Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
File: DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft (raw, json)
Hash identifier: gtReUt1931SKn4dAcijUJa/S325NaJ9JZQCqwTKE9sQ=
Subject key identifier: D3:FD:32:D7:26:BC:21:93:7A:97:7A:17:D6:24:21:D4:39:D6:79:AD
Authority key identifier: 0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
Certificate issuer: /CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Certificate serial: 01A14A6137DA928317EE4D4C9E0CF8E574FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
Manifest number: 0AC4
Signing time: Sat 17 Oct 2026 15:00:47 +0000
Manifest this update: Sat 17 Oct 2026 15:00:47 +0000
Manifest next update: Sun 18 Oct 2026 15:00:47 +0000
Files and hashes: 1: DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl (hash: gxvYQFqbGpwETdWHF9uj4snPulX6IbwlOYHAfTUPA4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:61:37:da:92:83:17:ee:4d:4c:9e:0c:f8:e5:74:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Validity
Not Before: Oct 17 15:00:47 2026 GMT
Not After : Oct 18 15:00:47 2026 GMT
Subject: CN=d3fd32d726bc21937a977a17d62421d439d679ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:77:a5:0c:0f:e1:0b:8d:86:0a:36:98:9d:ab:
83:63:c1:be:c8:d1:2b:52:cb:7f:d7:1a:63:0c:0e:
fc:b7:75:6e:b2:15:32:98:ec:13:b4:cd:10:e1:e8:
54:98:39:c2:66:af:7e:0b:ac:ed:0a:8d:b1:c0:98:
b2:3a:ca:3a:07:c9:72:b2:e0:cc:5e:f4:50:bb:aa:
66:99:93:ee:2f:18:7c:c0:92:a5:46:d5:79:d7:30:
1e:45:35:98:0d:ec:72:fd:b2:0b:4c:c9:a1:55:21:
1b:90:28:fd:32:10:79:f0:06:6d:3f:ec:1f:94:f1:
64:da:3b:af:d2:68:64:99:64:ae:53:53:3a:e6:6e:
eb:0a:f4:14:22:85:a3:63:24:d8:c3:0e:ad:3e:3e:
03:4a:33:b4:cc:32:84:bc:53:25:c6:22:41:2c:98:
de:e0:52:f2:17:b7:17:68:1e:30:9e:3b:88:31:d3:
23:43:62:fe:01:76:18:d3:74:d8:04:03:21:4c:91:
e3:3b:ea:dc:3b:54:3b:64:bc:fc:01:06:2d:dc:d4:
5b:9f:cd:c4:76:9f:54:5b:eb:40:5f:0a:c9:d6:c9:
80:75:35:f1:2e:59:41:96:35:de:bf:98:a3:7d:cc:
20:c1:8f:1b:3f:69:be:53:5e:80:97:8f:12:a7:03:
e3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FD:32:D7:26:BC:21:93:7A:97:7A:17:D6:24:21:D4:39:D6:79:AD
X509v3 Authority Key Identifier:
keyid:0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a9:7e:1a:05:5c:bc:b9:09:c0:86:2e:16:ce:06:c4:fe:c6:
c8:fb:1f:57:33:87:37:99:14:97:ac:2c:2a:b6:90:da:7e:78:
9e:6e:8c:c4:68:93:95:8e:a0:94:bf:b6:93:72:3c:6d:e6:26:
cb:bb:d3:fc:aa:d4:9e:7b:b6:5d:b9:2e:52:78:a1:d9:d6:48:
80:40:18:04:a8:7f:d9:7d:31:c9:9d:cc:cb:aa:ce:f1:db:58:
3f:25:3a:e8:80:11:51:0d:87:95:3a:6e:e1:77:7d:39:e9:19:
cd:25:06:4b:db:77:a9:e3:91:b4:23:3e:cd:69:17:b5:f1:0a:
a2:2c:6c:86:66:d2:52:10:40:55:0c:af:cf:6e:0c:4a:ea:0d:
e6:e1:63:23:66:00:e3:d8:e9:81:26:f5:53:f5:12:85:1a:57:
79:ed:7d:36:2e:10:d5:d4:b4:5a:d7:f7:e5:57:d4:b4:b3:a8:
20:df:e0:40:95:93:08:24:f6:c9:27:d1:e1:de:4e:1c:32:3f:
92:3e:13:ce:8d:83:12:8c:6d:e3:03:27:5e:7a:bd:cd:59:94:
9c:b3:ca:e2:41:f5:54:c3:d3:80:28:89:13:32:7c:75:e0:73:
b2:d5:05:41:71:10:39:08:23:3a:c4:56:90:29:ba:6c:28:83:
2f:30:ed:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:27:30 2026 by rpki-client