Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
File: DHiHWC2D0_CHaCr4eAoySjU854I.mft (raw, json)
Hash identifier: hy6RVc1Q8SOmTmDtjF/dn79lSloEm0dPZF0AWMwQ1v4=
Subject key identifier: 32:0B:94:7B:60:3D:B1:D2:04:29:C5:E2:FD:89:DC:F4:32:EC:20:F0
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial: 01A13D8110CC630F1E7BFF78A6DDF39C7917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
Manifest number: 068C
Signing time: Thu 15 Oct 2026 03:00:30 +0000
Manifest this update: Thu 15 Oct 2026 03:00:30 +0000
Manifest next update: Fri 16 Oct 2026 03:00:30 +0000
Files and hashes: 1: DHiHWC2D0_CHaCr4eAoySjU854I.crl (hash: kBTdT9+OPcdKVdV3H6ec6zXS8IeD+ODbuAIfVKGDVNk=)
2: YWNDZTTIZoOnHoDXi9E6DGlDlqY.roa (hash: aIUQvaxY70pNpKSk5tmYluexw6bkZHt2gtc/Ueg8vRM=)
3: e1MeXi5jGEx2ghjXy4K7UMFk3kU.roa (hash: oPguTsrx3a7ULwz315fIeupuRdabV/wQF9vZA3Lwhi8=)
4: v_sjZEWKqFNaPolplPEIVetQcjo.roa (hash: 97bQo1K+GuO88OfR1uv4isecfgOKEhMoas5WXx3EMiE=)
5: wF4dYnSli8MvKSkaalmJxK3BUuE.roa (hash: bRgCLzwSPr+zj8E46tEdf2riioRemK4V+6Zr2lWh/tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:10:cc:63:0f:1e:7b:ff:78:a6:dd:f3:9c:79:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
Validity
Not Before: Oct 15 03:00:30 2026 GMT
Not After : Oct 16 03:00:30 2026 GMT
Subject: CN=320b947b603db1d20429c5e2fd89dcf432ec20f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:5a:4e:05:4c:3c:26:ca:81:c2:fd:60:19:
28:f7:7e:e1:0a:ca:a9:f2:c7:33:9c:b9:4d:b0:1f:
88:54:bb:f6:c5:9f:99:ad:86:5c:1d:1e:84:5f:e0:
ae:ff:ac:d7:b0:30:90:97:2b:6e:1a:eb:0c:04:4a:
60:1e:eb:48:2a:31:e6:77:b4:08:eb:b8:6f:52:3a:
0f:59:69:c6:3c:75:4d:90:78:10:de:80:66:e4:0f:
3e:01:0e:c4:71:4b:44:e6:ca:18:f1:2d:a2:8d:2d:
e5:35:9e:b5:a2:a4:df:a0:99:16:92:61:b0:5a:fa:
e7:c3:1c:43:11:72:4d:ca:5d:e3:68:d1:5f:4f:98:
e7:ed:ff:47:89:13:27:3e:3c:33:74:09:98:76:94:
7a:ab:a6:79:89:ff:eb:43:08:cd:b3:cc:48:f0:17:
8a:d9:0b:81:6a:23:30:00:86:2a:f4:06:31:50:2d:
b9:d0:96:6f:87:dc:85:5b:58:e2:09:41:dc:0a:57:
5a:c4:77:b3:f2:8e:47:3e:03:2a:6a:05:db:aa:25:
96:ea:b7:2b:7e:9a:f3:cf:3f:ee:76:3e:ff:47:fa:
1d:95:83:c3:49:2e:17:95:b2:70:20:52:ca:6c:58:
39:46:de:69:d6:3d:f4:3e:9f:fb:86:fd:96:aa:97:
ad:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:94:7B:60:3D:B1:D2:04:29:C5:E2:FD:89:DC:F4:32:EC:20:F0
X509v3 Authority Key Identifier:
keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ba:57:d7:13:3d:5b:c2:15:a8:a8:a9:55:f1:7c:f1:22:bb:
45:bf:9d:e0:59:4a:41:5e:b3:9c:32:f3:b8:9c:e6:31:b6:70:
c2:67:d5:25:01:37:16:13:0a:61:2e:37:31:32:9c:3e:fd:d3:
82:9a:7e:fd:99:a0:18:15:b2:e8:89:3a:4f:aa:49:c3:a5:ff:
92:64:bb:e0:bd:93:ff:66:92:59:46:1d:f4:c4:63:d6:70:3c:
e4:95:8c:e1:e5:14:cc:5a:a4:05:f7:68:0c:89:96:3e:41:f1:
4a:af:db:73:25:cd:de:04:6f:2d:96:9a:27:02:e8:3a:69:61:
62:37:ef:a2:0c:63:26:19:eb:fa:48:81:9d:f4:52:58:f4:15:
ba:9b:fe:8e:08:5e:04:02:34:10:f9:8a:3f:57:7c:2c:45:1d:
fd:ab:e3:8c:48:22:14:09:09:45:f4:22:12:95:2f:01:0f:3d:
16:dd:dd:80:fc:ea:d0:5d:bb:b7:54:06:98:66:f1:18:d9:b4:
e1:00:7e:28:e7:ae:9a:0b:e4:c2:58:de:06:b9:df:cd:5b:07:
66:30:d5:2f:a3:25:25:58:57:2c:4b:c5:9d:ef:a6:42:f4:7c:
49:c6:0a:a8:c7:84:45:b8:62:64:4e:8b:da:af:8a:ea:d3:49:
6e:34:31:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:37 2026 by rpki-client