Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: bQdVVgz9ix+R0Qjte8Gz7jMg0bn+cIHC4FIzGPF48ig=
Subject key identifier: A5:D6:0B:16:7D:E4:9F:9A:42:60:A1:66:8D:42:2B:9E:D9:06:64:D4
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 01A00101CDC415C8DF09B92CE07E908B2125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 16:01:30 +0000
Manifest this update: Fri 14 Aug 2026 16:01:30 +0000
Manifest next update: Sat 15 Aug 2026 16:01:30 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: 9sy2fyg9heksFIEICwj8RJcMyqgZhU1Q3oopLSSLGlg=)
2: NxS44xqtw9wnJjtyrxmTBDUCj5c.roa (hash: HUNSDs/gJPWUN3iy9W3sRGZH+ajPQ9ZIuVJ3VIFyz4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:cd:c4:15:c8:df:09:b9:2c:e0:7e:90:8b:21:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Aug 14 16:01:30 2026 GMT
Not After : Aug 15 16:01:30 2026 GMT
Subject: CN=a5d60b167de49f9a4260a1668d422b9ed90664d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:36:d0:d2:4c:8c:37:5a:27:3b:2f:e4:25:7b:
21:ad:ca:28:96:33:f7:a0:40:3d:8f:dd:1e:60:d5:
f3:4e:ca:8e:32:8e:27:2f:fe:60:5a:41:e4:3d:48:
57:57:4a:2e:58:f9:69:8c:5f:c4:2b:dd:9c:1f:c0:
ef:f0:fa:03:05:32:38:d4:5f:9b:bf:03:95:67:88:
4a:2b:2e:11:40:03:bf:59:b0:22:5d:8a:9e:c0:66:
7a:a9:0e:d2:d4:e2:b8:bd:16:ed:a5:a4:b4:62:a5:
b0:50:57:c8:7b:7f:21:c2:21:d2:d4:3f:4b:5a:1e:
d0:11:4f:c9:2d:7e:f6:6a:20:59:fe:5a:13:d2:d9:
5e:22:d6:8d:91:e3:29:9f:80:63:26:05:c5:1f:36:
60:b7:c7:82:f5:b8:a0:7c:13:41:89:be:0b:e8:9c:
ff:47:7e:5b:f7:11:13:79:24:b4:c7:47:41:f4:2c:
8e:63:43:e2:34:cc:f7:37:a4:61:53:26:a5:cc:09:
96:a6:f6:46:5c:03:1c:a1:25:9f:37:a1:08:03:a2:
b8:67:22:8f:71:12:85:89:79:e5:ad:a0:c4:7d:10:
e4:b3:dd:42:51:ba:b2:4d:04:6f:08:d9:40:eb:cd:
8a:9b:01:d3:72:4a:aa:80:df:c6:cd:5c:79:e0:e3:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D6:0B:16:7D:E4:9F:9A:42:60:A1:66:8D:42:2B:9E:D9:06:64:D4
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:37:57:31:64:4d:de:ce:2d:94:e5:e6:c8:12:2e:06:23:84:
5a:46:37:46:84:09:9d:09:32:b9:37:f9:09:aa:3a:a0:1d:0f:
47:1d:52:fa:bf:5c:c4:c1:17:b4:06:2c:56:38:0f:6d:97:bf:
ea:24:84:d8:87:c5:35:6d:86:84:3e:84:d6:da:71:cf:e2:fa:
40:ba:0d:f2:4d:33:22:dd:17:c8:e4:c3:40:6f:4e:73:90:a4:
0c:43:ab:f6:2b:48:53:94:dd:b2:d4:21:b9:cb:6a:25:e6:c2:
67:88:be:e2:54:ee:88:c4:1a:fa:41:7e:c4:12:c9:8f:17:e5:
ba:24:c7:80:76:3d:26:fd:46:26:ae:7c:74:42:56:8e:7a:51:
85:94:a4:72:cb:0b:f7:49:0e:0a:5a:55:e0:ce:3a:ff:b6:fd:
72:c0:82:82:8e:85:7d:9c:f6:90:ee:bc:fb:d0:50:2f:51:38:
c5:75:14:65:3a:a6:51:9f:fe:9b:f9:85:c2:4e:ed:fd:79:4b:
78:75:dc:9f:8b:1e:15:d0:47:1f:89:9e:c0:55:03:2a:bb:f3:
a8:be:2b:bb:63:02:67:11:8a:9a:2b:85:f9:42:7c:50:17:d4:
3b:e3:f9:39:3b:39:ad:e6:73:c9:d7:c3:dc:ab:a7:60:19:71:
94:1c:fa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:58 2026 by rpki-client