Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
File: DloI_DRpD1LbDCt-R-jlOIMUWpg.mft (raw, json)
Hash identifier: crXdknGP6hxgxehJ8MWNBorhyMqmhtmxKDssEtacddY=
Subject key identifier: 00:38:47:9F:6A:7D:75:FC:52:83:36:78:EE:5A:A5:14:06:06:8E:CC
Authority key identifier: 0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98
Certificate issuer: /CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
Certificate serial: 01A03B5F23AEF607B0AFB047DE7BD54E10D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
Manifest number: 0530
Signing time: Wed 26 Aug 2026 00:01:25 +0000
Manifest this update: Wed 26 Aug 2026 00:01:25 +0000
Manifest next update: Thu 27 Aug 2026 00:01:25 +0000
Files and hashes: 1: DloI_DRpD1LbDCt-R-jlOIMUWpg.crl (hash: kx8F4A/pqpdhpkdOdfAlBH2JHVxfGbqFEvzxpesNDyE=)
2: LOtYNSOIJLqn8y7bAA6r24saOkk.asa (hash: jnFWZlKsQlmviLgHTcWDoVumAZhReG7QINLCGxqwiGo=)
3: ZHi1ZhCdWfH9BoGN5VcU78t29bk.roa (hash: SRJcc4sRWkIGgmHfVj6UPyJviHaRkjxeQWqok2u9PGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:5f:23:ae:f6:07:b0:af:b0:47:de:7b:d5:4e:10:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
Validity
Not Before: Aug 26 00:01:25 2026 GMT
Not After : Aug 27 00:01:25 2026 GMT
Subject: CN=0038479f6a7d75fc52833678ee5aa51406068ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:cd:a4:df:a8:23:61:bd:b3:36:1f:47:f3:
80:ff:7c:ab:20:90:d2:00:87:43:60:ce:49:17:c2:
6a:47:41:1a:1f:57:d5:e3:cc:43:33:35:4f:a2:a1:
43:2a:f2:d9:13:79:ee:3b:29:d2:aa:80:8e:f2:42:
21:d1:cc:a5:59:e3:39:6c:25:b4:ed:e7:4e:ea:ca:
83:b0:40:4f:f3:96:4f:86:d5:60:bd:67:8a:40:a5:
ba:71:0c:0a:9b:7c:f5:87:8f:9c:6d:b9:e6:62:4c:
4d:10:84:d2:09:61:8f:41:94:35:71:f3:86:df:2f:
18:5f:bb:22:d3:16:c5:6a:6d:5c:0e:f5:cc:80:29:
58:04:67:3a:c8:b7:36:66:a5:89:1a:ff:44:49:a1:
da:c3:97:2a:15:d1:0e:dd:b8:45:08:ae:3a:98:b3:
62:39:73:d7:c4:57:b5:f8:19:84:05:96:47:45:43:
66:02:83:98:02:5d:6e:e9:6f:2f:14:a9:e2:a1:ee:
25:d2:7e:1a:d3:ef:a3:b9:8e:2b:79:78:9c:52:f0:
34:92:9e:ea:34:ca:06:be:b2:d6:4f:eb:9d:a0:b1:
a4:6b:de:27:2e:01:e7:30:56:80:cf:a6:cc:79:56:
07:30:74:9a:ef:2a:d3:66:d3:60:df:95:64:a7:b7:
73:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:38:47:9F:6A:7D:75:FC:52:83:36:78:EE:5A:A5:14:06:06:8E:CC
X509v3 Authority Key Identifier:
keyid:0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8b:2e:71:d6:5a:e5:ae:82:25:3a:bb:24:73:f5:26:e6:77:
d9:77:b7:44:6b:71:e5:87:ab:29:59:ba:8d:06:e2:6e:dc:29:
58:8f:f8:cc:ab:f2:61:cc:bd:54:13:2e:fe:81:3d:cf:8c:85:
8d:6d:a1:f1:80:55:27:87:ec:05:15:ff:e1:bb:5b:24:ba:a3:
80:58:b8:d5:5f:a9:14:d5:92:34:44:b1:88:e6:a1:61:2e:83:
9e:b2:30:86:1d:b3:d2:1a:1a:6a:30:64:32:a5:c6:c4:eb:69:
46:51:54:c2:71:7c:82:1c:89:5e:8e:f1:95:1d:f8:e4:26:d2:
92:e4:2e:4d:84:db:02:bb:13:15:c0:aa:7e:d0:28:97:0d:43:
23:3f:61:5b:89:81:ad:38:e3:82:7f:0e:a9:e2:19:e3:9b:21:
d6:a2:26:46:36:ce:8c:e2:62:07:05:e0:42:e9:ac:a1:56:c5:
16:9a:b6:cd:c9:3c:4d:53:0b:85:71:55:0d:3a:fc:f7:67:61:
5d:3f:2a:2e:37:77:b5:63:57:c8:14:78:41:54:e8:04:1b:e2:
ee:ed:91:fb:82:31:89:10:54:f9:28:84:ef:9e:cf:4a:9d:08:
22:5c:6a:b6:b8:77:36:46:3e:44:b3:90:f3:9f:db:68:95:40:
91:f5:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:09:28 2026 by rpki-client