Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
File: D3jqRswh1F7WEmjUqfVnMsheIVA.mft (raw, json)
Hash identifier: GKSSs23iHVRgzq3Mcdw8wr58CoyQMRNq0FusRqn5rdw=
Subject key identifier: 35:2D:74:97:15:5C:6E:03:50:63:F4:79:29:0D:9F:58:48:0A:EB:52
Authority key identifier: 0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
Certificate issuer: /CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Certificate serial: 01A0C74638A70966230512B97128B0FBB74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 04:01:03 +0000
Manifest this update: Tue 22 Sep 2026 04:01:03 +0000
Manifest next update: Wed 23 Sep 2026 04:01:03 +0000
Files and hashes: 1: D3jqRswh1F7WEmjUqfVnMsheIVA.crl (hash: AjGp8FVgmOkhWBq8JZdEi/U5WFRU44q4tfQe/v60xiE=)
2: hFTnWGImSrItjvTZMgv5Y6qcHWI.roa (hash: pZbkXKYC4cfW4J3LrFAYotHKXZiiOIa/hV0bOys/6DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:38:a7:09:66:23:05:12:b9:71:28:b0:fb:b7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Validity
Not Before: Sep 22 04:01:03 2026 GMT
Not After : Sep 23 04:01:03 2026 GMT
Subject: CN=352d7497155c6e035063f479290d9f58480aeb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d9:79:f8:0b:5e:c7:e0:af:da:a3:83:49:44:
3d:e7:42:8e:55:e5:43:50:60:ea:eb:aa:84:c4:9d:
7e:30:c6:e8:98:70:79:1b:84:44:fc:21:77:8a:04:
52:77:c2:de:59:43:bb:66:bc:48:53:c4:fb:6c:56:
ab:d0:41:53:7e:74:0d:52:29:5e:9b:7d:5c:74:aa:
59:8c:96:cf:6d:c7:fe:50:fa:35:4a:eb:0d:1a:1b:
84:15:f9:4a:2f:72:9a:e6:71:1c:0f:a7:b3:e0:1d:
19:87:9c:66:d9:b8:a6:f6:72:cf:d5:92:fe:de:6d:
1a:da:d5:ba:8f:32:5d:c6:b3:b4:30:8d:78:b0:13:
58:40:93:68:56:15:b6:a7:6e:f9:1f:3a:04:6e:d7:
17:d3:1b:9c:28:24:a0:31:03:16:2f:4e:08:2e:38:
76:91:5c:49:24:4c:ff:48:17:36:7e:22:c1:40:c8:
47:2a:36:cc:b7:18:db:8d:72:44:c3:86:73:a1:d4:
69:01:86:85:73:88:fb:08:9c:a8:9b:0b:89:34:50:
c4:6f:c0:bd:39:5a:6f:88:97:ea:3b:37:ad:e1:fd:
7b:6e:24:08:24:d9:24:57:f2:7b:d8:e7:5a:b2:d4:
a0:28:c8:b5:1f:b2:15:0f:5a:93:26:0a:a1:30:e4:
20:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2D:74:97:15:5C:6E:03:50:63:F4:79:29:0D:9F:58:48:0A:EB:52
X509v3 Authority Key Identifier:
keyid:0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cb:15:53:8f:fc:1c:79:7a:22:db:e7:45:87:6d:cf:c5:fe:
50:26:7d:18:38:8e:b5:ca:64:d6:8a:5d:9b:27:b3:21:77:c7:
60:d5:68:4f:d1:24:6a:c6:bc:1d:a8:25:67:2b:58:94:a8:22:
a7:af:e5:00:1d:7a:78:5f:26:61:fd:22:7f:8b:28:05:ee:e5:
67:34:4c:4d:11:fc:06:16:21:1f:da:94:ba:cb:91:81:8b:23:
5c:1d:14:37:70:81:5c:a4:b7:13:ae:9c:35:80:c6:21:58:39:
ba:1a:ae:52:12:6f:51:8e:8d:ca:0a:58:c2:ee:95:06:82:97:
5e:d0:58:e0:4a:bc:ba:22:9a:08:e6:89:40:9b:64:87:b2:1e:
5e:c5:73:e1:64:3b:8f:ac:d3:12:38:e1:8f:6b:e1:22:f7:34:
7b:d8:b1:56:1e:68:72:e3:18:b3:f5:35:05:b9:97:00:65:2f:
46:29:6f:d8:d2:84:f7:a0:68:4e:93:17:d5:60:b0:d8:35:33:
84:80:6c:30:8a:6f:fe:0a:8f:ed:bd:33:97:7c:d9:6e:e1:46:
27:9a:d0:fb:54:b6:1c:64:25:c5:45:c1:e2:47:04:60:5f:27:
d0:7d:38:9f:01:ea:fb:9a:95:ad:68:60:08:a9:02:b4:9b:69:
af:c0:22:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:50:25 2026 by rpki-client