Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
File: dAThbzM9iWUMZhOsbJXTSNxLeVA.mft (raw, json)
Hash identifier: lSrD5U0MsaxkcIWURU4fk/e+wWWRD76Ablw7lQBmnl0=
Subject key identifier: 5D:6E:B8:07:94:50:84:7C:B3:A4:58:E7:E7:68:3F:7E:EC:C5:7C:81
Authority key identifier: 74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
Certificate issuer: /CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Certificate serial: 01A1660FAA3406E9C103A9D92054A4A89C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
Manifest number: 0643
Signing time: Fri 23 Oct 2026 00:01:04 +0000
Manifest this update: Fri 23 Oct 2026 00:01:04 +0000
Manifest next update: Sat 24 Oct 2026 00:01:04 +0000
Files and hashes: 1: aON68VTwskogSIwfK0by-nZp_Rg.roa (hash: dkh8/Wbv+HTgUBFM4ZbuS+fZuVAjLH6qIB6RVSRMT9M=)
2: dAThbzM9iWUMZhOsbJXTSNxLeVA.crl (hash: fo5KrIT8oA7/1C6L5qasAbPMqkMsb2wc1C7N8RKJ8Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:0f:aa:34:06:e9:c1:03:a9:d9:20:54:a4:a8:9c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Validity
Not Before: Oct 23 00:01:04 2026 GMT
Not After : Oct 24 00:01:04 2026 GMT
Subject: CN=5d6eb8079450847cb3a458e7e7683f7eecc57c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:2c:d7:57:88:f6:6d:04:18:1d:4d:79:1a:
b7:5c:1d:06:e5:11:3a:0c:c6:6b:09:69:14:5f:04:
3b:0c:09:ed:d8:e1:be:1d:3d:18:b2:48:5b:47:71:
50:c5:27:20:c4:67:74:22:71:7a:68:fc:5c:99:c0:
fc:36:5c:ec:42:c5:6f:ab:78:ef:ad:85:4e:bd:22:
aa:5e:35:82:64:c4:c6:e4:62:d8:25:b8:51:a5:a9:
b1:d3:a2:f5:5d:5f:fe:7f:cf:92:ee:95:6d:2b:05:
ca:c2:45:1a:45:22:46:ef:a1:af:33:49:3a:a5:e4:
e1:3c:03:cf:cb:56:db:6a:53:85:e1:65:fe:17:35:
4e:93:d1:57:88:0e:2d:21:1f:af:15:1f:60:9f:6d:
cb:2b:ff:65:2f:42:06:3e:96:15:d0:1e:9f:72:ef:
aa:2c:66:1d:9d:8b:47:03:e1:21:fc:0e:73:d7:47:
07:5b:73:4e:d2:0b:4b:bf:3b:34:d2:1d:93:b8:bc:
b1:29:01:8f:db:03:7d:4a:02:a8:9b:f3:8c:98:54:
8f:da:65:a3:90:94:a3:c7:28:f8:ca:e3:68:db:ef:
5d:8d:6b:59:09:14:1e:fc:4c:7d:9f:86:e3:b0:eb:
f7:fd:cc:67:27:c8:d1:91:c2:73:55:ce:ac:df:03:
8b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6E:B8:07:94:50:84:7C:B3:A4:58:E7:E7:68:3F:7E:EC:C5:7C:81
X509v3 Authority Key Identifier:
keyid:74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1c:46:13:6b:91:5e:57:02:74:31:a7:80:bb:d6:93:f4:9e:
1c:9c:0d:9d:76:93:1e:90:76:ca:28:97:72:e1:89:cc:fe:9a:
89:9b:4e:b2:23:8b:ac:10:f8:de:1b:8e:bd:65:cf:06:5a:ea:
df:9b:28:0c:10:a8:22:b8:a4:c6:6c:bf:37:ec:0e:74:45:1b:
14:4b:9f:8e:e4:a8:19:0e:6a:1c:13:08:76:73:da:b7:a7:db:
2d:31:93:4c:c1:61:49:3a:bb:06:ab:94:56:08:2a:07:ce:9a:
ea:eb:7f:98:0f:82:d8:55:04:ad:ff:99:d3:7f:47:76:8a:0a:
9e:7a:94:54:5d:4a:d4:75:09:ef:6b:48:80:c2:9d:d7:31:47:
43:5b:c7:b5:15:e1:fc:91:20:64:5d:63:61:07:0c:08:e8:9d:
6a:fc:d4:b9:cd:45:bf:d4:3d:0f:1e:12:02:ff:b7:ae:56:4a:
53:4b:d3:83:1d:47:1b:7d:6d:3b:4c:00:1e:63:7f:af:be:dd:
92:f4:cd:10:ff:d2:cb:4c:0e:6d:99:e4:75:58:ef:b2:ed:4b:
7e:f9:4c:cc:cc:0d:ad:0c:9b:45:31:e5:3b:53:a2:06:21:0f:
b0:e6:b5:76:eb:f2:73:15:68:1e:22:0a:bb:c8:93:fd:2c:b1:
02:03:ba:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 11:25:28 2026 by rpki-client