Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
File: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft (raw, json)
Hash identifier: z60k4xtFw8vS6/Gvoi8mCAqNSOD/d1oNArpeVN+cRJY=
Subject key identifier: 84:22:FA:62:70:D6:3A:BE:48:2F:84:E6:0E:FA:67:4A:FE:77:0D:DB
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 01A059329B91FADE7F2BCAF884261F165110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
Manifest number: 1A38
Signing time: Mon 31 Aug 2026 19:01:23 +0000
Manifest this update: Mon 31 Aug 2026 19:01:23 +0000
Manifest next update: Tue 01 Sep 2026 19:01:23 +0000
Files and hashes: 1: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl (hash: epVh+sLe6QkGEb9homF6Kqppokir+xlCv1u869daL54=)
2: eRJh73NsCl5nLTcM8L-WtjQ1i8M.roa (hash: FurWUtoK3SJ5oNGdIN9dbo+ONOIK9GXi/NLIt8LbtMY=)
3: kEe6Bn-Wm8OU0BMeJ1sgg9otE2g.roa (hash: uUTvD8lHdMsxga0kjra2N6+gIRpOiRjAnp6etvYJekA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:32:9b:91:fa:de:7f:2b:ca:f8:84:26:1f:16:51:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: Aug 31 19:01:23 2026 GMT
Not After : Sep 1 19:01:23 2026 GMT
Subject: CN=8422fa6270d63abe482f84e60efa674afe770ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:49:9f:32:77:77:7b:40:7a:fd:9d:46:8b:01:
94:f1:83:83:ca:c4:60:f7:3a:66:7d:73:9f:31:61:
77:cb:fd:2e:76:38:39:eb:87:f3:a7:5e:d3:e8:b8:
3a:7f:38:18:83:22:0e:d2:7f:86:bb:39:6e:46:e1:
ac:cd:62:de:a3:c8:a6:e3:a1:7b:8e:48:f5:0f:0a:
8e:00:53:d1:ef:ad:18:ad:9a:70:f4:bc:74:53:68:
06:91:84:0b:b4:dc:5b:b2:ae:ed:87:d3:3a:0f:85:
b1:1b:5e:ec:cf:ce:c3:1f:2d:49:84:7a:cb:86:15:
16:52:cb:0b:83:24:f3:65:67:7e:28:91:99:af:41:
58:2e:66:c9:c6:c7:58:cc:39:3a:78:8f:5c:78:5e:
8c:37:ce:9c:05:fc:1b:77:31:04:ef:90:13:23:9b:
24:d3:91:66:b8:59:9a:68:00:b4:2c:01:21:0c:c6:
4d:77:ec:70:61:b0:90:7a:48:6d:08:b0:c8:75:56:
2b:cb:d7:5f:1e:42:3e:38:3c:4c:82:fc:12:40:7c:
b0:14:14:49:b6:ab:0a:0f:b0:5e:9d:48:b6:db:61:
25:ac:67:be:59:47:87:de:8f:0a:c8:ed:8d:43:ab:
c1:da:6d:09:a5:1b:1d:a2:bd:f0:27:2d:65:34:9d:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:22:FA:62:70:D6:3A:BE:48:2F:84:E6:0E:FA:67:4A:FE:77:0D:DB
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:65:85:90:3b:2b:93:ad:27:e6:2f:40:5f:dd:28:fa:48:92:
92:8b:28:d1:c8:12:38:70:28:a0:99:85:44:d2:ca:16:43:7a:
dc:9f:33:4b:b4:40:bf:23:d9:dc:34:87:da:53:98:36:14:fa:
23:37:08:c1:3b:02:3d:a7:45:3a:63:84:b1:9a:55:87:23:07:
9d:2b:f2:da:77:68:ee:77:d7:be:47:3f:25:da:1f:5f:91:58:
35:3c:7b:63:fa:5c:ff:ad:2c:2a:b3:e5:fc:eb:42:e6:d0:4a:
89:2e:3b:fb:fc:33:4d:0e:d2:a6:ba:f4:c8:fb:43:07:3f:17:
9a:a9:67:52:2c:b4:3f:9b:07:96:aa:77:f7:dc:6c:70:54:e9:
92:1e:4a:d2:2b:44:15:ce:84:cc:d0:f1:46:41:24:10:87:21:
6d:fb:38:95:b7:a2:53:a8:a5:13:b9:90:4a:08:88:33:80:59:
ec:00:ca:42:a9:60:b1:0f:ea:72:2c:80:ce:e4:07:ca:b3:45:
95:34:68:23:15:ed:fa:70:55:39:22:d7:f5:94:81:35:71:6f:
9a:15:5e:99:70:42:d1:14:eb:8a:d0:44:51:26:46:48:26:ff:
23:2d:88:a7:8b:90:5e:9a:c7:3f:2b:bc:52:dc:a3:80:37:3e:
c8:37:fc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:21:31 2026 by rpki-client