Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
File: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft (raw, json)
Hash identifier: 75W2Yqg8psPpPOMEfOA1Jv9iHTj8JJ0anbJvnk+HKXg=
Subject key identifier: B9:49:71:AB:22:DF:6C:6D:E1:ED:06:12:40:36:10:6A:FA:03:CC:5D
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 01A146BB5E2D1A5693CF098DBE2FDCEFE338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
Manifest number: 1AB3
Signing time: Fri 16 Oct 2026 22:00:46 +0000
Manifest this update: Fri 16 Oct 2026 22:00:46 +0000
Manifest next update: Sat 17 Oct 2026 22:00:46 +0000
Files and hashes: 1: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl (hash: YlNsh7lTecUTl80rMhnYQqzyyqsntB0afXgsK1nJmTs=)
2: eRJh73NsCl5nLTcM8L-WtjQ1i8M.roa (hash: FurWUtoK3SJ5oNGdIN9dbo+ONOIK9GXi/NLIt8LbtMY=)
3: kEe6Bn-Wm8OU0BMeJ1sgg9otE2g.roa (hash: uUTvD8lHdMsxga0kjra2N6+gIRpOiRjAnp6etvYJekA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:bb:5e:2d:1a:56:93:cf:09:8d:be:2f:dc:ef:e3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: Oct 16 22:00:46 2026 GMT
Not After : Oct 17 22:00:46 2026 GMT
Subject: CN=b94971ab22df6c6de1ed06124036106afa03cc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:74:7a:e6:62:9a:42:69:5e:01:45:10:02:
20:8c:5d:43:30:7a:2f:ec:2a:b4:20:1e:57:c4:26:
43:0c:21:73:db:c3:1b:92:d7:7d:a6:c5:bb:b1:8f:
e2:65:40:76:1e:b1:35:0e:a2:a5:37:9c:a5:b4:14:
72:2d:9c:72:d7:f4:6c:cc:b9:ef:97:5d:14:c1:4b:
11:f8:75:17:b3:5d:bf:b7:3a:79:f3:ba:f6:00:c1:
98:33:ff:cf:3a:30:ef:a6:30:f4:50:1c:91:36:f8:
23:d5:d0:14:6c:d4:9f:5c:e0:fd:a8:8d:85:85:f3:
41:c0:6c:8b:62:e9:a7:96:43:23:1d:a6:58:9e:a0:
c0:a0:e4:4a:81:a5:00:71:a2:be:5b:0c:63:65:e1:
7f:b1:a0:43:d8:a0:54:e2:11:a2:ba:4f:6c:c2:5f:
69:c7:9b:a0:21:25:e9:b8:74:1f:fd:21:e9:8c:e4:
30:eb:91:31:a0:e8:f9:13:89:15:d7:46:9d:55:8a:
36:07:f7:d9:86:35:70:55:57:fb:d0:92:bd:35:d9:
e5:6c:bc:5e:5d:f2:65:f2:d7:71:d1:d9:ac:aa:d4:
fc:a3:0f:f3:0e:6d:42:a1:26:6a:3b:81:e8:0b:42:
66:aa:52:4f:6d:9d:f0:ff:d3:43:32:e8:ea:bb:37:
85:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:49:71:AB:22:DF:6C:6D:E1:ED:06:12:40:36:10:6A:FA:03:CC:5D
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:ba:0e:59:05:3e:90:2b:87:51:9e:32:58:2d:b6:7f:27:23:
22:59:e3:32:0f:00:29:7d:8a:96:e9:9a:f3:d9:37:f4:b3:b5:
bb:5e:3e:a1:f6:22:1e:96:5e:88:39:ee:48:62:e0:a3:63:a3:
da:88:1a:c6:49:12:3f:4f:1a:ed:26:f1:88:63:be:02:82:71:
4a:4d:44:0e:02:d5:bf:50:c5:ce:a4:5a:93:9d:6d:99:36:17:
30:a1:e3:15:a9:9c:95:9c:e0:16:b1:6a:29:3c:20:ba:01:60:
2a:79:65:3f:8f:79:af:cc:b2:3f:d3:f7:51:cc:69:f3:5d:99:
53:61:79:75:d7:52:46:3c:6f:df:13:08:21:40:fd:45:c9:e5:
d4:f3:e2:ad:76:23:30:87:29:81:7c:79:9b:0b:8f:4f:55:4b:
34:3d:51:98:a3:98:61:25:03:07:80:05:4c:b6:6e:37:34:9b:
57:16:e0:0d:b2:ce:14:fe:6e:fd:00:bd:b1:82:a7:f3:b9:ff:
2f:db:14:7d:31:88:4b:af:d8:c5:4b:43:51:54:da:17:14:49:
67:37:03:b5:2a:12:24:21:63:3c:b1:f5:82:60:4b:f6:17:dc:
69:6a:c8:60:8a:cf:72:f9:81:3b:3e:d8:52:a2:fb:3f:06:74:
b2:1c:21:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:52:12 2026 by rpki-client