Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
File: DZxWoYyYei0aLnBEt-MbMhv3rBY.mft (raw, json)
Hash identifier: 8INA5bPwhaz9E52OOlXfccwtFPamImVbOkgaONpkw6w=
Subject key identifier: 3E:F2:E7:7A:3A:6B:DC:04:98:BA:22:75:10:F6:13:27:58:06:97:17
Authority key identifier: 0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
Certificate issuer: /CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Certificate serial: 01A0C5FC816F085FB8533BE49FA5A5FCE652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
Manifest number: 0BF7
Signing time: Mon 21 Sep 2026 22:00:54 +0000
Manifest this update: Mon 21 Sep 2026 22:00:54 +0000
Manifest next update: Tue 22 Sep 2026 22:00:54 +0000
Files and hashes: 1: DZxWoYyYei0aLnBEt-MbMhv3rBY.crl (hash: JVbn8JpPLK2sKVIAvbsOkUMnkHdCxoBVK/qC1xtKIQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:81:6f:08:5f:b8:53:3b:e4:9f:a5:a5:fc:e6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Validity
Not Before: Sep 21 22:00:54 2026 GMT
Not After : Sep 22 22:00:54 2026 GMT
Subject: CN=3ef2e77a3a6bdc0498ba227510f6132758069717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ce:75:c2:b1:b2:d8:07:cd:99:53:87:8b:69:
13:0b:99:ef:a5:3f:80:19:d2:2e:3c:3a:7d:ad:60:
46:9b:e8:eb:88:b4:81:32:1f:35:65:c9:a9:cb:41:
8d:72:9c:33:90:e5:a8:8f:80:22:4e:b6:a7:81:76:
4a:58:e5:b5:98:b3:6a:31:45:36:98:b2:e3:48:81:
5d:de:cf:6f:e6:96:35:5e:28:46:4a:1c:20:b1:10:
84:bc:0c:c9:37:5c:68:7e:bc:88:8e:5a:e5:f2:f8:
b8:7f:9b:e2:b4:a0:1a:f3:cb:7e:63:b4:b2:24:6f:
57:ca:3a:28:d3:f2:48:0b:76:4f:f6:72:0f:92:72:
3c:fd:21:9e:9c:d3:d1:bc:ed:5e:e3:e1:63:7a:43:
00:19:56:a2:a7:41:44:22:37:ff:3b:49:35:4d:d4:
17:1b:a7:06:5a:e3:8a:0e:fc:d7:e6:0b:bb:4c:fd:
06:8b:74:2a:87:43:93:c1:cc:78:92:09:d9:0f:e0:
37:d8:1c:6d:c4:48:6a:c3:f6:a8:ab:a9:37:97:78:
32:7d:56:87:4e:cf:e9:0a:7d:4d:f9:45:87:4d:08:
36:90:42:8a:58:50:80:58:4f:bc:27:41:61:6a:d1:
b3:94:f7:ad:0b:c9:a7:aa:00:fe:fe:a7:81:a0:e7:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F2:E7:7A:3A:6B:DC:04:98:BA:22:75:10:F6:13:27:58:06:97:17
X509v3 Authority Key Identifier:
keyid:0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:64:28:85:c3:b4:49:33:8e:6b:e9:c8:01:65:c3:a8:64:fa:
6d:05:09:7d:f8:1a:cc:c8:df:4e:70:c2:08:76:fb:78:fa:2d:
53:61:90:f5:a2:35:09:22:e7:01:d8:39:6c:58:27:07:15:4d:
2c:71:52:f7:45:83:be:66:65:55:c3:08:ca:a4:0e:28:ff:03:
7e:b5:ef:2f:c7:4b:fc:af:8f:48:ea:64:80:71:78:41:f5:0f:
2a:45:26:86:2e:61:8e:85:30:b5:d7:97:0b:0b:ec:5a:17:a5:
c8:f8:8d:54:c1:83:04:c5:77:e5:e8:5c:7f:f5:72:8d:fa:77:
a3:c9:b8:d3:6c:75:5d:7a:21:e8:45:91:eb:05:39:7e:c8:02:
97:b3:32:52:6a:a7:41:b0:bb:26:8f:03:d6:eb:68:e7:78:fa:
37:39:56:2b:c1:1c:93:20:42:11:38:72:6d:69:94:05:dd:48:
2d:4a:70:be:25:62:9e:0d:00:32:51:57:bc:88:9d:9e:06:d4:
ed:c9:55:48:97:18:ac:c3:ec:2f:49:e9:1f:41:95:92:9d:aa:
39:c4:b4:98:ec:01:62:48:e7:41:fc:cf:e1:c7:ec:2d:91:93:
64:c6:54:ea:65:eb:49:65:35:b8:ae:eb:e7:62:db:94:ca:b5:
ea:8f:e5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:09:42 2026 by rpki-client