Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
File: dzDRbvGVhk8NvoqGca-2N2g7djs.mft (raw, json)
Hash identifier: /21lMA97Du1Do0hXPhB25Fp5Dm3fMxLY9d4SF1YAsec=
Subject key identifier: 1D:FC:DC:76:8C:25:9F:FB:A5:30:F2:1A:84:87:B4:F7:A9:28:33:A0
Authority key identifier: 77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B
Certificate issuer: /CN=7730d16ef195864f0dbe8a8671afb637683b763b
Certificate serial: 01A0E0CF6EE32948C3B1E7CBB9D55BB22B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
Manifest number: 0392
Signing time: Sun 27 Sep 2026 03:01:25 +0000
Manifest this update: Sun 27 Sep 2026 03:01:25 +0000
Manifest next update: Mon 28 Sep 2026 03:01:25 +0000
Files and hashes: 1: dzDRbvGVhk8NvoqGca-2N2g7djs.crl (hash: wu1/fuCYUfSJKWnDYM32K1G2Ucv1Tkw3saVVe6gfFe0=)
2: o2VO5oX-mcICPglQ6TuJXF-puG0.roa (hash: QGvRH3mpnPRRYbJ9WRorNDsxj8CF3Y8SPJsGxZhiJ6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:6e:e3:29:48:c3:b1:e7:cb:b9:d5:5b:b2:2b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7730d16ef195864f0dbe8a8671afb637683b763b
Validity
Not Before: Sep 27 03:01:25 2026 GMT
Not After : Sep 28 03:01:25 2026 GMT
Subject: CN=1dfcdc768c259ffba530f21a8487b4f7a92833a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:a5:54:48:6d:2b:ee:4f:ef:cc:46:fd:bf:
e4:fa:b4:35:18:5f:e1:58:8e:43:8a:e8:cd:78:95:
b9:24:c1:6b:8d:a3:5d:9b:ee:f2:79:32:fa:95:ee:
2a:e9:a3:db:07:43:9e:2b:38:91:f2:a8:c7:70:c3:
23:81:67:7b:eb:bf:ff:f5:c9:26:0b:08:a4:99:97:
ed:c0:6c:0d:e9:d8:7c:5e:9d:ab:3b:9f:eb:58:05:
6f:14:c7:8a:e6:5f:c3:7b:28:49:98:59:02:af:26:
a8:70:c0:11:23:14:9b:43:44:80:5c:85:6d:3f:83:
08:43:e5:bc:f6:ed:4b:7b:50:76:3a:cb:bb:c2:b8:
28:28:9c:3b:dd:10:4b:fe:eb:f9:b3:31:be:50:6b:
77:e0:6b:34:23:1b:b3:70:43:14:d5:99:ca:83:be:
51:74:bd:78:2c:7e:9e:d1:58:bb:e3:e1:c6:c6:ff:
aa:7d:4e:cd:fb:e3:83:e4:b8:6c:16:41:c6:4a:81:
eb:d7:f8:7c:5a:96:de:76:ee:7b:18:64:77:3d:b0:
90:70:43:4d:9c:da:5b:88:62:97:4a:22:b0:0a:2b:
d4:c6:4b:4f:fb:e7:a6:b0:90:2e:88:6a:e4:7f:a7:
02:6e:53:63:9d:d5:72:09:67:8f:9c:34:7e:bd:d7:
f2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FC:DC:76:8C:25:9F:FB:A5:30:F2:1A:84:87:B4:F7:A9:28:33:A0
X509v3 Authority Key Identifier:
keyid:77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:98:e1:62:ef:11:3f:53:ed:8b:57:81:c7:e1:d2:fa:ea:47:
f2:70:07:a4:3f:e7:87:f9:b5:d7:38:51:75:20:ca:6b:12:c9:
ee:fa:e2:58:f2:1e:26:04:ea:df:7b:a4:39:c4:94:bc:2a:82:
66:67:89:d1:5e:13:62:3d:73:ea:69:a7:e3:7f:1e:5d:b0:da:
f9:7c:2e:4d:c2:85:8d:f0:43:25:d4:28:78:bc:c0:e9:b7:f8:
ff:e9:d3:49:35:cb:98:43:e3:36:83:30:9a:8f:be:c1:14:17:
05:96:0f:2c:b2:88:a3:1c:fe:0a:e5:9e:bd:6e:83:38:81:6d:
47:fb:b1:01:04:49:82:64:03:e2:23:10:a5:f8:c4:5a:26:d5:
62:67:f8:de:aa:52:17:49:8a:43:47:24:41:2e:3c:49:e0:b9:
0e:91:cd:75:5b:0e:0a:c9:0e:11:a6:44:76:32:84:ed:ed:a2:
7d:be:fd:88:eb:59:3f:6f:87:9e:35:91:f8:24:88:5f:c8:54:
1c:61:96:7e:0b:0f:c6:d3:a0:85:6a:52:9d:39:db:0e:1d:d5:
51:f7:e8:cf:33:13:8a:0c:04:f0:40:1e:1d:f6:3f:fe:f5:29:
32:5c:8a:68:af:1d:b9:61:dc:24:ca:b1:aa:f4:29:c3:2c:e6:
56:a8:4f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:10:56 2026 by rpki-client