Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/773c76-feef-4661-a435-388b7f796014/1/DB0Ac_gtn2QCabltJeqCi_7oGjw.mft
File: DB0Ac_gtn2QCabltJeqCi_7oGjw.mft (raw, json)
Hash identifier: 90s5mAX8whC1wZoHThTuVTzcuYIwlJTIodAXA5EwBu4=
Subject key identifier: 4C:3D:0C:A4:D7:67:B9:78:15:89:A3:28:39:8F:11:28:91:7C:61:EB
Authority key identifier: 0C:1D:00:73:F8:2D:9F:64:02:69:B9:6D:25:EA:82:8B:FE:E8:1A:3C
Certificate issuer: /CN=0c1d0073f82d9f640269b96d25ea828bfee81a3c
Certificate serial: 01A03FA9E60B0841260F6BF1136C3AC59673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB0Ac_gtn2QCabltJeqCi_7oGjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/773c76-feef-4661-a435-388b7f796014/1/DB0Ac_gtn2QCabltJeqCi_7oGjw.mft
Manifest number: CD
Signing time: Wed 26 Aug 2026 20:01:34 +0000
Manifest this update: Wed 26 Aug 2026 20:01:34 +0000
Manifest next update: Thu 27 Aug 2026 20:01:34 +0000
Files and hashes: 1: DB0Ac_gtn2QCabltJeqCi_7oGjw.crl (hash: o53x9Mdd3EyHfxX9dQYbc01hbgJVMdfE75NiLJ1HdWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/773c76-feef-4661-a435-388b7f796014/1/DB0Ac_gtn2QCabltJeqCi_7oGjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/773c76-feef-4661-a435-388b7f796014/1/DB0Ac_gtn2QCabltJeqCi_7oGjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DB0Ac_gtn2QCabltJeqCi_7oGjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:e6:0b:08:41:26:0f:6b:f1:13:6c:3a:c5:96:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1d0073f82d9f640269b96d25ea828bfee81a3c
Validity
Not Before: Aug 26 20:01:34 2026 GMT
Not After : Aug 27 20:01:34 2026 GMT
Subject: CN=4c3d0ca4d767b9781589a328398f1128917c61eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:cc:01:88:8b:4b:c4:26:33:0d:4c:8a:60:
c0:ae:14:df:8e:78:6f:d9:f1:db:45:ae:0f:20:a2:
15:9b:b7:fd:63:d0:5a:9f:2e:30:c6:0d:79:5f:55:
3c:4f:ee:ed:ed:c7:68:38:4f:4f:d7:57:c0:dd:fe:
aa:c2:c8:f9:f5:2a:6f:bf:07:3f:05:48:59:eb:72:
3e:dd:12:5c:7b:3a:4e:74:4e:b4:75:5e:b0:99:e8:
24:6f:f3:f5:30:73:ee:4d:87:fe:22:fc:25:ea:97:
67:5a:ed:f5:d8:55:55:44:0a:90:fc:27:53:28:cb:
42:7b:7a:ca:d2:2a:c6:c9:57:5f:ab:bd:35:20:49:
e6:09:43:8a:ce:07:4d:f9:e2:df:04:9c:8e:25:22:
a5:80:03:e2:09:07:9c:1b:c1:2c:2f:fa:83:7e:35:
98:c7:d2:5b:23:b7:00:92:47:61:58:b5:90:a8:0a:
dc:0c:b3:3e:64:bc:c3:f0:6d:36:7c:82:25:26:51:
66:ba:35:8f:f7:e7:ad:6d:83:28:2b:da:65:aa:05:
a9:25:d0:e4:38:95:ca:fd:9a:b9:06:05:bc:6d:69:
30:2f:51:92:1f:87:22:cd:8d:60:8a:fc:b1:62:d7:
7c:b9:df:d5:40:7d:93:9d:6d:5d:3c:e0:bd:1c:ce:
c4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3D:0C:A4:D7:67:B9:78:15:89:A3:28:39:8F:11:28:91:7C:61:EB
X509v3 Authority Key Identifier:
keyid:0C:1D:00:73:F8:2D:9F:64:02:69:B9:6D:25:EA:82:8B:FE:E8:1A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB0Ac_gtn2QCabltJeqCi_7oGjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/773c76-feef-4661-a435-388b7f796014/1/DB0Ac_gtn2QCabltJeqCi_7oGjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/773c76-feef-4661-a435-388b7f796014/1/DB0Ac_gtn2QCabltJeqCi_7oGjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d6:66:0a:f7:b4:e6:05:b1:2c:06:ff:e0:50:ec:0d:7a:7a:
f3:f4:86:c8:3f:70:6b:97:97:9a:1c:58:35:35:c4:29:e7:f0:
82:f8:9a:d5:b7:af:56:ac:2a:a7:dd:37:5c:3d:7c:a4:b3:f8:
cc:17:6e:29:10:30:80:1b:45:fc:be:a8:08:e1:fe:24:98:dc:
0f:d3:d2:ba:46:50:8e:67:fc:24:db:a0:3f:93:70:be:19:2f:
10:2f:69:e0:41:79:da:91:eb:de:a3:6d:a7:1c:a6:1d:09:48:
ea:ba:d8:f4:44:2f:4e:e1:02:49:12:b6:c4:3d:7c:bc:5c:67:
a5:98:6d:97:48:d7:b6:1b:e8:c3:3f:10:f4:08:49:0e:95:f3:
10:7c:84:92:66:a9:ca:7b:b8:41:bc:aa:25:bb:a8:ea:40:9a:
19:91:42:fd:2d:4c:32:4f:5d:20:ea:8f:27:42:c7:b5:7d:f6:
80:1f:c4:69:45:37:32:7d:c8:ea:5f:02:90:88:e9:a1:6e:3f:
76:46:ad:04:77:73:9d:2d:e7:04:cf:9e:d8:45:89:54:08:55:
f5:6d:03:10:ba:68:a6:24:92:8d:91:7c:b0:f7:e5:e3:35:60:
16:ca:e7:3e:a5:22:76:8e:b3:e8:cb:7d:08:65:7d:85:c2:57:
f1:7d:69:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:23:25 2026 by rpki-client