Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.mft
File: Dc5-Jqwd5N5t_3WroAShz8p4dmQ.mft (raw, json)
Hash identifier: HMjd5CHllHy9Tbx9sAAfxT4yx8j66GfzSGPCVw52elE=
Subject key identifier: DB:CC:ED:FE:B5:83:71:AF:C7:4F:9B:85:F0:79:E1:3C:01:DA:32:05
Authority key identifier: 0D:CE:7E:26:AC:1D:E4:DE:6D:FF:75:AB:A0:04:A1:CF:CA:78:76:64
Certificate issuer: /CN=0dce7e26ac1de4de6dff75aba004a1cfca787664
Certificate serial: 01A13DEEC7FF7C80B5583CDF18D00B8B93DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 05:00:21 +0000
Manifest this update: Thu 15 Oct 2026 05:00:21 +0000
Manifest next update: Fri 16 Oct 2026 05:00:21 +0000
Files and hashes: 1: 2UNDB84tKOWKSZtTOHQrVynZm2o.roa (hash: bE+riimbGHHE6JaqY1PK7174Vmo273vPJm4kl+wv9jA=)
2: Dc5-Jqwd5N5t_3WroAShz8p4dmQ.crl (hash: LM2jeL5jGda5mkSBSS9rosl3S8b/00EYej1qkgImUSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:c7:ff:7c:80:b5:58:3c:df:18:d0:0b:8b:93:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dce7e26ac1de4de6dff75aba004a1cfca787664
Validity
Not Before: Oct 15 05:00:21 2026 GMT
Not After : Oct 16 05:00:21 2026 GMT
Subject: CN=dbccedfeb58371afc74f9b85f079e13c01da3205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:42:6d:59:23:c4:21:1c:7b:8f:29:4b:c5:
b0:ba:74:8a:80:44:85:6b:62:92:8a:e6:73:98:e5:
19:49:26:d7:d3:2b:a4:63:7f:8f:0f:35:79:10:8e:
28:8c:75:98:43:02:b3:8c:ac:33:a2:ca:a8:5f:2e:
d9:02:c9:4f:29:5e:bf:04:7a:76:c6:66:83:46:9e:
16:c7:88:20:49:a9:e8:22:ec:95:25:a0:19:2f:0c:
5a:6f:48:87:b5:42:92:93:1d:96:03:bc:c9:d8:b6:
39:59:76:72:6c:18:b7:7f:c4:bc:5b:c9:a7:ab:9a:
b9:15:b3:cc:0e:9f:34:7b:fc:79:af:d5:25:80:ee:
4f:4a:c9:92:14:3e:ca:f9:3d:15:c5:ad:05:8c:fc:
39:42:fb:4b:ee:6e:0c:a2:ea:a0:55:71:3f:0d:7e:
a1:2d:ee:a8:73:a5:11:d5:9d:73:27:ef:ee:18:38:
9a:b9:d1:96:78:ea:b2:13:80:34:93:82:91:66:75:
69:53:f4:56:27:df:cc:8d:c5:8d:9a:a1:de:8d:7a:
f6:34:d5:06:98:ad:bf:9d:38:9f:a7:19:0e:b7:cd:
8c:7d:05:3c:00:83:77:b4:16:a8:f1:60:08:b3:58:
68:ed:0b:8b:66:df:a2:ed:08:9f:bd:25:1f:39:7c:
50:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CC:ED:FE:B5:83:71:AF:C7:4F:9B:85:F0:79:E1:3C:01:DA:32:05
X509v3 Authority Key Identifier:
keyid:0D:CE:7E:26:AC:1D:E4:DE:6D:FF:75:AB:A0:04:A1:CF:CA:78:76:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cf:39:da:a7:10:93:bc:f5:17:86:ad:e7:52:63:02:68:3a:
54:f0:a8:21:aa:60:38:e3:13:ce:59:1c:af:70:c8:aa:6a:32:
d6:5d:ab:f9:88:d2:3d:5f:00:e8:89:05:1e:70:44:c5:95:b0:
d5:5e:f4:9f:32:7b:8a:d7:b2:ba:85:44:00:c4:e4:80:07:a3:
ef:8d:2e:99:cf:7f:1e:53:ab:d3:4b:7f:4a:91:b6:6c:61:b0:
3e:36:0b:47:3d:37:45:df:b4:cf:2e:4d:24:b8:48:b7:9d:65:
8b:71:f5:12:30:ae:ef:01:f7:9e:c8:92:70:e1:bd:76:af:a7:
4c:ef:45:97:f2:39:2f:28:cb:3c:7c:87:7a:c6:f2:10:ee:b8:
d6:ff:16:33:b3:05:2c:36:5b:3e:cc:f1:29:93:bf:93:93:34:
a2:a8:85:12:ec:06:6b:75:58:ca:db:85:c2:f8:c3:90:00:c0:
71:79:71:ab:21:26:7a:0d:88:5c:1e:16:72:6b:a3:99:84:96:
94:0a:d0:95:ca:a8:da:d0:eb:e5:e5:94:53:33:dc:4f:05:3c:
b0:12:68:20:7d:59:8d:b0:e2:9f:6b:d4:f3:a9:12:64:67:80:
4e:08:67:38:3f:b2:11:09:d7:38:82:2a:95:53:0d:9b:91:88:
5a:fd:c5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:58 2026 by rpki-client