Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: SFzDmksi3d2GXBxOmiiqEB26GJA/bYEFVoLYtq3IWkc=
Subject key identifier: D9:3A:B5:2F:83:72:57:9B:B0:F0:E6:07:D6:6C:F2:A8:9D:46:47:8D
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 01A08A8D8F82981C78F62EEABEBDC4C02DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 09:02:08 +0000
Manifest this update: Thu 10 Sep 2026 09:02:08 +0000
Manifest next update: Fri 11 Sep 2026 09:02:08 +0000
Files and hashes: 1: 3D6ST7VPwU1ruJHTqcORchHTAiE.roa (hash: NASIK7MkKYD9o//4ZODXB3XY9C+uWrjRQevxzYiJxB0=)
2: FsryNOkpTRhYXYiVpfSErxkdF5I.roa (hash: 7TnmsucFlZLELXfMUZN9SGlpQMX8+cF0eWaXdVfCFOM=)
3: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: PPbuL16wIhE2jxPxD72ZYEMxkh0xA9SM5f1yVWsqDwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:8f:82:98:1c:78:f6:2e:ea:be:bd:c4:c0:2d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Sep 10 09:02:08 2026 GMT
Not After : Sep 11 09:02:08 2026 GMT
Subject: CN=d93ab52f8372579bb0f0e607d66cf2a89d46478d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:63:26:01:b0:12:b0:8d:aa:1d:07:ad:64:
40:6a:6a:70:03:69:f2:b5:e1:35:cc:6d:58:3a:d9:
18:18:06:1b:88:83:32:ed:8c:48:42:d0:cc:55:c6:
4e:ed:56:f8:d0:25:68:58:5b:e1:b5:c9:30:76:9a:
9c:5c:70:e8:6b:19:14:e8:75:38:e7:bb:cc:cd:c4:
e8:2d:17:29:cb:9e:47:54:ac:94:32:ce:1d:1d:ca:
cd:16:8c:f5:05:e3:8c:aa:4e:f1:86:8f:a2:16:a6:
ef:35:9a:43:34:f0:5c:79:91:35:ec:aa:a0:04:61:
7c:ec:1e:d7:06:ef:96:e9:e3:e3:8b:b8:58:8b:5b:
00:66:d9:de:8a:29:92:9e:4a:43:26:0d:f7:13:a1:
e1:35:46:db:0a:4e:ab:22:2a:02:08:00:ce:c0:97:
05:e7:e1:2d:d9:e1:19:ee:9f:6d:5f:a9:f0:00:8e:
39:6e:cb:65:f1:0f:33:46:6d:18:a5:83:84:c4:aa:
15:b9:f5:4c:c5:e4:fe:10:12:8e:11:7c:a0:6b:0b:
24:51:9a:ae:81:05:ed:cb:15:ed:3a:b2:28:cf:a0:
b1:73:0d:e1:ce:b0:19:37:dd:b9:05:ad:0e:b4:0a:
97:e4:fa:96:94:7e:21:40:9b:63:f0:fd:e5:ac:e6:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3A:B5:2F:83:72:57:9B:B0:F0:E6:07:D6:6C:F2:A8:9D:46:47:8D
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:ab:81:32:7f:7e:c6:b3:aa:38:4d:01:4b:ff:32:a1:f4:ee:
3a:7e:2a:52:8d:01:c0:d2:12:d6:dc:5b:69:55:1c:d3:d6:a5:
82:9a:1d:b1:d1:86:d9:55:f5:29:bd:d3:98:49:22:0c:a0:a0:
96:53:89:85:a1:b4:63:4f:d5:94:0d:a2:b1:12:77:b1:89:98:
b4:f7:b9:17:32:ce:b5:71:39:60:26:9c:5a:a0:9f:a5:b0:b5:
2a:4b:98:2f:01:c4:4e:e1:f2:e3:9c:1f:7a:64:1c:03:e1:10:
5b:32:b3:8a:f7:42:57:48:ca:c8:e3:af:89:2f:a2:f8:e2:96:
fd:21:95:6e:7b:eb:7c:67:9e:28:d4:15:58:b1:90:51:fe:c8:
f6:7c:16:a1:ea:8b:cd:b2:a0:0c:c9:3e:0a:82:0d:99:7e:52:
d9:15:eb:6f:40:7f:4d:fd:fc:56:84:df:44:8c:6d:56:af:c6:
2d:96:8b:13:8b:c3:b9:00:60:a6:4a:ef:2b:be:2e:ed:53:c4:
b1:29:65:f9:5b:bd:82:8d:df:2c:a4:30:3c:ac:0b:5b:e5:91:
59:33:86:87:d9:81:82:ae:b6:98:d8:64:73:0d:32:6e:cc:76:
a0:ea:eb:1a:70:ef:cf:8d:44:38:6c:23:e0:cb:5f:52:62:41:
13:16:07:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:15:54 2026 by rpki-client