Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
File: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft (raw, json)
Hash identifier: 2iuH/T8Xptypd0gWXBPzdTaDorVkCRGOzEzTB84iprY=
Subject key identifier: A5:FE:D8:DB:E8:31:1D:C8:29:21:06:B5:BD:0E:EA:22:2A:67:21:5E
Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
Certificate issuer: /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Certificate serial: 01A08D563A9A532886E87B6C020E60A8657B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 22:00:33 +0000
Manifest this update: Thu 10 Sep 2026 22:00:33 +0000
Manifest next update: Fri 11 Sep 2026 22:00:33 +0000
Files and hashes: 1: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl (hash: /mYrezh6sSSEP4hM92kl5kyK33AqZJRS7OI3bl71wTg=)
2: tSEZjU-vS57hTqP83y9FF4MrWAs.roa (hash: ozjgCaqpcyjXz1n6hccmETcyoNzECahsGI6im8BxTac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:3a:9a:53:28:86:e8:7b:6c:02:0e:60:a8:65:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Validity
Not Before: Sep 10 22:00:33 2026 GMT
Not After : Sep 11 22:00:33 2026 GMT
Subject: CN=a5fed8dbe8311dc8292106b5bd0eea222a67215e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:fe:36:17:ae:b7:67:d0:dc:4b:a6:4a:3a:
38:09:80:ee:6f:da:80:e0:35:5d:26:e8:cc:4b:ec:
7b:32:45:3e:da:70:5e:6b:f7:49:88:a5:20:db:a6:
43:f1:39:76:e8:fb:b8:d1:36:e6:4f:62:af:08:33:
75:3a:20:38:f3:ef:31:13:f9:03:d7:8a:97:85:3b:
93:dc:43:74:98:a8:c5:f7:3e:8d:11:65:97:1c:34:
99:0e:f8:e4:0d:a1:e1:5a:91:bf:81:de:03:72:59:
ad:c3:ce:7b:cd:39:0e:7f:99:f5:d4:83:1b:4d:b3:
da:d1:e1:b8:a8:7a:9a:e4:80:77:57:77:77:2f:37:
1d:14:37:af:7c:5d:c1:4a:17:dd:0f:d7:0a:c1:16:
96:b9:d3:96:6e:5b:2f:de:20:6a:3e:a0:18:0e:26:
e5:2c:0f:66:5d:c2:37:a6:dd:90:49:61:2e:23:63:
7c:b3:5e:73:8e:ea:ee:aa:02:76:56:e4:e4:bc:10:
ff:de:9e:d0:a1:d9:4e:c3:45:db:5a:10:05:8c:df:
3c:ff:55:67:45:c5:1d:be:a8:c7:de:fd:ad:74:bf:
17:d4:41:ab:47:83:92:e9:a6:b1:6d:d4:3a:35:c7:
70:d5:23:10:d6:d2:6e:d3:ed:77:7c:a7:95:b6:be:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FE:D8:DB:E8:31:1D:C8:29:21:06:B5:BD:0E:EA:22:2A:67:21:5E
X509v3 Authority Key Identifier:
keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7c:ac:30:29:bb:85:b0:e8:82:08:c6:03:cd:cd:5e:62:16:
cb:58:ba:de:7d:f5:1b:69:f8:50:84:cd:15:2a:7d:4c:fe:c6:
32:a6:d1:d4:45:7c:89:7d:c8:e1:6d:73:16:fb:f2:8c:f5:81:
af:f5:9a:bc:d1:eb:ca:f1:cb:4d:1d:44:ab:fd:e2:7a:23:bb:
93:d2:c9:21:3d:8b:ef:83:a4:8e:dc:21:ec:33:8a:f0:5f:8c:
d1:2e:53:d0:79:1f:51:33:81:73:46:6e:ee:fb:f5:66:e6:50:
84:b5:d7:c8:38:17:a3:9c:d2:87:05:ce:f7:2f:1a:1b:a8:69:
45:3a:87:b1:f1:d4:56:42:14:d0:3b:f5:34:56:49:55:45:a9:
ad:c3:e3:b9:1d:00:ff:1d:f8:47:c5:6a:9f:ed:b3:97:cd:96:
de:d5:1a:3a:00:97:eb:4e:fb:85:da:78:66:89:41:62:df:bd:
23:79:e8:e2:27:00:52:3f:9e:de:df:f2:0c:63:fa:ba:e0:7e:
61:90:b9:da:6e:87:28:29:34:97:99:87:5f:de:61:d8:9f:24:
94:ae:a4:8c:5e:3f:68:58:51:9f:6c:23:37:17:85:f8:d1:c7:
f7:de:b3:93:63:b7:90:28:23:0d:27:6c:d9:29:c8:5a:b8:69:
74:3c:da:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNVjqaUyiG6HtsAg5gqGV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NTRiMGNjMmMzZjZiNzU3ZmY1MmNiYTE2NWQ5ZmZhODhj
ZWQzMGYwHhcNMjYwOTEwMjIwMDMzWhcNMjYwOTExMjIwMDMzWjAzMTEwLwYDVQQD
EyhhNWZlZDhkYmU4MzExZGM4MjkyMTA2YjViZDBlZWEyMjJhNjcyMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ij+Nheut2fQ3EumSjo4CYDub9qA
4DVdJujMS+x7MkU+2nBea/dJiKUg26ZD8Tl26Pu40TbmT2KvCDN1OiA48+8xE/kD
14qXhTuT3EN0mKjF9z6NEWWXHDSZDvjkDaHhWpG/gd4Dclmtw857zTkOf5n11IMb
TbPa0eG4qHqa5IB3V3d3LzcdFDevfF3BShfdD9cKwRaWudOWblsv3iBqPqAYDibl
LA9mXcI3pt2QSWEuI2N8s15zjuruqgJ2VuTkvBD/3p7QodlOw0XbWhAFjN88/1Vn
RcUdvqjH3v2tdL8X1EGrR4OS6aaxbdQ6Ncdw1SMQ1tJu0+13fKeVtr6nSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKX+2NvoMR3IKSEGtb0O6iIqZyFeMB8GA1UdIwQY
MBaAFHZUsMwsP2t1f/UsuhZdn/qIztMPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xMjI2NDEtNzFhZi00NTljLWI5YzEt
OGIxNTZkYjRmZjM1LzEvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xMjI2NDEtNzFhZi00NTljLWI5YzEtOGIxNTZkYjRmZjM1
LzEvZGxTd3pDd19hM1ZfOVN5NkZsMmYtb2pPMHc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXysMCm7
hbDoggjGA83NXmIWy1i63n31G2n4UITNFSp9TP7GMqbR1EV8iX3I4W1zFvvyjPWB
r/WavNHryvHLTR1Eq/3ieiO7k9LJIT2L74Okjtwh7DOK8F+M0S5T0HkfUTOBc0Zu
7vv1ZuZQhLXXyDgXo5zShwXO9y8aG6hpRTqHsfHUVkIU0Dv1NFZJVUWprcPjuR0A
/x34R8Vqn+2zl82W3tUaOgCX6077hdp4ZolBYt+9I3no4icAUj+e3t/yDGP6uuB+
YZC52m6HKCk0l5mHX95h2J8klK6kjF4/aFhRn2wjNxeF+NHH996zk2O3kCgjDSds
2SnIWrhpdDzaYA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 23:37:14 2026 by rpki-client