Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier: NLt38/4pa/1JkWo8fQyO2XrnGYt2RGIfE5U/lrv116Y=
Subject key identifier: 19:85:B1:17:7C:9B:44:82:35:FC:82:0B:18:7F:DC:11:96:A6:13:CB
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial: 01A001DD8146CCECE89DA66F0EA66B8A33DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number: 1A06
Signing time: Fri 14 Aug 2026 20:01:28 +0000
Manifest this update: Fri 14 Aug 2026 20:01:28 +0000
Manifest next update: Sat 15 Aug 2026 20:01:28 +0000
Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: CUidqOcvw8IxdSyEwkKLtYW0xBJ9Bib3eFmy53+0ZOA=)
2: iDDbiSH2d_40GsJwPvUC4BGeuXA.roa (hash: vwX7F1KiY4ZWTpCyVu83FRegfcFV6IZjqYP0GrVArzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:81:46:cc:ec:e8:9d:a6:6f:0e:a6:6b:8a:33:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Validity
Not Before: Aug 14 20:01:28 2026 GMT
Not After : Aug 15 20:01:28 2026 GMT
Subject: CN=1985b1177c9b448235fc820b187fdc1196a613cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:71:9f:b6:64:6f:ac:d1:c9:0e:ab:95:f0:c6:
9b:73:f3:db:e2:21:e0:b7:e8:d2:1b:71:b1:2c:0f:
80:64:a1:27:c2:16:39:bc:bf:ca:02:1f:3c:8e:06:
53:b1:a7:12:a0:39:c8:5e:41:48:d2:41:82:73:4a:
be:98:be:16:06:6a:9b:2e:5d:e7:1f:27:a7:01:31:
0d:26:8c:74:14:cd:c3:40:61:fd:89:ad:f2:98:c3:
38:03:e6:f1:d7:78:3a:ec:a2:86:38:b1:ab:3a:d6:
2d:aa:72:f1:a1:75:02:3f:d6:44:b4:d0:2f:01:ce:
2c:8d:1a:be:59:c3:24:c7:aa:55:e2:e7:0d:6c:61:
e0:2f:e3:06:8f:22:3c:27:99:6c:dc:c0:2a:55:db:
f7:e0:a3:06:50:37:5b:6b:7f:e0:18:43:2d:ca:e3:
2a:16:69:11:69:6b:38:48:45:e6:42:b1:5a:d0:8c:
e1:7e:76:b2:4b:8d:9d:2c:7c:84:4a:a3:38:b9:e7:
f4:0e:fc:35:30:26:cc:27:f4:35:7b:ef:6a:41:27:
62:3d:49:61:e2:87:ea:b5:3e:2f:48:76:ab:6a:cd:
51:cc:6f:5a:92:2f:8f:38:34:2a:ee:e9:3f:5f:9c:
e0:42:ed:e2:9a:45:90:93:2c:79:a7:13:f5:90:32:
c2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:85:B1:17:7C:9B:44:82:35:FC:82:0B:18:7F:DC:11:96:A6:13:CB
X509v3 Authority Key Identifier:
keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:09:bc:c9:d0:9a:6a:60:da:be:b0:26:33:d1:37:38:c7:46:
f3:a3:aa:5e:3b:4e:97:ef:08:17:7a:ce:39:91:b6:31:cd:9c:
79:e9:55:74:5a:0c:3a:bf:c7:83:46:a8:da:a1:7d:75:64:6e:
4e:28:55:cc:1a:8a:9f:05:09:50:a8:27:19:f6:30:77:7b:fd:
ad:6e:65:c8:e5:4a:f0:e2:5b:dd:5e:4b:57:ea:94:e7:aa:0f:
7e:3a:64:ff:47:aa:bf:63:52:22:22:e6:bb:54:dd:d3:a3:c9:
4d:8a:52:4d:7c:b6:cc:14:66:29:3d:24:a4:dc:a2:f3:02:24:
4f:a7:9e:25:86:c7:ad:d6:c9:51:ad:39:fe:81:e1:ae:97:d3:
d7:37:46:e6:7c:10:99:4a:58:4c:02:29:94:49:a9:e7:45:98:
53:eb:98:9e:7d:3e:fa:7a:f5:14:21:95:62:18:83:d1:da:b9:
25:0b:d9:c3:40:62:ee:22:d0:40:43:a5:6d:65:4d:09:d8:3c:
4d:0b:d9:9e:83:e1:03:2f:bb:35:c0:21:d5:a5:72:0c:85:26:
6f:be:18:2f:ca:ee:cd:aa:18:e1:f2:d2:1b:93:59:9c:6f:df:
0d:ff:1d:59:47:fc:6a:07:c2:02:5a:cf:7f:1e:df:59:88:e1:
13:32:74:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:32 2026 by rpki-client