Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
File: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft (raw, json)
Hash identifier: UeiiYRhhduSQC4VRAEw8Qu5CQJMSABlIYYRmOLplnbM=
Subject key identifier: 1A:7B:50:A5:B9:AE:DD:E0:28:7E:FE:AB:40:8D:D0:42:2D:97:7C:D5
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial: 01A13DB844DC47A17C52EDA10B876F804179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 04:00:48 +0000
Manifest this update: Thu 15 Oct 2026 04:00:48 +0000
Manifest next update: Fri 16 Oct 2026 04:00:48 +0000
Files and hashes: 1: 4e7ahtukuDD9v0DBSPR_moHY4zI.roa (hash: c9S2a0s4aMrl9rYn1z2bRbzkVr+5WcdFQcYn2M/ymYE=)
2: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl (hash: fYa4uw3MZ+QB8v1C0ahMc3lS2dQy1q+arRiToSc5dk8=)
3: ryJYRRktlXHgBSVR5cvg8fyHDeM.roa (hash: WOEZWIHK7L7jVpd5u3Y2JfH4hWkoWnXMkfyztKy8m4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:44:dc:47:a1:7c:52:ed:a1:0b:87:6f:80:41:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Validity
Not Before: Oct 15 04:00:48 2026 GMT
Not After : Oct 16 04:00:48 2026 GMT
Subject: CN=1a7b50a5b9aedde0287efeab408dd0422d977cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:82:73:36:78:1a:f2:39:9f:12:14:b4:93:
1a:49:f2:c4:81:fe:b1:9f:f3:ec:62:32:9b:e0:4d:
55:64:15:60:cc:26:27:b6:17:26:fc:2d:28:7b:0c:
3d:e4:12:bd:ac:71:ba:d5:4f:f0:41:6c:94:bf:bc:
73:e5:ee:3c:8b:ef:95:5f:60:66:fe:11:09:80:97:
20:9e:30:21:37:fd:bd:72:6b:25:60:e5:81:c8:1d:
ec:d3:81:34:27:49:78:00:73:a5:86:3e:31:c7:0c:
e0:b2:31:b5:10:0f:c1:4c:c4:a0:58:2e:18:de:61:
da:0c:7b:10:d9:61:01:6f:3d:9f:68:39:2e:57:b2:
92:57:af:b1:76:19:5e:56:34:82:d8:6a:81:86:a6:
60:c7:b7:62:18:e3:34:c0:86:94:4f:8d:21:e4:9b:
ca:51:6e:92:36:2c:73:95:13:a9:b6:f2:5a:99:af:
31:70:ab:93:19:07:69:8f:cf:79:e0:d9:9d:72:16:
1d:5c:51:9e:19:37:85:06:21:d7:39:70:57:7e:69:
59:a3:8f:c8:13:7e:24:e8:80:18:a5:9e:2e:c1:6a:
e7:cd:49:78:4d:6e:21:ed:65:8b:ba:b3:b1:ed:5f:
38:0f:15:ca:08:14:c6:52:e9:4d:c8:86:ca:89:7e:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7B:50:A5:B9:AE:DD:E0:28:7E:FE:AB:40:8D:D0:42:2D:97:7C:D5
X509v3 Authority Key Identifier:
keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:16:e4:da:65:c4:71:e0:68:76:18:29:a4:65:77:86:4f:78:
32:31:53:d5:48:44:07:6c:9c:88:36:1c:32:f6:1f:d4:68:98:
20:f7:14:44:bc:56:86:92:15:37:4a:30:f4:d6:2b:38:6e:64:
77:1e:cf:58:65:52:fc:bd:0a:68:56:27:2e:5a:f4:37:6f:b0:
b7:d3:70:a2:01:cb:92:aa:ac:96:a1:ab:0d:ae:05:c4:e3:2b:
86:6a:01:38:f7:8e:33:56:a9:78:40:f3:99:74:4b:91:c0:13:
e9:8f:43:b7:81:cf:f0:aa:f9:6f:13:6e:f8:2d:2f:01:07:0c:
74:89:6a:90:01:03:de:58:e9:86:a7:40:8e:28:b1:04:1e:e1:
1d:3b:34:95:cd:60:f7:73:b7:85:a2:b6:ea:9a:28:5a:fb:41:
e7:48:19:a6:54:0d:4d:79:53:f4:c2:27:9c:da:3c:8d:86:7f:
33:bb:6a:6d:d3:76:26:da:1b:ec:fc:4c:e8:b4:4a:d7:25:ed:
ec:bd:03:fb:7b:36:74:82:fb:19:a5:d6:bd:ab:58:63:8a:fe:
d8:4e:d8:ae:9f:1c:24:3a:ed:7a:50:d5:f7:9e:1b:e8:6e:fc:
94:2e:93:9a:3d:ab:88:98:9c:81:48:8d:06:34:b0:8f:99:65:
da:c5:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:11 2026 by rpki-client