Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
File: Dxd9Rq5RS92RniRMevdK337bqNU.mft (raw, json)
Hash identifier: p4LPnTpYQGFF3XC6ow6P6iG55VF87Ri4OKjDlicSYQI=
Subject key identifier: 6A:E9:54:95:67:4E:7B:4B:8C:5D:E1:B5:09:0E:FD:22:D7:72:BC:4A
Authority key identifier: 0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5
Certificate issuer: /CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
Certificate serial: 01A17995C4ED2389EDE6BA9946E18CEBBCA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
Manifest number: 02DB
Signing time: Mon 26 Oct 2026 19:00:20 +0000
Manifest this update: Mon 26 Oct 2026 19:00:20 +0000
Manifest next update: Tue 27 Oct 2026 19:00:20 +0000
Files and hashes: 1: 25aFLsrtr-3cg85dYuCtUtJ12DI.roa (hash: Q6BbhiSVhBcdb9sUM5J8K87QWD5MUDWEKTLkdgJwJhY=)
2: Dxd9Rq5RS92RniRMevdK337bqNU.crl (hash: EmibFmT+LFv8bgNZ+qiPjDau+f43n2PggzfusI0V4GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:95:c4:ed:23:89:ed:e6:ba:99:46:e1:8c:eb:bc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f177d46ae514bdd919e244c7af74adf7edba8d5
Validity
Not Before: Oct 26 19:00:20 2026 GMT
Not After : Oct 27 19:00:20 2026 GMT
Subject: CN=6ae95495674e7b4b8c5de1b5090efd22d772bc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:03:d7:21:97:04:8f:46:d8:18:11:a4:26:03:
fd:91:d2:b7:ec:38:2e:b4:20:bb:63:44:14:b7:28:
f6:e9:6a:81:65:26:4e:41:c9:af:3f:72:c3:c0:72:
37:d6:b6:7b:82:6b:bc:40:5b:22:a7:b9:76:60:1c:
fa:82:c2:09:9e:81:61:0a:5d:5c:c0:69:c0:6f:5f:
84:98:7a:d9:40:2b:1f:f8:32:65:22:10:f7:4c:2c:
9f:dc:a9:e6:76:63:83:90:48:83:63:f8:cc:ca:63:
16:78:1f:1a:5a:02:ab:75:d3:b8:7d:89:94:be:f2:
b2:1b:60:fe:c8:76:b3:f8:a1:aa:bf:56:46:aa:2e:
09:a0:f7:63:90:98:24:85:27:cf:d0:3f:80:51:f6:
d1:0a:0d:f1:0d:d9:5f:b8:db:3b:ac:84:a4:d6:0f:
04:75:14:8a:16:fa:38:f0:d9:12:e9:41:a6:35:a8:
ee:09:f6:14:a6:7f:b0:08:af:85:8a:e3:15:ca:62:
49:da:99:38:b9:aa:15:d2:79:ca:7a:ee:3d:8d:a9:
ab:be:e6:64:2f:76:e3:ef:6f:ab:dc:d9:57:92:cf:
30:f4:b1:aa:2d:f7:03:56:c6:26:f6:61:46:d5:19:
5a:19:d2:b2:a3:42:aa:36:d7:2f:58:8e:5a:ec:e6:
9c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E9:54:95:67:4E:7B:4B:8C:5D:E1:B5:09:0E:FD:22:D7:72:BC:4A
X509v3 Authority Key Identifier:
keyid:0F:17:7D:46:AE:51:4B:DD:91:9E:24:4C:7A:F7:4A:DF:7E:DB:A8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxd9Rq5RS92RniRMevdK337bqNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/88f1fc-204d-43be-a7b4-b76e82c232b7/1/Dxd9Rq5RS92RniRMevdK337bqNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2c:ec:19:95:c0:3c:ed:d8:05:ba:ac:ba:37:41:65:6d:62:
