Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
File: dzDRbvGVhk8NvoqGca-2N2g7djs.mft (raw, json)
Hash identifier: pFP9DxVnCsMmW0TNy3xMxptaFhXffzxO1BAzWJaTU64=
Subject key identifier: 4D:9F:3E:C8:A0:89:95:94:A7:50:B5:0F:83:9B:C3:EE:6E:44:0C:66
Authority key identifier: 77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B
Certificate issuer: /CN=7730d16ef195864f0dbe8a8671afb637683b763b
Certificate serial: 01A0C9A1E7533158C10C86511CC603EF651B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
Manifest number: 0386
Signing time: Tue 22 Sep 2026 15:00:25 +0000
Manifest this update: Tue 22 Sep 2026 15:00:25 +0000
Manifest next update: Wed 23 Sep 2026 15:00:25 +0000
Files and hashes: 1: dzDRbvGVhk8NvoqGca-2N2g7djs.crl (hash: NN+dQSb/ea5prVp4BVw/1Vfl+2lpPBhp+2CN4TWSM7s=)
2: o2VO5oX-mcICPglQ6TuJXF-puG0.roa (hash: QGvRH3mpnPRRYbJ9WRorNDsxj8CF3Y8SPJsGxZhiJ6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:e7:53:31:58:c1:0c:86:51:1c:c6:03:ef:65:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7730d16ef195864f0dbe8a8671afb637683b763b
Validity
Not Before: Sep 22 15:00:25 2026 GMT
Not After : Sep 23 15:00:25 2026 GMT
Subject: CN=4d9f3ec8a0899594a750b50f839bc3ee6e440c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:f6:8c:f8:69:08:a8:71:63:eb:f4:89:75:
79:4e:b7:ea:0a:ee:9d:f6:4c:6a:ba:f2:11:c1:b4:
2f:7c:c4:2c:ed:a9:6c:57:01:77:de:43:ec:b7:ea:
54:1d:f7:aa:f1:32:2a:93:aa:75:6e:4a:e7:fd:02:
a3:f6:f8:92:8e:fe:00:4b:1d:c7:f4:9c:ab:51:fc:
b8:af:78:a2:e0:c5:b1:5d:6a:f3:2f:b4:b9:d9:f6:
e9:63:27:e6:2a:58:30:51:43:0c:c3:8b:1c:13:0f:
90:b0:e0:64:a0:05:9b:00:43:f3:6d:4a:f3:11:05:
eb:14:0f:58:60:14:e1:81:a2:ba:27:c7:7c:2c:43:
7c:8f:a9:c3:5a:d0:e8:07:7b:f7:4d:66:c9:7f:db:
4d:cc:df:6e:79:ed:fa:c3:82:ea:29:5f:54:a0:c6:
41:c5:80:5d:c8:0c:be:e4:50:a1:32:94:13:ed:02:
63:84:4e:7a:a2:39:5a:ef:7f:ae:0d:33:ac:9f:0b:
de:02:94:2b:31:17:e2:75:51:90:2f:9d:25:25:0f:
1c:9a:a3:c3:93:27:3d:05:b3:5a:73:0a:75:99:90:
b8:c9:da:03:bf:02:33:ca:9d:03:06:16:10:0f:5a:
17:67:3f:59:7b:b9:57:c1:1b:cd:5d:0b:43:d6:bf:
e3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9F:3E:C8:A0:89:95:94:A7:50:B5:0F:83:9B:C3:EE:6E:44:0C:66
X509v3 Authority Key Identifier:
keyid:77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b2:ae:20:fb:d3:4b:a9:88:95:59:fe:a7:68:33:6d:07:67:
4e:9b:6f:bb:4f:4e:ff:d7:bc:1f:1e:41:86:a1:9e:9d:00:a9:
22:40:7a:a8:2e:e2:14:e9:52:9a:55:57:a9:c2:77:e5:39:61:
a1:10:2d:bd:e5:43:37:50:62:e4:50:2a:9b:c8:49:02:74:fa:
ef:e7:c5:e8:fe:22:76:cb:d4:e6:86:15:84:8d:ca:3f:74:ec:
5e:39:e0:7b:b6:cc:a2:6e:b3:dd:2d:3c:99:b3:4c:9c:90:4a:
9b:cc:45:40:d8:9b:fa:c6:95:8b:d0:fb:3d:56:a5:e1:e2:4f:
e4:36:6d:d1:7f:95:e2:6f:b7:b5:58:50:cc:14:38:5e:80:de:
cb:a4:be:a8:ad:0e:d3:f8:f6:5f:6e:e2:08:02:90:df:aa:4e:
a0:75:e1:71:d3:95:91:69:4f:3b:fc:84:6b:88:a8:a5:05:a2:
85:4d:50:b4:7e:47:d0:69:19:ac:25:db:ff:2c:1d:3e:71:a0:
6d:b8:b3:23:2c:b4:d1:aa:09:4a:5d:bc:75:80:a9:02:31:50:
9e:6f:0a:e4:a0:9c:40:f5:4b:3c:b8:b0:f2:08:06:a3:50:a2:
1a:d9:f4:dd:4a:f8:7f:1e:13:94:0d:88:43:a2:cb:f1:d2:85:
cb:2b:0f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:57:37 2026 by rpki-client