Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: NCY1AS4Ozhy7PHeijc5t/4SueaaEw2o1iurKWN3Su1g=
Subject key identifier: 8A:96:95:2B:00:84:29:AB:A8:F6:E8:A6:A3:0B:21:51:53:DB:4B:39
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 01A0E69A717CDA00E006BA06CD387B63B06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 076A
Signing time: Mon 28 Sep 2026 06:01:16 +0000
Manifest this update: Mon 28 Sep 2026 06:01:16 +0000
Manifest next update: Tue 29 Sep 2026 06:01:16 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: 17YmSwD07JayQKuPiAsDqzm8V3ea4rvVO5DC0oI4Q70=)
2: w8wkCFScjGQvdttAQ8x_xzp50Xk.roa (hash: w/c38fhRy3be0XuDkxP9zkUOolRFgZszn3JD1Qb99Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:9a:71:7c:da:00:e0:06:ba:06:cd:38:7b:63:b0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Sep 28 06:01:16 2026 GMT
Not After : Sep 29 06:01:16 2026 GMT
Subject: CN=8a96952b008429aba8f6e8a6a30b215153db4b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:70:8b:fe:86:64:f6:4b:04:54:d6:be:d8:
95:b8:32:a8:7b:a7:7e:f8:1c:ca:ba:84:50:b1:96:
d6:e5:c4:07:68:39:1f:82:30:6a:cd:cf:41:6d:21:
3a:85:a2:54:61:de:7c:6c:6b:cd:e5:d5:35:f9:61:
4e:47:ee:44:c9:0e:98:95:d8:8e:f1:8d:51:7a:4f:
7f:71:34:48:4f:e6:f6:69:2f:73:3f:7d:a0:ff:4e:
62:31:2e:a4:5a:24:8f:ac:73:1c:5d:14:1c:db:c8:
26:a2:f8:c4:9c:73:79:50:2d:92:af:77:e4:5e:af:
6c:dd:b3:b0:fb:9d:2f:68:65:33:b6:e4:97:c6:df:
bb:29:71:32:dc:0d:f1:8b:cc:1a:f9:6b:fd:1a:2e:
b3:dc:4d:5c:57:1e:7e:19:27:af:e2:49:87:aa:67:
a0:40:bd:f3:4f:40:f5:36:d8:1f:bc:fb:35:e6:31:
99:82:b3:fe:40:fc:8d:26:44:69:7a:43:60:b0:8a:
90:8e:8d:d4:04:41:76:b9:ed:ca:81:5b:0e:e8:ec:
52:78:e4:5b:8e:2b:d2:e8:b3:14:96:0f:b8:c3:64:
16:36:b9:ff:7c:b0:ce:b9:64:6c:ab:a9:05:42:12:
ad:b8:7d:df:a3:a9:6f:cb:11:8f:c9:f6:9a:09:a7:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:96:95:2B:00:84:29:AB:A8:F6:E8:A6:A3:0B:21:51:53:DB:4B:39
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:14:04:b5:b5:1f:f3:6d:77:bb:cd:e9:c7:27:e4:0b:ba:e0:
0e:7d:55:77:76:a0:2c:ae:26:a8:9a:10:12:0f:b0:07:cb:01:
ac:4c:45:33:d1:e8:6e:58:22:e8:89:8c:05:63:fd:be:e7:1f:
f1:ff:f5:03:3f:c6:05:d7:2c:de:de:ea:3a:af:02:b9:82:23:
da:a1:5b:18:c2:c9:ee:82:c1:4b:88:84:7d:aa:68:5f:11:a1:
45:97:f3:9a:1a:60:6b:83:74:b8:02:8d:82:87:2f:75:71:62:
85:a1:31:b7:ab:97:69:20:2a:c7:48:df:8f:3b:17:30:0d:b3:
a6:ca:1d:ea:96:ae:18:f3:6f:0a:23:42:b9:a8:71:50:9c:ef:
e6:da:21:de:dd:87:16:98:b5:a5:39:cf:30:72:5e:76:7b:9f:
98:59:0f:6f:10:63:de:7e:6a:fc:91:40:99:3f:b6:01:53:6d:
a3:62:99:8f:70:a6:a1:40:d5:bf:ff:4a:ee:15:15:e9:bc:31:
9c:20:7d:1a:fb:24:af:f4:a8:c5:89:e1:b6:de:0b:48:b1:7e:
a8:6d:2d:06:5c:a6:db:55:83:a2:a0:2e:1e:16:75:b4:7a:3e:
bd:3b:53:71:80:72:ac:9d:14:0a:15:ca:7b:dc:a6:61:78:68:
d0:57:50:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 15:23:02 2026 by rpki-client