Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier: iAQA8KaiDK4VSwZ6iR8zr7L66o2OuUE5p8WbTCMTsiU=
Subject key identifier: 13:15:7B:33:0C:25:1F:C0:58:10:00:28:81:90:B6:37:26:99:E7:4F
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial: 01A08AFACDAFC82D1399C28B233CE0756B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number: 0D70
Signing time: Thu 10 Sep 2026 11:01:27 +0000
Manifest this update: Thu 10 Sep 2026 11:01:27 +0000
Manifest next update: Fri 11 Sep 2026 11:01:27 +0000
Files and hashes: 1: 0ySGeIDrXtZFxjKASUMVzdc0Dlc.roa (hash: l2+MJdgyr6VqnECFLRIqzXDoWHq/3WTx2ApaEcFXd9c=)
2: 2MIYePrvuVOPunZ0cCU587P-UNo.roa (hash: 87FdzdFETynQoJd/9d3TWFG9LHhJseAqTkXpKmEANyg=)
3: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: GzTsEr/DWb1VyJ8Hy/JAmOvfFCpBpj0+/O8odr8CXdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:cd:af:c8:2d:13:99:c2:8b:23:3c:e0:75:6b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Validity
Not Before: Sep 10 11:01:27 2026 GMT
Not After : Sep 11 11:01:27 2026 GMT
Subject: CN=13157b330c251fc0581000288190b6372699e74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:69:37:bd:ad:94:13:b4:2a:a6:80:71:6f:
09:76:35:9d:cb:f9:76:6b:f3:81:6e:b2:d9:ae:e4:
af:1e:05:f9:0e:dd:50:7d:78:d6:b3:39:66:6d:f0:
6b:5d:a0:dc:b9:b4:aa:8c:da:64:27:9c:b9:03:90:
f3:0d:1a:54:92:3a:2c:9b:0b:88:3a:db:da:12:eb:
bd:05:54:d6:bd:f5:73:96:ac:b7:1f:ab:47:87:55:
e3:50:58:78:26:e4:84:82:ef:23:7e:43:c7:c2:2d:
91:17:4f:c5:35:ac:41:dc:81:72:f1:a6:75:8b:2f:
60:67:8f:f3:35:a0:58:4a:31:2f:78:12:38:00:da:
71:86:d8:e1:f0:b5:34:95:27:b3:36:8c:e8:32:89:
a3:3c:8e:d5:c3:39:86:42:02:0a:12:d8:4b:5a:58:
15:b6:e3:77:5e:c4:9e:5d:d2:d6:ac:f1:f6:c2:10:
3f:e6:64:bb:22:49:4e:b5:3b:10:9d:9a:07:d8:3d:
95:81:c9:5e:bb:51:04:2b:be:d0:f2:e9:e6:83:50:
7f:fe:ad:a5:47:62:f9:05:80:93:51:61:67:0a:29:
95:b4:2c:2a:45:89:d0:59:63:de:34:b8:49:4a:bf:
bf:f0:69:a1:82:e5:ef:93:4c:cf:fd:1d:95:2a:3c:
20:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:15:7B:33:0C:25:1F:C0:58:10:00:28:81:90:B6:37:26:99:E7:4F
X509v3 Authority Key Identifier:
keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9b:9c:c4:d7:66:19:b5:2c:f0:21:b3:9c:6e:9c:9a:de:5b:
b8:60:6c:5f:f0:5f:3a:84:08:13:b6:c8:4b:e5:2a:85:d1:98:
6f:1d:ce:d3:65:64:67:6c:7e:ad:2a:bb:47:38:4d:db:ca:fe:
e4:46:fc:37:5d:fc:e1:76:78:73:83:24:aa:d2:f9:3f:6b:cc:
35:b4:a2:91:cb:49:c7:ea:2f:56:f3:66:05:46:41:71:ae:48:
d4:9e:b4:d0:58:a0:08:96:67:02:dc:d5:11:2c:b4:f5:f0:56:
64:4a:36:0f:82:70:16:78:a2:54:41:6f:56:a7:c7:64:57:7d:
35:d2:0b:b7:03:e9:87:8d:a5:8b:70:a7:71:88:59:fe:be:a5:
31:13:bb:be:0c:c0:2a:46:da:2a:ff:92:83:b3:03:0d:ec:7a:
b7:56:ce:e7:f6:85:00:74:97:3b:a2:93:3b:8e:12:18:55:dd:
df:df:97:e0:9b:22:87:5b:9c:c0:d7:24:d9:c3:24:50:c4:ac:
e2:42:3c:7e:85:f7:e2:66:f6:41:a5:d0:c5:7b:48:8f:7c:f7:
6a:53:e7:23:af:bb:59:1f:fd:d2:30:2d:c8:ff:cd:62:1d:0f:
47:ab:32:e3:44:dc:3a:96:79:86:a9:f5:9d:27:29:00:df:10:
ff:b5:b4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:40:34 2026 by rpki-client