Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File: dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier: lDm23Z8Jx2fdSuEB20j9D7EHSQMHbkQBm4hGLhZ+xz4=
Subject key identifier: 34:1B:ED:3C:B7:90:A6:5C:7D:E5:93:67:C1:7E:80:FC:F9:F8:68:81
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01A16156FFA95823DE21B6BFBF536975387B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number: 1B3B
Signing time: Thu 22 Oct 2026 02:00:53 +0000
Manifest this update: Thu 22 Oct 2026 02:00:53 +0000
Manifest next update: Fri 23 Oct 2026 02:00:53 +0000
Files and hashes: 1: HTJC2qZTBYDhGgfALmgUlKoz0kM.roa (hash: Vg72KYq8FpDkXlgW/uLekPa+EBrW49AgOGqNznkZa4Y=)
2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: IubPm1IWVPkWuQ3WZlJCBPuH/u61MDvUQYoexR/2Qjg=)
3: tZk_CaKCryAvJRReN7aPc9CJl5Q.roa (hash: GDF5SYSr5M1uY12BBc2vpgU4RwEGW3L9n697ONqnZ8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:56:ff:a9:58:23:de:21:b6:bf:bf:53:69:75:38:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Oct 22 02:00:53 2026 GMT
Not After : Oct 23 02:00:53 2026 GMT
Subject: CN=341bed3cb790a65c7de59367c17e80fcf9f86881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:05:0d:70:a7:f6:8b:38:51:aa:c2:9d:6d:
10:51:71:7a:27:ca:77:8c:29:fb:f0:08:13:ef:60:
79:b8:ae:f7:46:ca:4f:dc:79:38:20:cb:1b:a4:92:
81:f8:4f:35:23:68:2a:e9:dd:df:c2:63:34:91:fe:
c4:7e:9c:f1:6e:b5:a1:7c:2b:41:95:3b:8e:94:78:
4b:41:22:46:80:07:93:bc:f3:24:37:5a:74:a8:42:
4c:3a:5e:2c:dc:5f:47:19:96:65:40:e7:ae:d8:78:
1d:d0:85:25:97:68:a7:cd:85:df:3f:7a:af:3d:ac:
db:5f:74:7b:fb:d0:b3:c2:38:29:27:d6:52:2a:42:
55:34:43:fc:51:cb:c0:f4:04:d5:b3:b2:77:3e:bf:
87:ac:28:70:a6:4b:33:9d:78:58:26:98:84:1c:99:
ae:08:37:89:2c:42:c1:39:74:c6:c9:5b:7f:cb:64:
bc:c3:c7:0e:74:86:57:b9:9c:ad:a6:48:15:fb:83:
21:42:cb:99:29:33:4b:29:ba:ae:c1:ae:92:c1:d0:
a4:5d:32:c7:d4:5d:8b:0a:31:52:28:a3:03:fd:01:
2e:8d:ca:9d:a2:6a:da:26:46:c1:07:19:d0:c6:90:
1c:4b:38:ce:51:fe:14:64:06:47:9b:37:4b:b4:e9:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1B:ED:3C:B7:90:A6:5C:7D:E5:93:67:C1:7E:80:FC:F9:F8:68:81
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6b:47:72:4a:f6:e5:b5:a2:5e:89:76:94:55:7d:35:bd:34:
ec:d7:3a:94:0c:40:4f:59:8f:84:0d:25:4e:43:dd:be:bf:a2:
85:70:88:05:ee:95:82:27:bb:6f:b6:62:25:f2:e0:a1:e5:b8:
18:80:6a:ca:07:89:4f:03:b8:38:01:54:b1:8d:5f:6e:3a:76:
f6:e3:d1:cb:b6:70:4b:39:cb:83:24:72:a8:12:70:d7:39:62:
52:2c:e1:9c:2c:e8:0a:0d:86:87:89:02:4b:69:8e:74:49:e8:
40:ad:c9:49:61:53:75:88:b0:06:15:e5:f0:44:29:a2:d3:f5:
f4:b1:e9:a1:09:2d:a4:05:f7:e5:29:80:f7:38:f5:9a:5b:a6:
52:fa:ba:8b:81:1a:71:3b:3e:1b:12:bd:87:67:e1:40:80:5c:
48:a4:e2:79:54:f4:fd:47:3f:f9:b1:38:83:3b:6f:b3:11:4c:
64:8b:ab:6d:90:8c:23:3f:68:fa:5a:9f:cc:ee:d6:06:99:2b:
35:79:cd:b2:80:3f:a2:d1:44:24:ee:f2:8b:fe:e8:d7:04:ea:
dc:a4:0e:8a:8a:e6:8f:6f:e3:50:b5:ea:54:77:53:30:0c:02:
c7:aa:07:d0:c8:ad:f0:48:22:1a:56:6b:21:5c:ee:c2:93:f6:
a5:09:7e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:37:10 2026 by rpki-client