Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
File: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft (raw, json)
Hash identifier: SIpCF5/dRREJxE9i6W0BAdP2i33k0K8xx7hKebVzPJY=
Subject key identifier: 88:17:3B:FC:98:66:68:89:3D:DC:4A:C3:09:39:03:03:3F:6E:E0:DA
Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Certificate serial: 01A140837A666E3BE354937DA47C670C96E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
Manifest number: 1AB0
Signing time: Thu 15 Oct 2026 17:02:00 +0000
Manifest this update: Thu 15 Oct 2026 17:02:00 +0000
Manifest next update: Fri 16 Oct 2026 17:02:00 +0000
Files and hashes: 1: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl (hash: SjZRPcdKYf/cMhaW6gZnjmY3WYBWfiKKB3/oFmicMYU=)
2: cpsQ77OzLwJn-kkqI49ptf6eVZA.roa (hash: +pkHzBiaRBE1eKUvWfMlmAeFAbIT6EkYeML4Nh3pCm0=)
3: jep-7aYtEfab_WIlqXn5chr3Or4.roa (hash: TnIyAfIe+wdHdRGN4Ts6bBZJrV39Tpq22CeFLNqBbQ0=)
4: uxoBX2tmeZVjQ29keitWoq9xUoQ.roa (hash: 1gcoMG0xFgjZ/0XZ2WNsJIV6br76evfUP3Uy2y4mCNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:7a:66:6e:3b:e3:54:93:7d:a4:7c:67:0c:96:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Validity
Not Before: Oct 15 17:02:00 2026 GMT
Not After : Oct 16 17:02:00 2026 GMT
Subject: CN=88173bfc986668893ddc4ac3093903033f6ee0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:c5:79:2b:9a:b9:b6:f1:c2:54:76:d0:d1:
e2:1b:e9:d0:71:bc:92:fa:3f:8b:29:5a:1b:cd:d3:
11:c4:a8:79:72:cf:ac:a3:96:8f:5e:e4:32:99:32:
a5:de:ef:94:3d:69:5e:9b:2b:ec:e7:4e:da:be:41:
6b:36:0a:4e:b5:1a:f7:38:c9:ba:e6:a1:3f:e4:af:
24:b2:eb:e2:d4:77:f8:87:1a:48:34:56:d8:a0:a7:
b9:c4:a6:cb:9a:d4:73:49:c5:5c:06:18:2d:5e:04:
9d:6a:3a:23:d1:f7:d2:a3:04:33:76:ab:5e:65:ba:
57:fc:67:75:63:00:55:3c:5e:6f:fa:a8:d2:40:d4:
e7:f6:a3:39:00:b9:06:05:b3:c0:68:21:83:03:54:
0b:cf:8b:f5:5f:77:fe:34:e9:41:49:b8:8e:9b:d3:
0c:2f:8c:86:d1:43:54:92:79:18:ed:bc:40:21:db:
48:ba:72:f6:86:1f:18:28:80:de:6c:b8:2f:43:db:
19:a6:d8:a9:7c:db:96:af:ce:7f:55:fb:d1:2d:67:
1f:ca:12:24:ce:13:9d:9c:82:cf:03:67:92:44:9d:
cb:35:a0:69:06:62:40:8d:78:c1:11:61:6f:af:e6:
43:4d:30:f2:57:e5:f6:32:8c:5d:c9:c5:1b:f2:03:
d1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:17:3B:FC:98:66:68:89:3D:DC:4A:C3:09:39:03:03:3F:6E:E0:DA
X509v3 Authority Key Identifier:
keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:25:80:83:35:4e:23:4e:c7:f4:7d:28:a4:12:ac:82:57:31:
5e:ad:e8:85:7d:c9:a1:73:c8:9e:96:10:88:8f:f0:4b:13:d3:
8b:b3:8f:cd:70:25:3f:2f:20:c5:39:1e:cc:06:a4:14:81:c3:
e3:e2:0d:77:c0:37:54:0e:1a:08:f5:f4:b2:75:3b:50:d1:78:
77:cb:ad:9b:64:1f:f4:f2:0b:89:bf:6a:f7:7d:c7:0c:f7:59:
f5:d9:81:80:7b:e4:7a:a4:42:c6:ec:75:59:35:8a:e6:02:96:
4e:a9:2c:0e:f9:de:e5:5b:a9:50:41:89:c3:93:9f:78:2b:0e:
70:ff:0c:fb:11:5c:a8:ca:91:44:7b:4f:30:ba:5d:82:ba:15:
0a:74:20:81:53:52:4f:31:9e:b4:67:22:9a:1f:0b:9c:99:0d:
1d:8d:c9:dc:39:31:68:d4:69:eb:d9:fe:5f:c0:61:cb:8e:b1:
7f:35:7a:0b:1a:e9:38:06:13:d7:3e:9d:c8:49:b6:d7:7c:ca:
e3:88:09:8f:4a:15:73:c2:c3:b9:98:9d:45:1e:48:cb:64:a6:
d8:07:59:da:ef:20:bd:f4:d7:37:1a:26:12:82:41:54:61:41:
bb:b7:9c:13:8f:d1:34:c2:df:ec:3f:82:c0:8f:1f:a8:30:70:
92:16:f5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:02:21 2026 by rpki-client