
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.mft
File: dvcgGLQorSicn4WX43vKYUqhCaA.mft (raw, json)
Hash identifier: uVVnCETt8BM0mmPmL8skQOCj8hDmbR00/17I8znwjYg=
Subject key identifier: 4C:0C:2F:EF:03:F2:2E:B3:4A:BC:8A:76:11:5F:93:27:5F:7F:68:2A
Authority key identifier: 76:F7:20:18:B4:28:AD:28:9C:9F:85:97:E3:7B:CA:61:4A:A1:09:A0
Certificate issuer: /CN=76f72018b428ad289c9f8597e37bca614aa109a0
Certificate serial: 01A14BAB76F70BD84678382D18000E7405CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvcgGLQorSicn4WX43vKYUqhCaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.mft
Manifest number: 0125
Signing time: Sat 17 Oct 2026 21:01:30 +0000
Manifest this update: Sat 17 Oct 2026 21:01:30 +0000
Manifest next update: Sun 18 Oct 2026 21:01:30 +0000
Files and hashes: 1: dvcgGLQorSicn4WX43vKYUqhCaA.crl (hash: WyCRp251/1jbi/eAGCjt1fd4dgsTrLkfaLNLgDLVfbo=)
2: xs3iSBh200_EoCetOIrLYygCcuQ.roa (hash: NQKjQyiCL3pt+LnR0jXNZKqsq984PZkORPtaWm+NSuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dvcgGLQorSicn4WX43vKYUqhCaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:ab:76:f7:0b:d8:46:78:38:2d:18:00:0e:74:05:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f72018b428ad289c9f8597e37bca614aa109a0
Validity
Not Before: Oct 17 21:01:30 2026 GMT
Not After : Oct 18 21:01:30 2026 GMT
Subject: CN=4c0c2fef03f22eb34abc8a76115f93275f7f682a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:7c:bd:0c:23:dc:ef:cd:22:46:c7:47:b9:
31:ba:50:32:17:f3:44:80:3c:70:e2:98:fa:6e:e3:
8f:a6:6e:b8:b0:23:e4:be:aa:80:fa:24:f0:35:c7:
f1:4e:7e:60:eb:54:0e:9f:14:ee:5a:39:2c:cd:0f:
31:83:b3:0b:44:89:f0:36:92:66:cb:68:5a:6f:ad:
cd:af:e2:e6:36:36:83:a9:05:bd:d7:66:94:1f:70:
18:e9:7a:6d:8d:5f:d0:b6:f8:7e:b8:be:4c:ca:23:
41:b7:15:cc:f4:7a:e7:46:9e:e4:c4:97:aa:95:b3:
6f:19:22:98:8b:27:cd:3a:9f:9f:2f:ad:f0:7d:60:
1b:b2:72:f1:fa:13:d9:8b:16:58:2c:f7:5b:64:ad:
00:45:fe:1c:2e:fc:5b:08:74:70:88:b8:e4:cc:5b:
d5:62:ac:d8:55:45:d6:76:43:17:1b:dc:eb:38:c0:
34:20:7f:5a:34:e9:c6:db:e3:db:45:20:cf:1b:28:
89:65:53:11:ee:f6:ce:77:7b:27:bf:a3:14:4c:d3:
fc:80:f2:c7:43:cf:a7:3a:b6:d7:ce:0f:88:43:99:
55:74:98:22:65:c3:16:dd:10:53:4e:41:b2:b2:80:
3f:38:73:27:2e:b9:e7:29:75:f7:46:62:2a:cd:6b:
e4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0C:2F:EF:03:F2:2E:B3:4A:BC:8A:76:11:5F:93:27:5F:7F:68:2A
X509v3 Authority Key Identifier:
keyid:76:F7:20:18:B4:28:AD:28:9C:9F:85:97:E3:7B:CA:61:4A:A1:09:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvcgGLQorSicn4WX43vKYUqhCaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3f:1c:13:43:8d:2f:78:9b:69:b7:a4:11:14:5e:2d:ca:f3:
28:ac:2d:c0:c4:de:53:91:80:68:f9:a6:98:0b:9a:bb:df:6e:
0a:51:4e:56:50:96:4d:18:70:ac:07:c3:f9:f9:08:cd:f9:97:
e8:3b:96:6b:47:ae:f1:8e:e9:6d:81:8e:08:f0:df:26:1d:c0:
02:f1:32:a9:84:98:a3:16:fe:b4:03:4d:1c:0d:2c:ce:4f:43:
46:a0:ba:d3:6e:cb:2f:2a:45:0a:38:4a:2e:97:28:21:18:ab:
fb:a7:aa:79:25:e0:ee:c5:7d:be:8a:0b:d9:3f:09:10:46:4c:
af:6f:32:5f:f8:b2:63:eb:c1:cf:75:0e:32:4c:fd:3f:26:94:
19:e2:99:c1:2b:16:cd:5f:a0:f9:d9:97:ec:f7:dc:0e:4c:c8:
a6:d3:4a:55:85:68:09:7c:1b:79:8a:f2:be:ac:7a:f7:b1:9a:
cd:95:9d:6a:f5:d1:e1:36:48:e1:63:e7:9f:94:97:ab:db:3d:
a1:d3:58:73:7e:bc:df:84:41:c4:7e:37:b3:3a:25:57:da:ee:
73:bc:86:71:77:e9:f6:74:90:1e:f8:df:b2:c2:19:2b:71:54:
fa:d9:6f:24:89:fd:c5:3e:dc:4a:57:9d:be:6e:90:2e:e6:97:
da:84:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:20 2026 by rpki-client