Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: nS02InsbuWS7+rl7ZuLN0l2Np7btUklpJjiO6EeKhI4=
Subject key identifier: E1:D9:A0:47:FA:A9:A2:9F:95:EC:D2:8B:D8:86:11:17:FE:AD:34:BF
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 019F90C7E707DD36332C2289F9693C5C0476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 06B9
Signing time: Thu 23 Jul 2026 21:00:47 +0000
Manifest this update: Thu 23 Jul 2026 21:00:47 +0000
Manifest next update: Fri 24 Jul 2026 21:00:47 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: L3SZKGnZDKvUTu6FZbQqCjMNP+yEGY7Krb3JlzeIWd4=)
2: w8wkCFScjGQvdttAQ8x_xzp50Xk.roa (hash: w/c38fhRy3be0XuDkxP9zkUOolRFgZszn3JD1Qb99Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:e7:07:dd:36:33:2c:22:89:f9:69:3c:5c:04:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Jul 23 21:00:47 2026 GMT
Not After : Jul 24 21:00:47 2026 GMT
Subject: CN=e1d9a047faa9a29f95ecd28bd8861117fead34bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ee:0a:49:ae:0f:3f:4c:b0:39:68:4d:ae:43:
be:92:b3:84:df:23:51:79:cb:68:03:90:a5:72:ab:
1c:19:3f:66:d4:ae:a8:c1:3e:e8:1a:e0:79:c1:7d:
74:c6:27:82:02:75:d9:4a:6b:e7:ab:f5:9b:4b:6d:
56:1a:3f:e9:65:f8:85:9d:32:16:06:69:ad:7d:73:
91:06:8e:2b:ec:8d:47:82:c7:78:f4:d7:f9:00:53:
43:1c:06:d9:db:cd:d2:74:4f:41:9e:7f:67:74:ac:
43:10:62:6c:2e:42:6c:50:e2:f8:9f:5a:ab:ff:4d:
b8:91:24:7b:f8:bd:a1:ab:e8:d1:cc:7f:96:2a:ea:
42:ab:62:6b:d3:8f:54:af:cc:d0:0f:8d:e4:7a:6a:
64:72:7b:7e:62:ff:5f:2f:83:ff:34:35:bc:54:dc:
0f:1a:25:b1:c6:1c:f5:d9:1c:30:6c:9b:42:c1:95:
d6:94:fa:02:06:90:3c:d4:9e:37:d3:d1:51:2a:6e:
5b:b8:d2:fb:f5:dd:8c:da:f6:10:0b:46:a9:df:79:
06:8f:3d:88:2f:db:bf:f6:34:eb:5a:54:e8:e1:6f:
e2:ca:48:cc:c3:d6:e5:c2:76:de:a9:5f:92:2c:dc:
db:1d:78:27:2e:3f:36:d6:66:34:8b:82:a4:f6:d6:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D9:A0:47:FA:A9:A2:9F:95:EC:D2:8B:D8:86:11:17:FE:AD:34:BF
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ec:7d:d8:58:4e:7a:9a:71:73:06:7e:b2:3c:82:12:2c:fd:
af:1f:4f:f1:42:8b:8d:72:f9:79:c5:5a:7a:b7:26:88:c4:11:
1c:99:97:fc:64:20:52:93:95:c3:9e:c4:c0:46:65:72:22:42:
7c:9b:0b:99:fa:6b:b7:e4:8a:f5:ae:9d:ce:c1:48:72:24:8b:
a3:a9:99:21:2b:d9:31:e7:0c:50:99:a4:75:8f:1b:72:ec:49:
89:a4:4f:ae:ec:82:69:a7:d1:0d:e7:b2:75:78:6f:7d:c2:79:
1b:b1:88:82:61:5c:90:a1:78:ce:82:80:5a:83:29:aa:64:19:
8a:a3:80:cf:2a:df:31:70:c2:53:a9:45:96:d2:7a:60:3f:07:
92:d7:ea:d8:4a:97:3e:48:5e:36:0a:1d:fa:c3:54:2c:2f:a2:
8a:7b:43:97:33:53:41:25:52:6f:69:1a:56:f9:e6:73:9c:87:
17:f3:15:27:04:63:c9:97:c9:d9:65:57:89:79:5d:db:1e:09:
dd:c5:6b:fc:b7:41:dc:91:c1:d2:23:70:8f:b6:84:19:29:5f:
4e:89:be:f7:a8:37:ee:d8:e2:26:78:1f:6f:f6:78:e4:93:73:
83:d0:3b:68:c7:55:f8:18:e0:ef:6f:be:4f:ef:5e:87:2c:1b:
27:38:e2:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx+cH3TYzLCKJ+Wk8XAR2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNWNmNzA3MzA1MTJhZWZhNzAzMDc2NjJjZjU5Mjg4ZThj
ZDI2NGMwHhcNMjYwNzIzMjEwMDQ3WhcNMjYwNzI0MjEwMDQ3WjAzMTEwLwYDVQQD
EyhlMWQ5YTA0N2ZhYTlhMjlmOTVlY2QyOGJkODg2MTExN2ZlYWQzNGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+4KSa4PP0ywOWhNrkO+krOE3yNR
ectoA5ClcqscGT9m1K6owT7oGuB5wX10xieCAnXZSmvnq/WbS21WGj/pZfiFnTIW
BmmtfXORBo4r7I1Hgsd49Nf5AFNDHAbZ283SdE9Bnn9ndKxDEGJsLkJsUOL4n1qr
/024kSR7+L2hq+jRzH+WKupCq2Jr049Ur8zQD43kempkcnt+Yv9fL4P/NDW8VNwP
GiWxxhz12RwwbJtCwZXWlPoCBpA81J4309FRKm5buNL79d2M2vYQC0ap33kGjz2I
L9u/9jTrWlTo4W/iykjMw9blwnbeqV+SLNzbHXgnLj821mY0i4Kk9tacPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHZoEf6qaKflezSi9iGERf+rTS/MB8GA1UdIwQY
MBaAFAxc9wcwUSrvpwMHZiz1kojozSZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMt
YWRmYzcyZWYwZGZhLzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMtYWRmYzcyZWYwZGZh
LzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvux92FhO
eppxcwZ+sjyCEiz9rx9P8UKLjXL5ecVaercmiMQRHJmX/GQgUpOVw57EwEZlciJC
fJsLmfprt+SK9a6dzsFIciSLo6mZISvZMecMUJmkdY8bcuxJiaRPruyCaafRDeey
dXhvfcJ5G7GIgmFckKF4zoKAWoMpqmQZiqOAzyrfMXDCU6lFltJ6YD8Hktfq2EqX
PkheNgod+sNULC+iintDlzNTQSVSb2kaVvnmc5yHF/MVJwRjyZfJ2WVXiXld2x4J
3cVr/LdB3JHB0iNwj7aEGSlfTom+96g37tjiJngfb/Z45JNzg9A7aMdV+Bjg72++
T+9ehywbJzji5g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:37:56 2026 by rpki-client