
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
File: DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json)
Hash identifier: Hnk86OzUrfdiQakJuFRhgnW2OBAau0VkVjYp7tvoUAs=
Subject key identifier: E9:DC:6C:52:90:3C:4F:27:50:6B:5E:4C:E8:70:23:A6:5E:08:59:39
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial: 01A13DB845CC52142E898EDEF3429733C2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 04:00:48 +0000
Manifest this update: Thu 15 Oct 2026 04:00:48 +0000
Manifest next update: Fri 16 Oct 2026 04:00:48 +0000
Files and hashes: 1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: 2FhHcL7Upiw5YjGxbwkIVcALFFbvIH0dG5vI9lrjxOk=)
2: Q_aD8H2Bg8D8Fk8p2Skkp_ucG04.roa (hash: szSEbM4DLAElR41izkoZqU673B1zp52SKgEtUZLpn2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:45:cc:52:14:2e:89:8e:de:f3:42:97:33:c2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Validity
Not Before: Oct 15 04:00:48 2026 GMT
Not After : Oct 16 04:00:48 2026 GMT
Subject: CN=e9dc6c52903c4f27506b5e4ce87023a65e085939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:9a:2a:8c:f7:40:fd:e0:cf:fd:f3:86:87:
d5:d0:2c:c8:7f:f5:72:22:ec:a3:82:4b:d4:3e:ae:
df:28:ed:4d:4b:44:63:fd:02:69:73:b9:6f:d0:49:
30:be:8a:9a:e9:7d:0f:93:16:42:c6:23:78:a5:08:
c9:bf:f1:bb:20:8c:e9:46:52:c6:38:11:b9:b5:92:
38:42:6a:76:d5:62:a9:9c:1d:88:5c:2a:97:6d:21:
66:54:59:94:2f:66:db:8e:8d:54:c6:d5:7b:63:7b:
35:17:99:b6:b6:f5:0c:e8:87:b3:4b:7e:9f:34:f9:
fc:f7:53:2f:f4:5b:95:3f:53:53:2d:ad:82:34:44:
1e:67:17:24:02:40:37:92:04:87:d8:55:38:33:d4:
54:2f:52:28:24:83:6f:20:7f:3a:44:94:26:d0:2f:
7c:5d:2e:8a:19:60:e6:35:e8:0a:be:93:34:1c:78:
a8:7e:cd:3f:8a:c0:64:d3:3c:84:34:dd:4e:4a:03:
16:fb:9c:c9:d9:40:38:ac:9c:87:cd:51:fc:01:5c:
dc:82:57:13:77:54:2a:e1:00:ce:17:2c:f7:9e:47:
6e:45:d0:29:04:ec:e6:c2:63:13:36:36:f5:20:75:
a8:93:aa:00:60:8a:e0:49:f0:d3:34:c6:73:24:99:
df:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DC:6C:52:90:3C:4F:27:50:6B:5E:4C:E8:70:23:A6:5E:08:59:39
X509v3 Authority Key Identifier:
keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4e:15:6e:3f:00:9c:a2:ae:ed:a4:a9:28:18:b8:c4:72:2c:
49:d6:25:61:f4:85:85:65:08:36:68:cc:04:40:50:9c:47:f9:
10:e1:c3:1a:ed:25:dc:a6:d2:8f:65:55:40:db:df:fd:00:35:
57:56:4b:2e:92:b4:ab:c1:71:04:78:26:e4:65:5f:dc:9e:61:
b8:f7:85:11:5c:d2:be:e6:44:1e:e5:45:cb:e8:b8:a8:fb:ae:
f2:9d:59:4a:e8:66:dc:fd:94:73:8c:73:f1:5c:f3:87:99:f6:
f6:99:68:dd:d4:00:18:09:f9:60:b6:3d:cc:c7:1f:22:e3:85:
98:b5:2d:e6:de:77:a7:77:fe:30:a2:57:4d:35:d9:ad:39:06:
f7:0f:51:a9:e6:ab:ae:6f:ea:87:a4:20:3c:4e:8a:94:7a:75:
be:14:2e:33:47:be:e4:49:61:be:09:31:25:fb:18:3d:cf:b8:
c6:f2:b7:13:cd:0c:36:38:86:cc:f6:cf:e0:50:e4:c2:24:3f:
8f:86:7f:21:36:8e:95:aa:40:39:d6:21:08:7f:1e:1e:20:e1:
45:40:e2:b5:63:4a:a8:42:3c:a8:6f:fb:31:cc:e4:a5:db:71:
8c:61:72:ec:84:b4:72:78:49:d9:8d:d1:e8:a0:5d:c6:8b:c4:
df:62:e1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:20:59 2026 by rpki-client