Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
File: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft (raw, json)
Hash identifier: l0+e+9s4NzbMIc+iTXVgxycGLp3bziKzb6NIvOjFK3U=
Subject key identifier: 3B:C7:D8:38:69:B0:E1:D0:AB:12:4D:B0:39:FB:AC:E0:37:C4:FB:7E
Authority key identifier: 0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
Certificate issuer: /CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Certificate serial: 01A17ADF43C19B25983086BC1C81F19DB8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
Manifest number: 1973
Signing time: Tue 27 Oct 2026 01:00:14 +0000
Manifest this update: Tue 27 Oct 2026 01:00:14 +0000
Manifest next update: Wed 28 Oct 2026 01:00:14 +0000
Files and hashes: 1: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl (hash: dhyAPzVxCVm3YeYfSwZw6csNJoz6W4/+2R0kY7BDQOs=)
2: vOLYbuZI2HiAQAMspaYJozGTYd4.roa (hash: 2GBF+iOAjgmkpYWuKiOs1PlAzGgzPUynmOp5R9AhrOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:43:c1:9b:25:98:30:86:bc:1c:81:f1:9d:b8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Validity
Not Before: Oct 27 01:00:14 2026 GMT
Not After : Oct 28 01:00:14 2026 GMT
Subject: CN=3bc7d83869b0e1d0ab124db039fbace037c4fb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f2:f5:c8:f5:5e:85:a6:e8:ab:ec:08:38:a3:
20:33:e0:76:22:2b:da:62:5c:83:99:bf:78:5a:c4:
6c:30:a9:a3:e1:28:d6:e4:44:56:88:b1:94:38:d3:
26:1d:53:4b:46:4a:af:98:e0:cc:10:16:6e:07:a9:
c5:ea:0e:d6:a2:6e:2a:12:67:6d:77:6c:86:77:37:
20:c6:91:e2:06:88:30:45:c5:d7:71:2d:f6:24:93:
c3:18:23:79:4d:bd:dd:80:10:5f:e9:a7:79:ba:b9:
da:d1:db:d0:64:b7:c4:54:ae:91:5a:ab:69:46:06:
46:a1:23:40:44:ac:fc:93:15:e3:56:a9:bf:d1:a7:
bc:71:0c:f6:92:25:86:71:6e:e4:58:ca:ea:15:dd:
e6:0c:6c:cc:1a:98:7f:e6:02:88:90:ca:52:42:97:
10:46:b5:92:34:84:75:ce:b8:ff:11:df:0e:0c:f4:
49:8d:27:75:1b:5b:f8:46:52:58:57:f0:cc:a0:17:
bf:76:1f:5b:11:91:a5:68:42:70:40:21:36:a4:73:
a2:d4:f1:8a:3d:b8:6f:76:ff:fd:5b:41:d7:4e:07:
c3:8b:39:0f:4e:c2:38:34:de:c6:d8:6f:b2:55:17:
f6:99:61:df:5b:2f:fa:82:35:e2:58:f7:81:3c:1f:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C7:D8:38:69:B0:E1:D0:AB:12:4D:B0:39:FB:AC:E0:37:C4:FB:7E
X509v3 Authority Key Identifier:
keyid:0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:09:23:5b:54:9c:48:29:91:9e:f2:25:e3:33:0e:a2:69:a4:
af:50:a8:4f:eb:85:39:49:cb:f4:52:99:d4:05:1a:a9:30:8b:
05:1d:57:15:7e:39:b2:cf:4c:2b:00:cb:5c:9b:16:c0:d0:41:
47:b2:12:b2:a0:cc:e5:29:ad:97:4d:6f:45:b8:6a:42:bd:16:
5b:e5:9f:3f:12:22:c7:71:7c:f9:8a:44:fd:d7:18:59:4d:da:
30:79:48:c3:3b:58:3e:3e:98:e6:d4:52:12:36:e7:27:41:d5:
5c:04:ac:41:c5:ba:68:b4:6b:d2:93:f4:a1:da:4e:5d:d4:e1:
4b:f2:05:ab:4f:ea:52:cd:1e:5d:b1:9d:a2:f9:bf:46:d5:05:
7a:12:30:bf:52:17:4e:22:13:16:bf:fe:61:cd:32:93:b4:f3:
b5:e4:fa:94:0c:d8:e6:92:63:6a:b4:74:62:42:e3:83:b0:45:
93:97:3d:26:ad:6e:6b:4c:bb:74:95:e7:ee:8d:e3:a1:2b:8a:
8a:25:01:39:8a:6f:0c:f5:b4:45:d4:88:ef:67:84:2c:53:99:
32:ad:11:ac:84:3b:67:ae:44:21:ff:4a:cd:bf:a7:3d:40:5f:
6b:4a:5f:67:a6:62:48:e4:04:78:57:f7:26:94:74:72:4b:90:
70:2b:ed:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:41:28 2026 by rpki-client