Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier: xibaoxFBqYCmrAhg6WWvf0uyDTpAlawbsDoz3qxxNlU=
Subject key identifier: 26:14:CD:AC:E7:57:C0:7B:29:C2:63:8D:D7:5E:12:9E:AB:B5:AF:E7
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 01A171A61B72E222C3026BEA1A0B95D4C96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number: 11F0
Signing time: Sun 25 Oct 2026 06:01:13 +0000
Manifest this update: Sun 25 Oct 2026 06:01:13 +0000
Manifest next update: Mon 26 Oct 2026 06:01:13 +0000
Files and hashes: 1: 5sITtlNKM7t60210AUBp_MNFelY.roa (hash: WCuNMPZvNV2cZDWHYzBYLEsyLHu/NPxJGgRX6UeNesQ=)
2: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: w4mMO7Q0Inc+XW+OIyiEJP8geUdEKXdH5VvS3gDj7g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:a6:1b:72:e2:22:c3:02:6b:ea:1a:0b:95:d4:c9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: Oct 25 06:01:13 2026 GMT
Not After : Oct 26 06:01:13 2026 GMT
Subject: CN=2614cdace757c07b29c2638dd75e129eabb5afe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d7:1c:4d:d5:b8:dc:67:21:33:b0:52:e1:36:
32:21:b4:d2:71:30:e2:37:10:90:a7:98:85:98:4b:
5b:bf:f0:42:34:96:27:fb:e0:52:07:71:65:1c:16:
f5:2f:09:df:f1:82:b7:39:75:52:6f:69:eb:b6:1e:
89:cd:fa:f8:41:ea:b1:2d:61:ff:72:a1:a5:b0:d0:
4a:e8:75:27:c0:f6:b9:66:87:d5:6c:2e:e1:9f:88:
00:ad:f2:c6:d6:5f:12:5f:28:e5:4d:04:26:ab:5b:
d6:1c:d8:1f:d7:fd:d6:6f:95:d9:e3:86:91:68:2d:
47:06:36:32:62:69:72:8b:6a:74:46:11:6b:7f:7b:
da:93:70:46:06:8a:84:b2:0e:6e:ea:c7:6f:f0:4f:
6e:67:e0:c4:fe:b5:62:d2:5b:ad:fd:77:53:04:05:
b5:50:0f:a2:c2:dc:db:dc:e9:2e:cd:94:27:08:48:
cb:87:bb:71:4d:5a:9d:27:f5:21:fa:c1:04:4c:ee:
10:e8:a6:e7:bc:c9:f2:f2:1f:fb:db:32:79:ab:5b:
6d:28:2c:05:e0:72:e3:8f:fe:25:52:d6:ea:ca:45:
5b:93:20:9b:c7:6e:40:67:38:0c:e6:62:76:cc:40:
5c:ab:11:15:fd:c7:c5:86:f7:4e:fe:59:db:e1:ea:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:14:CD:AC:E7:57:C0:7B:29:C2:63:8D:D7:5E:12:9E:AB:B5:AF:E7
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a8:f2:33:b2:9c:f9:4c:83:b9:08:be:4e:9e:60:d1:02:54:
8c:b1:7b:d0:5b:a9:ea:cf:16:3c:01:be:2c:dd:01:dd:ee:9f:
eb:f4:41:db:37:b1:f6:14:03:22:0a:73:aa:cc:98:75:25:79:
e4:da:f7:a4:52:c2:ab:9a:37:f5:9b:d4:59:e6:39:30:77:bb:
6d:82:86:3a:0e:43:00:59:2a:e3:a5:94:99:4a:fa:31:d2:6a:
c1:0d:26:0b:e0:10:95:99:ae:d5:4d:f1:69:23:b3:3d:92:39:
4b:70:a2:cb:35:d1:6c:49:8b:18:1f:18:95:51:4e:94:4d:d0:
7b:78:00:cf:77:1d:1f:15:e5:cc:5f:19:04:19:ee:a5:b2:54:
de:8b:7e:01:b6:ca:4a:ad:e0:0f:47:7c:54:06:8a:fb:ee:78:
ae:6d:e5:b6:f9:df:99:b1:46:99:b0:d0:98:74:f1:c4:ed:7c:
1d:a5:37:b8:71:f1:25:df:90:35:be:2e:02:0e:cd:5f:60:dc:
22:8c:9c:a8:40:b9:86:55:48:8b:8e:36:6b:6d:82:be:e7:bf:
a7:15:24:b4:56:4f:1c:35:cb:56:73:a7:7c:ea:20:ee:fd:42:
8d:de:09:b6:fb:41:4b:cd:f5:aa:09:43:9d:35:1a:80:b1:09:
bf:94:3a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:21:40 2026 by rpki-client