f7:0f:ae:5a:70:d4:84:d4:2e:c9:2b:d9:23:a0:03:7f:80:af:
6b:0b:2c:64:04:40:73:02:9f:53:aa:a5:c6:b6:3d:0b:82:cb:
9f:91:8d:a7:d1:fa:f4:b8:bc:75:d2:c7:a3:51:e1:d4:e9:a9:
b7:6c:1c:6f:63:92:3a:68:df:92:fc:88:35:3f:bf:3b:72:17:
01:5e:87:fa:cc:f9:02:ed:91:a7:eb:61:13:2b:ee:da:26:1b:
5c:a1:24:36:f7:9f:39:84:72:bd:36:73:5d:ec:a3:03:66:ac:
c0:d9:23:78:25:34:5f:22:0d:05:c3:6d:1b:f2:10:d9:b0:62:
59:e7:86:6c:fd:68:b7:ab:5d:32:d7:96:95:6e:18:73:90:10:
b6:bd:8a:83:27:b0:d5:fc:bf:a9:7b:77:3b:4c:97:89:61:9c:
b7:ea:91:a5:13:30:87:39:06:ee:fd:15:12:3b:59:3f:f1:f2:
3e:56:ab:9e:a2:8c:53:ef:26:4c:e4:11:27:4e:10:8d:1f:da:
7a:76:ee:28:57:30:77:7c:7a:55:bb:5d:56:7c:db:85:34:47:
a3:18:0a:af:f6:88:4f:ad:be:ab:a5:74:d4:d6:9e:8a:04:bb:
12:9e:21:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5lcTtI4nt5rqZRuGM67yiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMTc3ZDQ2YWU1MTRiZGQ5MTllMjQ0YzdhZjc0YWRmN2Vk
YmE4ZDUwHhcNMjYxMDI2MTkwMDIwWhcNMjYxMDI3MTkwMDIwWjAzMTEwLwYDVQQD
Eyg2YWU5NTQ5NTY3NGU3YjRiOGM1ZGUxYjUwOTBlZmQyMmQ3NzJiYzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wPXIZcEj0bYGBGkJgP9kdK37Dgu
tCC7Y0QUtyj26WqBZSZOQcmvP3LDwHI31rZ7gmu8QFsip7l2YBz6gsIJnoFhCl1c
wGnAb1+EmHrZQCsf+DJlIhD3TCyf3KnmdmODkEiDY/jMymMWeB8aWgKrddO4fYmU
vvKyG2D+yHaz+KGqv1ZGqi4JoPdjkJgkhSfP0D+AUfbRCg3xDdlfuNs7rISk1g8E
dRSKFvo48NkS6UGmNajuCfYUpn+wCK+FiuMVymJJ2pk4uaoV0nnKeu49jamrvuZk
L3bj72+r3NlXks8w9LGqLfcDVsYm9mFG1RlaGdKyo0KqNtcvWI5a7OacswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrpVJVnTntLjF3htQkO/SLXcrxKMB8GA1UdIwQY
MBaAFA8XfUauUUvdkZ4kTHr3St9+26jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHhkOVJxNVJTOTJSbmlSTWV2ZEszMzdicU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84OGYxZmMtMjA0ZC00M2JlLWE3YjQt
Yjc2ZTgyYzIzMmI3LzEvRHhkOVJxNVJTOTJSbmlSTWV2ZEszMzdicU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS84OGYxZmMtMjA0ZC00M2JlLWE3YjQtYjc2ZTgyYzIzMmI3
LzEvRHhkOVJxNVJTOTJSbmlSTWV2ZEszMzdicU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCzsGZXA
PO3YBbqsujdBZW1i9w+uWnDUhNQuySvZI6ADf4CvawssZARAcwKfU6qlxrY9C4LL
n5GNp9H69Li8ddLHo1Hh1Ompt2wcb2OSOmjfkvyINT+/O3IXAV6H+sz5Au2Rp+th
Eyvu2iYbXKEkNvefOYRyvTZzXeyjA2aswNkjeCU0XyINBcNtG/IQ2bBiWeeGbP1o
t6tdMteWlW4Yc5AQtr2Kgyew1fy/qXt3O0yXiWGct+qRpRMwhzkG7v0VEjtZP/Hy
PlarnqKMU+8mTOQRJ04QjR/aenbuKFcwd3x6VbtdVnzbhTRHoxgKr/aIT62+q6V0
1NaeigS7Ep4hRQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:03:48 2026 by rpki-client