9f:3b:7d:ae:87:c4:51:78:b9:f1:23:24:
66:b9:9b:0d:27:ba:e1:94:bc:5f:43:f3:25:6f:dc:41:c4:8a:
34:86:21:35:54:91:c5:70:98:d7:10:a4:1b:c1:db:88:6d:5c:
a9:e3:a4:44:89:d5:87:42:c3:62:03:bc:94:d0:52:52:bb:11:
f6:37:27:1d:39:6a:a0:ac:e6:82:11:fd:91:89:8f:00:84:b2:
ee:11:ff:d8:ff:84:13:ea:38:2b:30:99:15:b1:ba:33:68:d7:
79:ad:18:b9:9a:b5:fd:fa:5a:4b:a0:d8:e8:c5:a0:f5:bf:6e:
f9:26:64:b5:b0:bb:80:89:20:77:30:0f:d1:d3:c9:74:38:fd:
11:df:1a:01:46:46:27:02:fb:43:33:c5:97:1c:8a:0e:09:73:
4e:40:fd:a1:46:ad:05:32:ee:36:94:82:8b:8a:28:c9:c3:75:
3c:22:e0:f1:53:30:2e:cb:8c:36:78:2f:07:87:c2:08:34:fa:
1f:c3:89:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:34:52 2026 by rpki-client