
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier: KFcsBYfrKhTM2BVLVtFDmdltjgXCvGuE8vO0kP8SKTw=
Subject key identifier: A6:69:A0:22:82:15:F0:42:28:BB:4C:60:87:A7:32:D0:AA:A5:A5:71
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial: 01A14729514429A908F078CA743625685F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number: 1AAD
Signing time: Sat 17 Oct 2026 00:00:52 +0000
Manifest this update: Sat 17 Oct 2026 00:00:52 +0000
Manifest next update: Sun 18 Oct 2026 00:00:52 +0000
Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: 2W9hmI1HhtQW/NK4a9U89Y5VmPgMiGaGATuPSq6XsFQ=)
2: FzYYHJjZ1VyjrqmR6VyqdhmHs8I.roa (hash: A2gvDrWNnIIKvLZJlwmcHqXl0rLuVgpVjavbxPCN9B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:29:51:44:29:a9:08:f0:78:ca:74:36:25:68:5f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Validity
Not Before: Oct 17 00:00:52 2026 GMT
Not After : Oct 18 00:00:52 2026 GMT
Subject: CN=a669a0228215f04228bb4c6087a732d0aaa5a571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:84:b1:5e:f3:0b:74:9c:84:fb:f9:49:2f:
1c:73:13:d1:66:b2:7e:9d:90:5f:44:c1:3d:4a:24:
07:0f:6d:f0:28:91:3b:46:f2:7f:f8:61:01:a8:d8:
71:29:f9:1e:d0:c8:d1:6c:4e:58:58:e0:93:06:61:
80:f4:50:9b:93:88:1c:e6:e7:0c:66:a2:dd:91:54:
19:36:39:20:03:97:fd:53:54:12:f8:cd:70:17:6b:
d8:68:29:79:6f:17:cb:ad:e5:06:d6:2d:49:85:71:
29:52:8b:12:8e:5e:c0:33:0d:b7:3c:ae:30:9c:bd:
ab:64:2a:78:15:2a:13:c2:b4:cd:b4:f7:ca:81:ec:
6e:44:c6:8e:a3:96:66:2d:b1:08:c2:3d:af:07:b1:
71:45:cf:12:77:7b:86:7a:0a:14:bb:71:33:81:e0:
4d:1a:62:4c:4a:5f:37:f0:49:b1:27:b2:b0:6b:55:
37:5d:8f:fa:e7:05:f8:86:e0:fb:85:71:5f:61:b0:
aa:fd:fc:cb:59:fa:fc:96:c9:84:ba:7b:79:ec:bd:
d5:ba:47:b9:c4:f4:dd:49:64:b2:a1:f3:20:70:7c:
24:fa:3a:46:67:07:a5:74:b3:6e:61:a9:ae:20:88:
c8:f4:84:78:d2:22:f0:4d:02:58:58:9e:0a:0d:e3:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:69:A0:22:82:15:F0:42:28:BB:4C:60:87:A7:32:D0:AA:A5:A5:71
X509v3 Authority Key Identifier:
keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:87:50:b8:0f:de:ed:b6:57:c2:0e:09:00:a6:10:13:9c:bd:
6e:3b:5f:15:85:07:e5:98:a9:96:94:6e:d8:b5:5d:5f:02:0c:
48:de:d7:58:c2:3d:b6:ca:6c:09:a2:d4:d1:f0:93:a8:0e:c0:
cd:eb:cf:98:30:ad:0b:cd:10:fe:6c:13:c6:f0:13:26:5e:07:
c8:6f:db:d8:eb:bd:b4:bd:b7:2f:d5:29:b9:b3:b9:64:9b:b3:
35:b5:9e:3e:bc:fc:0b:c4:15:ef:54:ed:98:d1:8d:12:c0:e7:
44:d2:74:b5:da:78:80:5c:8e:90:57:11:7f:2d:6e:ae:a8:12:
bb:b3:53:67:d8:d4:0d:10:bb:6e:87:17:db:ea:ee:4f:72:cd:
94:c1:5f:34:48:f0:4e:87:95:98:aa:d7:e0:18:3a:c5:8d:2b:
1d:e2:03:d0:4b:c9:8e:6f:50:96:d5:64:25:85:9a:5a:36:bb:
b0:4c:58:51:b3:a2:29:a4:8e:8c:d5:0f:17:f0:69:05:a0:fa:
8d:1e:6f:4c:5f:34:13:9e:57:51:c5:ac:8b:34:25:07:8f:03:
b5:14:6d:bb:f1:b0:a1:b7:f0:42:76:3f:9e:e6:8d:6c:a5:32:
4a:f9:3d:f1:7c:73:23:ef:38:a7:2d:b0:20:94:96:5a:70:77:
43:05:c7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:54:22 2026 by rpki-client