
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json)
Hash identifier: fk+b/Gc+u8OUK2wDFQGPGnS4krREaS82684JgLrmXQA=
Subject key identifier: 32:91:BE:E9:9F:AD:C9:E1:86:5D:06:A6:EB:1E:5E:88:DE:28:25:05
Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
Certificate issuer: /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Certificate serial: 01A0035E884C6741A726C381E9CE382244D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
Manifest number: 0970
Signing time: Sat 15 Aug 2026 03:02:01 +0000
Manifest this update: Sat 15 Aug 2026 03:02:01 +0000
Manifest next update: Sun 16 Aug 2026 03:02:01 +0000
Files and hashes: 1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: 6O3vktzqT0ewOzMXaVtA7tDmLRTQ3s1tzUItUY5SpOU=)
2: fe3bi-doKDNu4dmU6DR8DAdVKZc.roa (hash: OoARVSCOyCQLc2Hu8VCrhllOD8R6T0zZ8zONXrdJeEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5e:88:4c:67:41:a7:26:c3:81:e9:ce:38:22:44:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26
Validity
Not Before: Aug 15 03:02:01 2026 GMT
Not After : Aug 16 03:02:01 2026 GMT
Subject: CN=3291bee99fadc9e1865d06a6eb1e5e88de282505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cf:60:2b:50:9c:d9:e5:e7:7b:9b:51:aa:50:
59:4c:01:30:0f:18:ed:f3:9f:14:32:f4:0a:2a:d4:
c6:d9:85:e3:a5:d9:f2:0e:3d:c1:6a:d3:ee:b9:43:
b0:ff:4a:c7:56:a2:1f:fd:bd:3d:a1:30:26:73:e9:
da:63:f4:dc:d1:cf:42:ec:d7:81:ba:bb:7f:24:8a:
2b:e2:6a:7a:dc:41:c4:7e:6f:cf:7f:04:ba:2f:1c:
85:f2:31:2b:be:53:9e:8f:cb:34:57:d9:c9:04:f1:
10:5c:51:91:16:1a:96:ca:5f:9f:2c:4f:04:4d:8e:
4a:89:9f:ed:fc:df:28:09:69:0e:4c:e3:81:ef:29:
5a:ee:c4:d3:ae:12:e7:34:f3:0a:45:5f:cb:f5:de:
2e:a3:74:3d:1f:4a:36:6b:cb:fa:09:78:c9:42:75:
21:ab:5b:17:f5:47:a2:af:6e:27:f8:62:ec:19:1f:
e7:ca:4f:ba:1d:aa:fb:6d:2a:f2:af:b8:41:2c:3e:
38:50:c6:1e:b4:6b:fb:32:28:08:b6:c7:3a:52:38:
58:a4:01:db:ae:12:e0:1e:20:ab:99:ae:2d:00:d6:
cd:67:3c:31:df:6f:e4:b5:a3:a0:64:97:62:64:3b:
f7:ce:29:10:94:ed:4d:cb:e6:bf:f5:50:c3:19:97:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:91:BE:E9:9F:AD:C9:E1:86:5D:06:A6:EB:1E:5E:88:DE:28:25:05
X509v3 Authority Key Identifier:
keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2a:eb:26:37:a0:55:a6:15:40:c0:88:68:87:10:7c:46:a8:
43:db:20:dc:0e:19:8a:18:72:dc:10:a4:2c:fb:64:6d:7b:97:
94:8f:28:37:c1:a9:0f:e3:61:53:fc:b0:8c:17:0d:c9:40:35:
2e:b7:fa:c6:ca:14:41:82:a9:a2:bf:8a:86:ce:bc:45:77:5e:
47:f6:32:f3:35:65:5c:ed:c3:8d:62:1e:01:fe:fc:08:30:a0:
76:fd:01:25:1c:d5:c4:89:d0:8e:54:90:6c:db:e3:31:39:06:
de:9d:16:5e:79:00:65:4b:29:38:8d:51:a4:1e:98:11:c9:c7:
4e:d3:0d:3d:61:57:14:8a:6f:8e:c2:d7:0a:aa:23:b0:dc:f4:
8f:04:fa:c1:a9:c1:c5:04:c1:d1:81:89:d0:a1:4c:0c:65:11:
e8:70:37:44:45:bf:16:ec:d2:f3:41:e4:14:90:58:58:de:d3:
4d:d2:86:c6:f2:97:fd:19:6e:a4:bf:d0:ed:57:75:c4:22:07:
42:7f:23:e6:a3:37:0a:af:09:e1:52:37:a6:76:70:7e:d4:7e:
24:06:b3:58:49:e7:2a:c1:70:36:ad:88:24:de:81:ac:36:5d:
47:38:e0:57:d0:16:df:a6:c8:7d:1f:d3:a2:ad:ba:16:ed:8e:
c8:52:00:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:04:18 2026 by rpki-client