Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
File: Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json)
Hash identifier: FOrboO5mZ7+Dvw+dYkZ/kLqJdUy4jcqofPwg5YuWz4s=
Subject key identifier: E1:2D:EE:95:12:8D:F9:97:5D:AF:93:3D:0D:61:82:74:D5:E0:D3:4F
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 01A0E7AE6D510AB5A611C8BE7517C7C9EA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
Manifest number: 1A75
Signing time: Mon 28 Sep 2026 11:02:43 +0000
Manifest this update: Mon 28 Sep 2026 11:02:43 +0000
Manifest next update: Tue 29 Sep 2026 11:02:43 +0000
Files and hashes: 1: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: DGNYNPKuWRqZHk6qYHZtJMl1rs5OOgSYjZaNmB/RMLY=)
2: ZJrKYNVeNIz0VYlhoJzi7d7m2vA.roa (hash: EFqLQnOjEFl37vCVsoiCRywmssmLRwolJfsBoc/u7Qg=)
3: hXlpXaM1pFmksY1FpbebpRbEl-Q.roa (hash: Lw896zRP/JglXDT61QeSjgmUxl+Qailc29oqIkIXseQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:6d:51:0a:b5:a6:11:c8:be:75:17:c7:c9:ea:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Sep 28 11:02:43 2026 GMT
Not After : Sep 29 11:02:43 2026 GMT
Subject: CN=e12dee95128df9975daf933d0d618274d5e0d34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:0d:37:4d:4e:04:67:93:c0:07:5f:38:8c:
72:78:50:8d:f0:9c:85:d6:19:51:ae:ed:28:98:33:
a3:8f:0d:58:96:e6:91:80:97:f3:32:66:fd:68:3f:
ee:cf:6a:c2:5c:06:fd:f7:3f:fe:a6:5f:24:c0:8d:
34:f3:32:8a:75:05:23:e9:cb:15:39:2a:7a:2c:00:
22:a9:40:fb:1a:48:4b:2d:62:8a:b7:08:9b:5b:33:
20:c6:87:b3:fd:e0:46:b7:c7:9d:ca:c4:60:d6:8b:
e8:8f:05:0c:0f:f1:b4:0e:8e:c1:3a:0c:e8:fc:2a:
ba:aa:1a:fd:bb:32:ad:74:d8:6f:64:62:47:cd:8a:
11:18:c9:cd:01:22:6d:6f:b7:0e:04:fb:ff:bd:74:
27:96:5d:5e:2f:be:2b:ea:aa:9f:ec:ad:c3:5c:da:
85:a6:a9:42:43:51:fb:fd:36:6c:c9:ed:65:68:27:
a6:50:ed:ef:86:5b:40:41:db:0a:bf:04:65:19:9a:
b8:4f:de:d2:f0:fd:a6:df:6e:f5:8b:64:98:1f:17:
37:b1:3c:16:f9:b4:fb:33:af:6f:23:cc:c4:5f:3b:
31:20:c3:17:cc:32:8e:08:c4:17:67:b1:75:ed:87:
76:be:47:0a:2c:40:de:88:db:71:17:4d:df:91:dd:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2D:EE:95:12:8D:F9:97:5D:AF:93:3D:0D:61:82:74:D5:E0:D3:4F
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:fa:4b:22:85:08:43:25:1a:fb:47:ed:c8:bd:7e:07:b8:7c:
28:1b:6f:59:ab:b0:7a:44:42:bc:33:0b:53:c3:5d:da:69:89:
e6:ff:70:e8:e2:b8:a0:56:93:69:7e:f8:53:be:4c:d7:b1:7e:
c7:ce:d3:90:0e:85:87:48:77:b5:b4:9a:f9:b0:29:1a:0d:3b:
85:95:f3:08:ea:88:bd:79:bc:2f:ce:45:47:20:cc:df:a1:f3:
9c:11:70:49:61:09:7e:3f:9a:f0:07:74:41:d2:dc:ad:85:29:
ea:0c:38:1a:2e:ab:e1:0e:88:1d:63:6b:bc:d5:ff:35:35:b5:
16:46:38:b2:56:b5:c8:a3:6a:01:7a:de:14:98:d7:1d:70:11:
a1:ff:61:f8:51:2f:bb:79:cb:d0:73:51:64:b6:38:da:6a:2e:
7a:bc:95:6f:7e:f3:e5:72:b1:70:e2:76:7d:ca:10:73:85:e5:
15:e4:a5:0b:a1:15:26:77:67:11:7c:83:8c:ee:fd:0c:18:a4:
82:9e:a0:b3:8b:77:f7:cc:54:1e:5f:30:ce:bd:9a:38:c5:ed:
98:83:e9:7d:e3:c7:49:55:b4:57:b4:c4:ec:8d:82:d1:0a:17:
2e:87:73:7b:58:34:a9:9c:05:92:56:ee:29:66:ff:aa:60:4d:
cd:75:b3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:33:08 2026 by rpki-client