Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json)
Hash identifier: NW0fEKqenCODR85jA8dNsBbiMip9M7MYJiSAhgOOulA=
Subject key identifier: AC:65:F3:D6:65:4D:06:36:FB:32:26:D5:4B:DB:36:50:E7:78:39:2A
Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Certificate serial: 01A1084B17C3C12DC8DB448C5C003A82F64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
Manifest number: 197A
Signing time: Sun 04 Oct 2026 19:01:41 +0000
Manifest this update: Sun 04 Oct 2026 19:01:41 +0000
Manifest next update: Mon 05 Oct 2026 19:01:41 +0000
Files and hashes: 1: 2lfnmN1-dLZH09vmQWL0x_KLc8Y.roa (hash: JmmqwM4dV5ZCDyqAq/Au9vdb5ogccNfE+4IrV1SqD54=)
2: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: NSqp84F1ouMNhRAD77a5nWe+BAKu4C3i6brWUAQbqHM=)
3: cpBLfVVbG2Bg4TA77UzT5VjhgRE.roa (hash: N0d6jFAymHdRViLXYwxHMPIvLpjH51TdzFY5Ek5D56g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:4b:17:c3:c1:2d:c8:db:44:8c:5c:00:3a:82:f6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Validity
Not Before: Oct 4 19:01:41 2026 GMT
Not After : Oct 5 19:01:41 2026 GMT
Subject: CN=ac65f3d6654d0636fb3226d54bdb3650e778392a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:01:40:f4:fc:17:13:a0:67:41:a2:ab:f5:
3b:4b:2f:95:17:b1:ff:a0:ab:bf:67:a8:87:31:b0:
72:da:10:e9:8e:90:65:d9:41:d2:92:a9:f4:d2:b6:
3d:11:b4:58:3a:53:f7:1b:a2:57:10:5e:93:dd:fd:
5f:fc:1c:9a:53:76:ad:a2:83:9c:7b:10:37:53:b8:
7b:77:1e:87:33:75:76:88:ce:66:2b:08:98:67:8a:
1c:17:b4:63:16:48:aa:f7:45:5a:a3:8b:8e:e9:a8:
56:7a:11:31:33:67:ad:61:7b:d2:6d:24:03:fb:40:
70:b2:b6:0b:ad:a7:8e:41:6b:16:2a:92:09:30:d7:
19:36:29:74:b3:d8:4e:68:99:f1:e3:94:51:13:30:
92:47:aa:25:12:70:89:44:73:2c:3c:2c:d2:f0:bc:
ea:e9:b1:8a:5f:88:c2:9a:eb:b7:64:03:a8:64:00:
67:79:b3:21:e9:20:a1:e8:d1:a0:ef:58:f5:11:b5:
31:84:cf:b7:4b:33:c5:67:62:04:41:c2:e2:ad:ff:
99:1d:c3:45:bf:ea:84:79:a6:99:59:89:14:c2:bd:
a3:cf:43:45:8e:b4:b5:b9:96:db:32:97:15:89:25:
e8:b7:0c:a3:66:d2:51:79:1e:11:4b:70:3e:fc:34:
19:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:65:F3:D6:65:4D:06:36:FB:32:26:D5:4B:DB:36:50:E7:78:39:2A
X509v3 Authority Key Identifier:
keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:5b:86:9c:e5:b2:7e:33:31:89:87:38:34:d2:a0:4e:c7:a7:
67:27:f9:0d:ce:9b:87:59:a5:65:ec:44:36:5b:ee:0d:1c:82:
9e:ce:3f:25:97:a7:c2:97:a3:6f:56:0e:d7:ab:ba:2c:16:29:
41:a3:be:79:a5:13:cb:5d:f2:d6:ba:aa:7e:ec:fc:62:ef:25:
8c:35:52:65:bc:b1:cb:0b:02:fb:62:8a:b7:52:ef:e2:a6:0d:
52:75:64:08:dd:d1:1b:11:3b:96:0b:33:ee:fb:39:d6:0b:75:
6f:73:08:95:6c:53:70:3c:c3:68:77:c7:cd:fd:61:81:50:55:
b5:c2:a7:1c:f7:b5:6d:8e:31:e3:59:29:f4:26:6d:a9:ab:2f:
f6:19:ff:48:bd:22:cf:dc:c5:94:7f:86:e0:8f:d2:21:99:a5:
f2:33:da:1e:c4:62:ba:1c:05:03:b5:4d:9d:6a:6c:34:6a:61:
fd:27:2d:2d:43:5e:a3:e9:b8:45:fa:1f:9b:bf:70:b4:3c:84:
1b:39:5a:26:31:f1:20:f0:93:ba:7f:6f:7e:52:cb:e0:f6:b3:
9c:ba:9b:4b:8d:2f:bc:43:9b:bf:65:f1:0b:c3:e0:a6:3d:91:
19:6e:64:c5:b3:ae:18:fa:bd:c3:f8:4b:4f:14:a0:90:6d:61:
33:5c:74:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:08:52 2026 by rpki-client