Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier: BBuR/ldn5O7OB6S/7XWGDb9xRzNBJd7WcApxzcDmF+Y=
Subject key identifier: 8C:C8:D4:05:0A:CA:8E:32:D5:9E:38:F9:6A:53:09:79:92:EB:CD:32
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 01A06EDE9EC4B716683C22F99D185350909C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number: 116A
Signing time: Sat 05 Sep 2026 00:01:18 +0000
Manifest this update: Sat 05 Sep 2026 00:01:18 +0000
Manifest next update: Sun 06 Sep 2026 00:01:18 +0000
Files and hashes: 1: 5sITtlNKM7t60210AUBp_MNFelY.roa (hash: WCuNMPZvNV2cZDWHYzBYLEsyLHu/NPxJGgRX6UeNesQ=)
2: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: qnVsV8JBPz/fc1NZT0QqdW+ijNtxmYWYjNBcuPWoK2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:9e:c4:b7:16:68:3c:22:f9:9d:18:53:50:90:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: Sep 5 00:01:18 2026 GMT
Not After : Sep 6 00:01:18 2026 GMT
Subject: CN=8cc8d4050aca8e32d59e38f96a53097992ebcd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:db:7a:25:50:9f:74:c0:37:93:88:3f:f1:
b7:b7:7e:c9:c2:6c:86:c4:fa:e7:a8:ad:e0:ad:f2:
44:8c:d1:8f:c7:10:d0:21:66:18:fd:75:c4:f4:30:
55:f2:41:ba:b3:ca:15:bc:1c:c8:48:e3:09:b4:39:
c7:f4:b4:94:aa:69:35:ac:85:d6:64:4a:62:27:2a:
15:b5:ec:85:b2:da:57:23:df:85:07:a8:ba:3d:40:
b7:55:a4:94:eb:fc:cf:da:79:e2:f6:9d:a2:60:87:
5d:07:c4:de:d2:b3:bb:57:4b:66:14:8d:7c:ed:b5:
83:f3:d3:41:55:ce:ae:ae:74:5e:32:ff:1c:e7:a6:
c9:62:db:f3:a3:69:4a:ef:66:2e:f5:dc:15:27:b3:
70:11:60:2e:32:95:6b:3a:fc:f0:a9:84:d4:19:65:
82:d4:41:f7:9c:18:cc:ad:3a:73:2f:1a:80:0c:e6:
45:72:29:69:36:bd:36:04:3f:25:71:13:31:25:68:
c4:07:03:52:8d:02:61:81:da:44:3b:5f:03:8e:d9:
a5:78:cd:a6:56:b0:49:c1:13:50:90:72:49:2b:b3:
85:62:87:b7:30:51:04:aa:86:7c:68:39:2a:b3:c0:
d9:91:80:94:bc:0f:2a:b7:4b:ae:d0:97:89:f8:e1:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C8:D4:05:0A:CA:8E:32:D5:9E:38:F9:6A:53:09:79:92:EB:CD:32
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7d:b8:7d:fb:8f:7d:64:45:de:0c:aa:10:67:f0:fb:9f:f4:
77:7d:be:39:3b:b1:f2:be:25:c4:80:e3:80:06:7d:a9:37:97:
33:7c:e7:a1:ff:d8:1f:02:fd:1f:4e:3f:39:99:3e:88:78:5f:
e3:2e:05:a4:d1:5a:21:63:7b:cd:d7:e8:52:23:20:94:e9:5f:
17:dd:5d:bc:4b:58:7c:af:87:ba:bc:c6:54:a0:c9:81:85:46:
84:20:66:da:1f:8a:c2:92:df:39:e4:49:35:18:8d:23:ba:2c:
ac:68:9a:67:e0:d2:c2:fe:69:3a:ed:01:0b:f8:6f:d4:ef:95:
02:5f:a2:2f:60:84:53:7d:3d:84:77:b6:3a:ff:d9:e5:8b:6a:
8c:fe:e5:d0:a1:95:03:8b:5a:28:e1:03:cc:cd:6e:ec:80:77:
15:36:db:7f:de:f5:0b:72:97:58:88:50:02:11:c2:c1:1f:17:
bc:e8:30:05:1b:4d:6b:b1:2a:92:81:58:cf:d9:43:53:66:c3:
1e:f0:87:72:8c:10:fc:b8:07:eb:ed:20:68:49:61:ed:02:37:
0e:8d:83:01:05:86:46:e3:d8:9f:9e:f8:a3:a8:a0:e2:6b:26:
4a:48:c4:d2:de:87:b2:2f:c8:0d:2a:bf:c0:1d:17:f8:3f:f3:
5a:d3:c6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:01:45 2026 by rpki-client