Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
File: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json)
Hash identifier: FGfjfFpYZJAg/3h/eYUC4nKs20fYJdrhgECfdiW62bw=
Subject key identifier: F9:1D:0A:CD:DF:51:FE:2D:41:21:2D:51:1B:03:B5:CA:B6:83:D3:F5
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Certificate issuer: /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial: 01A130D8BE0EA3C1D96DA0335F30AC43D4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
Manifest number: 1A9B
Signing time: Mon 12 Oct 2026 16:01:13 +0000
Manifest this update: Mon 12 Oct 2026 16:01:13 +0000
Manifest next update: Tue 13 Oct 2026 16:01:13 +0000
Files and hashes: 1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: e/Hfm26/Heqn+77r3w62cMrkDGbctKzhv6TQKy5SVqM=)
2: pUIM7v10t5OGFrSPmfiKdj44TIc.roa (hash: Oo445ykGaPumhWQXMGT+U7KwU/ygHDEsLqsafB1c140=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:d8:be:0e:a3:c1:d9:6d:a0:33:5f:30:ac:43:d4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Validity
Not Before: Oct 12 16:01:13 2026 GMT
Not After : Oct 13 16:01:13 2026 GMT
Subject: CN=f91d0acddf51fe2d41212d511b03b5cab683d3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:17:90:42:df:9a:f3:10:b2:d7:79:d9:11:
5f:1d:52:24:da:db:88:5b:48:6f:5c:17:d0:71:da:
fd:e1:df:49:a2:ab:c3:91:de:b7:ab:43:53:59:81:
0d:34:dc:3b:18:25:af:9e:73:09:ad:91:b5:eb:0f:
74:82:13:8a:d3:7f:f1:9a:02:02:c1:87:44:39:4b:
8f:9d:3c:88:be:5f:ca:6d:49:1a:38:c1:59:5c:2c:
de:e7:53:f6:78:66:ae:b8:eb:e9:a7:65:dd:df:1c:
0f:4c:7d:07:5f:a6:f3:1d:e2:27:81:1f:c2:d4:47:
0b:74:ce:26:6e:e0:2e:b8:ce:10:ab:fc:10:93:1b:
c9:27:58:dd:aa:88:23:85:1e:5a:77:ed:86:23:e0:
e1:48:df:cb:5b:cc:9c:b7:e0:90:05:13:a9:f3:2d:
cc:f5:ba:55:20:61:62:05:72:06:13:ec:00:74:9b:
fd:99:92:1d:97:f6:dd:9b:a5:23:57:b3:d7:b7:e4:
78:6a:ac:7a:7b:0c:42:6f:cb:f8:68:fe:88:3a:9f:
74:c0:5a:f9:34:51:a9:0f:d1:c7:be:47:b7:ab:2e:
93:4d:b5:4c:1b:14:03:8f:cd:25:3c:a6:c2:18:3f:
b3:e5:71:43:70:8f:19:07:f7:10:83:69:fe:7c:62:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1D:0A:CD:DF:51:FE:2D:41:21:2D:51:1B:03:B5:CA:B6:83:D3:F5
X509v3 Authority Key Identifier:
keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1c:d7:db:43:54:85:93:8c:fa:8a:be:ef:71:9b:32:4f:56:
ca:a8:2f:84:d4:f6:75:90:51:37:86:2b:48:88:e7:70:64:2b:
b1:cc:38:50:85:0d:d0:59:3a:3f:92:5a:52:2b:92:1c:50:09:
6e:49:46:e3:86:89:1f:76:04:a9:7b:66:87:8e:51:0e:58:87:
5d:09:16:85:e2:9b:3b:12:6d:13:40:6d:0d:74:38:0a:61:26:
5a:0d:0d:dd:4f:b9:52:90:98:67:8f:c2:2b:4e:29:e6:77:62:
0e:1b:11:2f:24:50:da:20:88:86:7b:6d:7e:5f:61:bd:6b:e5:
d6:94:3d:3a:5b:6e:f5:b4:e4:24:08:99:80:4b:0f:6c:67:6c:
46:49:31:04:e7:8d:8b:cc:c2:93:8f:ec:5a:ce:39:f3:31:50:
4b:7a:8c:e7:92:a9:f5:6d:8d:c7:1c:29:5b:d9:6b:d5:96:53:
45:7d:b4:7b:fd:21:6a:0c:a0:6c:94:ff:e8:98:ac:ff:75:57:
28:9f:24:bd:81:f9:b6:23:a0:20:ef:e8:d6:41:38:0e:f2:a0:
55:e2:d7:47:71:2f:69:7f:82:bb:5c:45:92:bd:19:c2:81:c0:
6c:dc:89:39:48:ee:d7:aa:a6:2c:1f:0b:8c:21:7a:20:47:d3:
ca:67:26:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:43:23 2026 by rpki-client