Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: N3VUETjl7nxXw3LYh/E3K65NMkYFqoqpN4RwS0Im9BI=
Subject key identifier: 77:E3:21:D6:9A:B1:82:6D:BC:75:74:82:9B:37:8C:D5:F0:87:D8:D2
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 01A0DA5F81ED4B55222FAC3DB49FE02B1BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 07D8
Signing time: Fri 25 Sep 2026 21:01:27 +0000
Manifest this update: Fri 25 Sep 2026 21:01:27 +0000
Manifest next update: Sat 26 Sep 2026 21:01:27 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: 264dlK0Db/mqwZWLZW/3N5/FQK/ziFTVnT13c7s1J8I=)
2: P-p2NxW9TFmZAwW03gw6xGVVFZc.roa (hash: VYJ/qjVSy2HmGtgmvHoLOPXTUBBAf8syxAzQSjcRmvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:81:ed:4b:55:22:2f:ac:3d:b4:9f:e0:2b:1b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Sep 25 21:01:27 2026 GMT
Not After : Sep 26 21:01:27 2026 GMT
Subject: CN=77e321d69ab1826dbc7574829b378cd5f087d8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:ac:81:1b:f9:79:a9:6a:1a:3f:08:a8:23:
97:0a:0a:99:bb:ac:06:cc:87:c7:89:dc:51:36:d0:
14:44:c6:3a:eb:80:ad:cc:1c:d7:32:47:3d:6a:75:
ee:8a:8e:f6:06:c6:73:b9:b8:d0:1e:94:7d:e4:a1:
d8:59:e0:4f:cf:11:97:28:1a:57:aa:e7:69:67:d2:
75:e6:f0:31:9c:8c:ed:f8:2d:f9:cb:e7:21:ad:7d:
06:5a:54:96:44:b0:16:0f:db:64:b6:db:48:52:76:
11:df:ba:71:64:1c:bb:a3:7e:4b:ec:2e:29:96:a0:
b3:11:06:d8:86:d2:47:e1:94:e7:60:cb:97:1e:b8:
21:05:fc:65:ca:6a:9d:ed:1f:98:38:da:c4:22:c0:
35:5a:99:a9:e1:cf:fe:6a:69:6d:d5:b6:12:67:4a:
51:46:5d:19:69:49:c4:8d:5f:8a:01:9d:20:d8:56:
32:25:3e:5d:f3:c6:52:e6:23:91:a3:13:b1:b6:db:
ca:0a:36:aa:81:bc:ea:54:33:26:aa:08:3d:b8:4a:
4f:d8:71:56:f1:1f:f2:23:ae:8f:65:09:9a:d8:23:
5a:90:89:e3:0c:96:d6:c9:d3:fa:0f:76:89:07:4a:
e1:0f:83:c0:0e:73:32:e7:cb:a7:5a:e2:a3:52:94:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E3:21:D6:9A:B1:82:6D:BC:75:74:82:9B:37:8C:D5:F0:87:D8:D2
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:10:04:63:b9:34:1f:a2:80:ff:da:4d:80:19:89:b0:a1:60:
de:b9:30:64:21:c3:f8:de:f4:3f:b7:70:58:86:d4:cf:2d:6d:
bb:5c:90:90:79:38:39:44:2c:0b:75:d6:22:43:11:5f:af:a1:
10:57:c0:f5:55:57:04:00:26:f1:cd:41:12:56:04:72:29:f9:
3e:37:d0:ea:d1:02:9a:d6:c3:c9:9d:88:ee:ed:02:d5:79:02:
c5:a4:d4:e6:1c:91:49:8d:2a:45:5a:39:35:b2:3b:ec:16:7c:
fc:64:91:1a:94:c0:12:be:99:95:02:79:84:d4:6f:2a:df:cb:
6b:a0:1b:48:d7:84:9d:1c:76:a2:30:25:b9:a9:9f:ce:d5:8c:
d2:02:d8:7e:b8:bc:bb:a8:ab:c3:95:a4:7f:b1:b9:94:e0:55:
13:37:e9:18:8b:71:7a:58:10:92:8e:ac:58:b5:d7:2f:f0:4c:
f0:f8:34:54:74:58:71:26:0b:73:95:d8:82:7a:45:58:24:e6:
e1:80:ce:1f:7c:b5:cd:a1:fc:2a:cc:26:6a:06:e5:55:38:fd:
88:13:26:2b:95:02:fb:a6:b0:fa:bd:d1:d7:b7:0f:a0:2d:58:
7a:8a:da:fb:59:ba:b6:5e:db:dd:00:70:fe:cf:4f:5d:04:7d:
43:fb:96:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:38:42 2026 by rpki-client