Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
File: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft (raw, json)
Hash identifier: 4Osin9c3i6cT7Sg44iNrQ5EqylTO6BDhri5YUsQ/x08=
Subject key identifier: EA:86:50:5B:D4:12:D3:26:78:03:A6:E6:0D:85:B2:01:F7:BE:67:8C
Authority key identifier: 0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
Certificate issuer: /CN=0e1dd539525a39d847014e8fea3c641d973cc866
Certificate serial: 01A13E5C9FE93A795CCA69500950DA918633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
Manifest number: 0A28
Signing time: Thu 15 Oct 2026 07:00:19 +0000
Manifest this update: Thu 15 Oct 2026 07:00:19 +0000
Manifest next update: Fri 16 Oct 2026 07:00:19 +0000
Files and hashes: 1: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl (hash: tpYediRE0BsOnaze0070mSm68Hvg9AEWs4V2m2yVfAU=)
2: wWu-RpwUyxS5-QEBD4scp9HUjmY.roa (hash: Vz+DIxi0X/mIEqFNyd8Fjt4ub221xLszyBI1vupEUnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:9f:e9:3a:79:5c:ca:69:50:09:50:da:91:86:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1dd539525a39d847014e8fea3c641d973cc866
Validity
Not Before: Oct 15 07:00:19 2026 GMT
Not After : Oct 16 07:00:19 2026 GMT
Subject: CN=ea86505bd412d3267803a6e60d85b201f7be678c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6c:12:94:1f:02:63:08:1f:6f:84:50:c6:16:
4c:cd:6d:c5:9f:3c:ad:05:70:03:57:ff:6d:e6:85:
66:8d:3f:7f:77:7b:c0:40:35:45:da:5c:76:29:b1:
85:fb:57:a7:a4:3e:c1:dc:1f:fa:4f:46:c9:5f:9a:
4e:b9:b7:32:35:8b:e7:c5:b2:4d:78:63:60:63:bb:
5a:64:b9:8e:ea:10:47:1b:7f:02:1e:d0:8d:8b:eb:
5d:b2:06:3f:e8:bb:e7:52:df:81:b6:f5:6b:c9:04:
b0:54:86:2c:d4:ae:b3:ca:da:20:5f:00:a5:eb:45:
3e:32:c4:3b:81:96:90:29:49:5c:bc:18:d9:b4:c7:
86:57:98:7d:c1:ea:bd:01:61:e0:e8:02:d3:cb:e9:
f6:79:02:e1:e4:e2:f9:f9:3e:c1:d9:29:ff:c9:1b:
fb:6f:6c:dd:fe:73:28:8e:f4:d8:ed:5b:3f:b9:a6:
82:63:10:e8:e7:43:26:73:f3:4d:07:b0:af:00:92:
96:99:1f:76:de:55:98:a5:18:e2:da:e8:aa:bd:9e:
04:f1:de:00:59:4a:f4:09:b2:9a:dd:8e:4b:0b:62:
3f:ab:04:a4:25:f2:e9:5f:b4:83:a6:a1:ee:3e:a0:
40:6b:96:ba:7f:c7:59:52:e7:20:97:e1:b1:7c:4e:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:86:50:5B:D4:12:D3:26:78:03:A6:E6:0D:85:B2:01:F7:BE:67:8C
X509v3 Authority Key Identifier:
keyid:0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:bf:6f:4b:bb:05:7f:78:47:b8:93:8b:23:77:9a:c0:91:68:
dd:fa:f0:5f:11:de:9a:48:d5:73:59:13:a7:35:23:de:35:78:
d9:d6:e3:b7:e9:37:0a:01:c5:4a:16:11:bd:57:dc:7d:d8:79:
4c:57:6b:59:5c:5d:95:91:2e:c3:9d:87:01:eb:96:4a:30:5f:
c9:3d:ef:86:a1:3e:29:90:71:ea:5b:c6:ef:17:38:02:30:08:
a7:fe:46:5c:e2:18:0a:6a:31:6c:de:88:bc:d0:c0:d5:08:f7:
9e:08:9e:39:cf:6e:b9:98:bb:c0:19:4d:10:df:90:0c:a9:5c:
d7:f3:f5:81:bc:ae:72:31:53:13:e7:62:7c:8d:38:e6:e7:ae:
c7:4e:d1:d4:ef:2c:8a:a9:36:80:15:2f:a7:eb:72:85:05:ea:
32:9d:49:1f:eb:f0:2f:9d:d3:e3:6c:ae:1a:93:00:8b:53:a1:
ee:96:41:d2:05:7d:9a:47:18:29:3a:7c:ab:f6:12:57:6b:22:
b7:86:91:fa:59:74:a4:ce:ed:3e:6f:8f:0f:73:d9:49:5a:f9:
bf:a9:f6:99:b2:50:8d:ab:d4:85:0d:fd:82:94:ec:77:29:7a:
3d:c3:31:16:31:b3:43:0f:f9:6d:27:78:f3:ee:6b:06:f1:95:
d6:b7:ab:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:10 2026 by rpki-client