Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
File: DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json)
Hash identifier: 3OLsck/CIxcat88+Ow05M6zrObbY5Sn9vInpyirtvcY=
Subject key identifier: 3E:19:5A:6B:50:80:24:0C:03:5C:80:BC:9E:AB:3B:DD:21:13:B4:C3
Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
Certificate issuer: /CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Certificate serial: 01A0DA2932AA763DBF8A281C7A19E5241354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
Manifest number: 070F
Signing time: Fri 25 Sep 2026 20:02:07 +0000
Manifest this update: Fri 25 Sep 2026 20:02:07 +0000
Manifest next update: Sat 26 Sep 2026 20:02:07 +0000
Files and hashes: 1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: XLUeQYvU6Rh4i+YU8IaxTN/buwLXGAUTkxcecUCw0Jc=)
2: wUZK58GnfnXrFcL-rJ6SW3dQ9lM.roa (hash: tpiKkysQtleOXY8s7JxmnW98sGuzWNG7qUWUKxa7byA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:29:32:aa:76:3d:bf:8a:28:1c:7a:19:e5:24:13:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Validity
Not Before: Sep 25 20:02:07 2026 GMT
Not After : Sep 26 20:02:07 2026 GMT
Subject: CN=3e195a6b5080240c035c80bc9eab3bdd2113b4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f6:fc:a6:ce:8f:20:35:89:07:c7:78:32:50:
4a:ff:72:fd:59:15:8d:62:30:8e:0a:83:ac:88:95:
e2:5c:5d:73:85:21:d4:da:86:60:d6:08:7b:31:da:
8f:99:7a:36:99:c5:d0:7e:c8:3d:8d:34:ca:43:45:
5f:ef:4b:51:d1:a5:3b:40:ad:86:d7:fd:fa:3e:52:
43:c0:6d:37:bd:8f:c3:29:f4:8b:10:1b:4a:9c:55:
73:df:d6:bf:31:18:8b:a7:60:84:b0:b9:16:3a:a0:
be:8b:14:38:4c:4a:7f:47:8a:a8:51:35:11:0b:19:
2a:b1:c2:73:aa:71:09:c9:1b:1c:49:b7:a4:8b:b6:
97:a3:f2:87:ac:32:09:37:b9:3e:ab:32:57:5f:da:
d5:2f:52:05:b5:e9:70:a9:3f:32:76:7d:f9:48:69:
85:17:5e:f3:0e:fb:15:40:38:08:69:83:ed:7c:e5:
74:79:76:c9:10:c0:10:9a:bd:83:23:7a:43:88:ce:
ef:57:d3:29:fa:e3:f6:6d:5b:ac:32:7d:eb:1c:fd:
0f:f4:53:de:ed:cb:44:5d:95:d6:af:20:9a:70:11:
8f:40:32:74:f5:46:68:a6:73:4c:6a:40:73:c3:df:
66:30:25:a1:51:cc:0c:da:9e:fe:94:9f:93:af:1f:
20:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:19:5A:6B:50:80:24:0C:03:5C:80:BC:9E:AB:3B:DD:21:13:B4:C3
X509v3 Authority Key Identifier:
keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ed:34:ec:aa:27:eb:ba:6b:e1:c1:1b:ac:cd:54:af:71:dd:
f8:cc:b1:52:f1:02:d0:b8:c9:3b:06:ff:91:2e:a5:c8:ea:ee:
32:8f:4d:da:77:e4:58:cb:51:94:25:56:c5:19:19:d8:ef:7c:
92:77:72:20:3f:61:84:dc:59:e0:28:1d:c5:69:a2:cd:65:6c:
fc:73:bd:ad:63:19:94:47:98:12:b3:4b:81:89:02:fd:26:bc:
5b:04:97:bc:a8:48:35:4d:18:79:77:70:b5:02:1c:90:92:79:
6b:4c:22:d4:aa:5e:5f:43:f3:31:0d:92:88:4a:18:2b:5c:08:
c8:57:0f:18:d0:27:b7:45:c1:1a:be:8e:5a:8c:e8:1c:cb:d3:
61:bf:11:18:99:93:ee:cd:db:6d:84:6d:5a:2a:85:f6:49:2f:
d5:4d:76:d0:da:2c:7d:b9:a1:ca:05:6e:5c:93:3e:52:65:b0:
c4:6a:1e:ec:35:0e:0f:89:1f:14:23:19:e3:c9:5a:01:91:a3:
3d:b9:f0:90:a0:76:97:15:c9:21:40:7f:70:30:a3:89:db:5d:
50:1c:b8:8f:3f:a4:41:27:88:b8:eb:1a:cf:f2:8e:a1:59:b1:
86:e3:e5:0a:45:aa:6f:45:e4:92:94:74:9d:69:28:11:42:01:
e2:88:a3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:43:28 2026 by rpki-client