Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: QDp66TgM1L7VH9jaVhr3h8KG+UYeTQiJWhwQLr4w9gs=
Subject key identifier: 68:3D:12:84:5B:79:41:B4:76:78:25:F4:90:78:47:DC:36:F3:E8:D3
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 01A0C332529301E617FA9790CB23F997BEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 07CC
Signing time: Mon 21 Sep 2026 09:00:49 +0000
Manifest this update: Mon 21 Sep 2026 09:00:49 +0000
Manifest next update: Tue 22 Sep 2026 09:00:49 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: OhOZQrW1AqKY6iflIbZg4ZQj96weGpihvkCwbwqseBU=)
2: P-p2NxW9TFmZAwW03gw6xGVVFZc.roa (hash: VYJ/qjVSy2HmGtgmvHoLOPXTUBBAf8syxAzQSjcRmvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:52:93:01:e6:17:fa:97:90:cb:23:f9:97:be:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Sep 21 09:00:49 2026 GMT
Not After : Sep 22 09:00:49 2026 GMT
Subject: CN=683d12845b7941b4767825f4907847dc36f3e8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:f9:aa:e8:eb:17:06:43:74:0b:2e:1a:07:
0e:0b:fe:2a:ca:dd:13:b5:76:2a:00:df:0d:5e:71:
c6:ee:2a:ec:b8:af:7f:f3:ba:8a:19:c1:fc:a7:73:
3f:15:52:cd:bc:e0:63:25:b7:4e:3f:9d:25:9d:4a:
dc:6d:df:15:9e:e8:db:0d:ff:fa:f5:4a:75:33:99:
86:c1:67:52:d7:cd:1b:cf:54:15:41:b4:57:56:19:
75:05:af:d9:bc:ba:bf:f5:a1:77:c2:5b:f0:c3:96:
64:94:8e:56:c5:a0:b4:d2:9e:69:38:37:af:d9:e1:
88:5a:fd:2a:ed:11:b9:68:bb:d8:71:08:a7:ee:35:
b6:7c:9e:e5:6b:71:cb:09:f6:f0:8e:85:da:11:62:
05:30:00:32:40:4a:f2:d7:a7:0c:6c:5a:5b:45:49:
d9:3d:70:8b:9a:15:16:b0:94:df:69:54:bd:41:60:
dd:de:61:43:03:b9:02:48:78:ca:aa:49:10:c5:74:
fa:ae:49:e9:9c:4d:9f:11:cc:c8:1c:10:bf:d9:db:
3a:7d:50:85:8a:ec:d6:d8:39:9b:0e:f0:89:c9:47:
d8:58:0a:4e:d0:5a:4f:6e:e2:58:c0:d6:ca:ba:c8:
b1:27:7c:c9:9c:e5:54:ed:8e:20:cf:b5:26:46:8b:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3D:12:84:5B:79:41:B4:76:78:25:F4:90:78:47:DC:36:F3:E8:D3
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:71:a0:db:9f:27:0e:81:24:09:63:29:fc:b3:04:cb:20:8a:
e9:c8:c7:1d:86:23:00:4d:a8:22:28:93:56:93:27:c8:01:e3:
76:f9:0e:b0:ac:ad:83:2b:50:53:70:df:3e:6b:2e:58:43:82:
b3:a1:4e:2b:d5:44:a0:bd:1c:a4:1b:c2:02:f1:23:6e:7b:07:
ea:09:fe:33:e4:94:7c:70:23:83:44:51:07:cb:a7:24:8f:44:
59:ab:cb:76:1a:16:cb:6e:cb:76:06:eb:39:ac:6b:31:86:72:
d3:c0:d9:27:dc:55:86:e7:0d:d8:dc:30:f4:8e:73:d2:a1:b9:
6e:30:c9:5f:f9:8d:1b:f7:9d:1e:2a:52:a5:bf:e2:01:e2:9e:
14:52:dd:48:b3:e9:77:6d:2b:31:92:89:8e:1e:66:30:ea:34:
bc:e1:d1:d0:67:91:16:b7:65:63:e4:e8:b1:dd:12:ca:48:66:
d9:43:8e:68:c4:94:96:9b:ff:ef:52:b1:b3:a2:ac:16:52:e4:
5f:2a:14:1c:5e:f5:f3:57:b9:66:a7:1f:e2:b3:44:d0:06:fd:
65:11:92:b1:1d:df:e9:12:ab:be:d8:c4:ab:53:e0:dd:de:af:
90:7c:34:8b:d5:67:ca:9a:cf:fb:f3:a2:0d:40:ad:3b:6d:17:
8a:7d:29:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:29:52 2026 by rpki-client