Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: ZFsOplYa51dwn5RBJBLLsQvXHr7fo8KjbYOtTrN6TV8=
Subject key identifier: 24:E6:B3:EA:14:0F:E9:15:68:7A:2D:AD:6B:CB:03:A4:D2:52:41:1B
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 01A13FA7CC93DD62C07E56BE53ED0C18CB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 13:02:03 +0000
Manifest this update: Thu 15 Oct 2026 13:02:03 +0000
Manifest next update: Fri 16 Oct 2026 13:02:03 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: DT2SSPDTfT8r5bbqWUQ8IAoO+BEUbAtT8pDi3lzXPFA=)
2: NxS44xqtw9wnJjtyrxmTBDUCj5c.roa (hash: HUNSDs/gJPWUN3iy9W3sRGZH+ajPQ9ZIuVJ3VIFyz4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:cc:93:dd:62:c0:7e:56:be:53:ed:0c:18:cb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Oct 15 13:02:03 2026 GMT
Not After : Oct 16 13:02:03 2026 GMT
Subject: CN=24e6b3ea140fe915687a2dad6bcb03a4d252411b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:9a:d8:4a:60:44:75:cf:c7:1a:89:38:91:
14:75:66:cd:e9:2f:52:23:b9:aa:37:3d:3e:63:c3:
dc:6f:6d:ad:ec:25:78:e4:1d:92:f0:ca:21:ce:15:
ee:8a:5c:5d:dc:5a:88:61:83:cf:9f:28:57:fc:30:
fd:84:7f:d7:dd:44:d7:96:d9:b8:b7:85:5a:18:fc:
ca:2d:33:ac:93:4b:62:33:b3:68:d7:9f:cf:14:2a:
64:25:4f:57:8b:90:b5:77:f4:44:51:74:95:59:1d:
7d:72:38:08:08:4e:c9:4d:c4:ef:d4:4d:7a:65:8f:
be:a0:fb:90:a8:41:f5:94:95:40:b6:34:30:76:db:
ce:8e:12:c2:aa:25:ad:d6:08:11:7b:d1:ed:c7:59:
a9:3b:00:3d:44:05:41:00:62:bf:6d:c5:6b:0a:86:
2c:69:b8:85:8b:8f:93:2e:db:59:4b:a5:c3:04:e1:
7f:6c:c3:dc:69:a1:da:31:15:cd:77:88:8b:76:28:
c0:9b:a8:36:cf:f9:ff:61:26:45:71:e7:fd:75:53:
56:d8:69:e4:47:7c:3c:61:11:10:f2:5d:03:3e:61:
66:01:6d:1c:c4:ee:b7:6d:ac:1a:da:98:90:bc:e8:
93:a3:78:92:7f:3e:3a:42:3d:4c:30:6c:63:aa:54:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E6:B3:EA:14:0F:E9:15:68:7A:2D:AD:6B:CB:03:A4:D2:52:41:1B
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:25:e4:0b:5d:7c:19:b7:c5:54:8d:6f:7c:34:d4:e3:da:32:
75:8d:1f:e3:79:b8:31:9b:07:77:bd:f9:ce:f2:19:e7:6e:07:
8c:60:f3:9f:6e:af:13:7c:e9:be:9c:71:2b:5a:aa:c2:ec:d7:
95:e3:7e:74:c0:c2:08:b3:fc:54:05:58:51:7c:0b:ed:89:03:
e7:73:10:2a:9f:29:67:35:34:75:09:3f:42:c7:f0:83:28:a1:
be:a6:84:da:af:b9:18:f6:48:46:b1:6e:02:72:a9:3c:92:20:
b5:11:6e:67:31:be:c7:bb:ce:cd:27:76:c9:20:07:b4:97:ff:
d1:fa:33:84:fe:93:be:e4:a9:a7:65:e1:7a:87:de:f7:fe:1c:
71:9c:43:0a:c3:1c:cd:23:86:62:19:a4:30:68:9b:31:51:ab:
16:fe:c5:d7:e0:09:98:e7:77:3e:41:bf:b6:8b:66:ec:12:51:
35:f0:90:aa:d5:1b:cd:60:90:b6:12:5d:30:9a:12:a4:ab:95:
1d:b4:32:dd:d1:eb:d9:f7:5b:f1:eb:16:97:b0:9f:6e:c2:25:
0a:b0:35:3e:2c:78:e1:d4:79:d3:e9:5e:5e:a9:5b:b3:73:ba:
8c:5f:23:54:95:d1:d9:e8:e3:77:68:1e:fd:14:74:d7:de:45:
02:28:7c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:35:06 2026 by rpki-client