Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
File: D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft (raw, json)
Hash identifier: NAcbRqV8X0qBVqJvNFjeGvBI4IlSOkasyo1CfOMsrms=
Subject key identifier: 38:D2:50:EA:83:A3:DB:4C:42:52:26:40:9F:9D:A9:A6:8C:7A:DA:95
Authority key identifier: 0F:97:E2:ED:1E:92:7D:BF:D8:DE:0D:5E:94:A7:7D:54:C2:DD:00:42
Certificate issuer: /CN=0f97e2ed1e927dbfd8de0d5e94a77d54c2dd0042
Certificate serial: 01A0DF861AA4E873B261A38F7552457EDAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
Manifest number: ED
Signing time: Sat 26 Sep 2026 21:01:42 +0000
Manifest this update: Sat 26 Sep 2026 21:01:42 +0000
Manifest next update: Sun 27 Sep 2026 21:01:42 +0000
Files and hashes: 1: D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl (hash: UuTcNwH6gjhsE0lZuD6cuR0R7sX/q36JEurUY1fbkp4=)
2: Um6n_idKHhLBJBBzUCl6l1HPrEI.roa (hash: SxF4T3uK56mVfgUvnXBquT7aoBlNGiQk5l7rUMHBbSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:1a:a4:e8:73:b2:61:a3:8f:75:52:45:7e:da:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f97e2ed1e927dbfd8de0d5e94a77d54c2dd0042
Validity
Not Before: Sep 26 21:01:42 2026 GMT
Not After : Sep 27 21:01:42 2026 GMT
Subject: CN=38d250ea83a3db4c425226409f9da9a68c7ada95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:cf:63:ca:68:0b:0c:3b:f4:42:bd:6d:8b:
c3:19:f1:a4:21:33:74:e7:e7:87:2c:0e:4c:f1:c6:
d9:83:c4:b7:03:79:94:19:0d:21:33:17:a5:ff:f3:
74:7f:82:ac:d2:79:34:55:73:40:f6:dc:d4:61:23:
7f:8d:b5:29:86:94:f7:70:65:77:25:d5:58:47:ac:
c0:29:3c:39:b8:9d:ce:2f:9b:7b:68:28:82:49:ec:
31:1c:e5:f7:6a:bd:79:dc:e6:cb:31:f9:c0:63:83:
17:f0:bb:aa:68:7f:f1:2f:24:e6:01:c0:94:ee:56:
86:cc:5f:a1:ff:25:04:85:2b:a6:c0:54:df:36:21:
65:69:9a:a3:94:b3:61:0a:2f:27:7d:75:3a:5a:b1:
ca:8f:fb:38:60:ca:4b:6c:0f:b5:e4:2f:ba:a4:b6:
d1:31:58:ed:b5:40:e2:4e:b0:70:da:dc:79:6f:9b:
45:b1:d0:fa:87:09:14:a5:cc:da:22:f3:5a:b8:bb:
39:81:bd:21:61:34:34:d2:1a:52:4f:f5:c4:e0:d6:
2b:00:6e:5c:11:73:8f:af:34:33:f6:c1:47:4e:14:
28:de:28:c2:ee:4b:c0:f1:55:c6:2b:c7:16:af:89:
b8:fc:18:b6:c7:97:13:f2:68:5e:27:36:cf:73:52:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D2:50:EA:83:A3:DB:4C:42:52:26:40:9F:9D:A9:A6:8C:7A:DA:95
X509v3 Authority Key Identifier:
keyid:0F:97:E2:ED:1E:92:7D:BF:D8:DE:0D:5E:94:A7:7D:54:C2:DD:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c4:4e:8e:60:9d:16:ea:a1:33:a7:4b:da:50:49:82:06:29:
56:17:1e:a5:e5:28:c0:bd:c0:87:ca:ab:ff:02:ae:a1:fb:0f:
94:de:08:04:8b:8b:65:2c:67:1b:6c:19:6f:f4:fd:de:6b:e8:
20:f5:cf:eb:a5:60:b5:e1:40:7f:97:7d:df:4e:f4:0b:5a:0d:
71:6c:26:13:f6:ae:aa:2c:f4:d0:7d:5f:60:7d:36:35:4b:b0:
be:88:9e:e2:08:8a:1f:5e:41:eb:92:9c:3b:48:57:b0:24:f7:
d1:a0:be:5a:f4:da:d0:38:ea:3e:d2:82:9c:dd:81:2c:5c:e4:
66:ef:5e:84:50:0f:1e:bd:a9:fb:4e:d0:4e:a7:e0:25:71:d4:
2f:1f:f8:ce:64:81:7d:5f:b7:9e:e3:09:ce:5b:94:88:fc:0c:
05:63:17:69:4c:bb:48:c2:43:d3:18:81:2d:47:cd:62:cd:14:
41:65:d0:52:5e:ca:7d:9e:90:84:29:ab:6c:ad:59:f9:92:61:
85:26:b2:11:d5:60:12:60:15:7c:f4:85:4a:dd:0c:5a:15:ed:
f1:82:86:77:22:c1:87:11:d6:b6:4c:1b:e0:b1:18:5f:a6:0a:
25:1d:a0:a9:a1:8a:ce:93:17:c8:13:eb:9c:47:8f:9c:51:2b:
31:aa:92:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:45:58 2026 by rpki-client