Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: ICF5Eg44IRjz5WP5t6xzvEu1EgQVjNLiMwNozk9NKUY=
Subject key identifier: 7C:94:EC:CD:00:97:10:1E:EA:9A:42:12:4F:F3:3A:3A:FB:D7:16:0F
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01A06E712DD675581A1C55AFE639615FA8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 1ABD
Signing time: Fri 04 Sep 2026 22:01:46 +0000
Manifest this update: Fri 04 Sep 2026 22:01:46 +0000
Manifest next update: Sat 05 Sep 2026 22:01:46 +0000
Files and hashes: 1: aTug7YNO613h0EdhaVanobAofs4.roa (hash: JO+eAjDs3aZGB9gkmGCHWKFzmsIX3/pwIhE/HLe+REE=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: WzMYybikbaDcVjUIDLH0bIl8NQu4cX5ITLFkMIXbBq4=)
3: tZk_CaKCryAvJRReN7aPc9CJl5Q.roa (hash: GDF5SYSr5M1uY12BBc2vpgU4RwEGW3L9n697ONqnZ8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:71:2d:d6:75:58:1a:1c:55:af:e6:39:61:5f:a8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Sep 4 22:01:46 2026 GMT
Not After : Sep 5 22:01:46 2026 GMT
Subject: CN=7c94eccd0097101eea9a42124ff33a3afbd7160f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f6:09:73:d5:a6:a7:3b:78:20:d0:a5:9d:ca:
c6:48:77:a6:30:9e:fc:9f:db:78:dd:66:8e:66:16:
6c:e4:11:f7:23:a0:9b:90:be:45:55:b5:b1:e4:e0:
79:b8:49:e2:72:35:67:28:87:bb:c8:27:a1:7b:e1:
77:d4:e5:3c:cb:f1:11:80:93:4c:c0:b6:f5:20:a5:
0e:6c:3a:a6:a6:90:55:f3:52:2d:90:5c:f4:58:cc:
01:0e:ff:4a:79:48:ed:18:b4:f1:ee:2c:d9:11:e2:
d4:08:94:24:60:09:ab:9f:75:d4:75:87:c8:4a:92:
b8:4a:43:1f:ad:c5:cf:52:2f:57:37:95:69:29:9b:
a7:5d:d5:f5:30:a8:c9:12:56:a3:e9:b8:00:00:0d:
1e:62:48:d8:25:cb:6a:ea:9f:ca:58:e7:eb:40:b3:
b6:f1:77:b0:66:1f:1d:61:50:5a:f9:84:2a:9d:f7:
33:7f:9e:85:d2:28:ad:5c:65:cf:6e:fa:61:3c:76:
fd:01:c6:59:e2:57:93:00:15:c3:6d:d2:95:dd:4c:
41:77:d2:2c:e9:32:ed:c9:c9:1f:38:e8:52:cf:db:
8b:eb:28:8d:15:2b:34:f9:95:b5:f8:45:f9:12:b3:
41:be:07:1e:80:11:c5:c5:5f:03:32:21:e8:9d:e1:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:94:EC:CD:00:97:10:1E:EA:9A:42:12:4F:F3:3A:3A:FB:D7:16:0F
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:db:2a:d9:cf:e5:b0:09:bb:36:77:0d:79:e8:1c:4c:f7:22:
c1:4c:ea:92:bc:49:49:c4:ee:3f:56:aa:c8:5d:ad:de:9a:f2:
02:c3:b2:74:9b:1b:8c:0b:32:de:1f:57:5c:7b:0d:0d:d3:64:
e2:37:f8:75:72:23:8b:68:fd:8e:8c:b4:cd:e2:71:c1:59:36:
8d:67:4b:55:c8:68:54:f9:9f:cc:60:70:10:aa:f7:ce:bb:b8:
5f:4a:c6:5e:78:4e:8d:0c:3b:1c:ee:3e:89:e9:5f:02:fb:26:
a5:aa:ef:94:8c:d7:7c:fa:a8:7f:75:fd:bc:ff:d1:67:d2:41:
60:57:38:c7:9f:dc:03:44:c4:68:88:3c:ff:07:53:8f:07:e4:
3e:2c:e8:90:0b:f2:12:e6:62:ae:e0:d7:e8:ae:ec:80:2c:eb:
1f:83:d1:51:75:d8:81:74:bf:df:8c:d3:70:14:d5:9f:c5:ff:
8a:90:da:f0:67:01:5b:a8:f5:be:a1:1a:99:1c:be:ce:83:49:
83:8e:ee:40:99:35:d2:a1:2c:77:9b:63:f2:02:b0:cc:2e:d7:
7c:51:62:1f:a3:45:e7:08:65:9e:78:53:2c:ff:f5:f1:89:7c:
ae:0d:c0:1f:82:91:92:70:a8:6c:86:d0:c6:b5:52:17:ba:6e:
fe:e5:77:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:34:12 2026 by rpki-client