Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json)
Hash identifier: AlD8POutOZyXUycunCrIRR0ySwz2PUpo3zpOBzkHaVI=
Subject key identifier: 88:63:96:BF:C4:AD:16:42:65:D0:17:2D:D8:3D:EA:8D:49:81:98:5F
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 01A0C4E9FD0BAC1E3F55405F401240A217F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
Manifest number: 07E9
Signing time: Mon 21 Sep 2026 17:01:03 +0000
Manifest this update: Mon 21 Sep 2026 17:01:03 +0000
Manifest next update: Tue 22 Sep 2026 17:01:03 +0000
Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: S3xZXrbjdTcbRRJGc+twozVfWOvH8gyXjkxnVa/uhEU=)
2: elu1abDHd3RfzpApGEKnDnwdAcI.roa (hash: HHOSPK0nfYS+xwtq8H1DXb/qJlWmVpm7P0B6dxlEAcU=)
3: ygV7k6nVaZCAnScNFHt4paZc8MM.roa (hash: Fv0BlTXpeeDK0QHZ/q3zQcl9lKT33vm1AnUd5vQrW08=)
4: yi7x-mBtwQeg8FprNLWvslMCrZg.roa (hash: 5V/O65AIDW9qxW7W9/IyUH97d/aU4p9WBBDyRlN9KG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:fd:0b:ac:1e:3f:55:40:5f:40:12:40:a2:17:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Sep 21 17:01:03 2026 GMT
Not After : Sep 22 17:01:03 2026 GMT
Subject: CN=886396bfc4ad164265d0172dd83dea8d4981985f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:c4:6b:d0:6a:3e:58:d6:73:ed:7a:d9:aa:
b3:0c:70:4a:f1:7e:9d:5e:d2:2f:95:57:14:b8:a6:
c9:38:fb:73:3f:f8:04:77:30:31:f5:5a:50:06:b6:
92:9b:19:4a:70:0a:24:37:33:d9:c2:a7:ba:d7:ad:
70:1a:3b:45:66:79:c3:7f:d9:2a:11:d3:f4:b5:b3:
c0:0e:9b:25:ce:bd:31:57:2c:25:b4:cf:79:69:59:
81:e9:b8:17:12:14:2a:7b:86:9e:62:e5:f3:fe:40:
4c:42:76:c5:35:e3:19:ec:80:68:dd:7c:e8:04:ea:
ca:60:ab:af:39:a0:12:19:e6:27:c3:fe:4b:15:a8:
75:89:13:db:64:58:34:e6:30:f6:4e:68:fd:f5:e7:
81:bc:a8:f1:60:ee:aa:8a:19:bb:19:27:59:3a:3d:
f4:93:b5:90:33:42:a4:7e:1b:37:7e:31:e5:53:c7:
23:5f:72:b0:b9:70:12:7d:f8:2d:9a:ff:53:8d:ac:
bf:52:7a:73:44:95:c6:d6:fb:23:b4:75:aa:54:2c:
db:11:e3:31:28:5b:69:d8:00:d1:ea:4e:6f:32:c7:
cc:10:9e:8d:a2:03:dd:08:c6:d4:7e:ab:3c:dc:4c:
9e:5b:15:9a:35:d9:70:63:b0:94:29:77:04:93:0c:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:63:96:BF:C4:AD:16:42:65:D0:17:2D:D8:3D:EA:8D:49:81:98:5F
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:67:7c:bd:4e:3d:cb:1a:50:0c:62:a9:0e:c5:ed:b8:45:41:
97:6f:15:88:7d:2f:10:fa:68:66:3c:c4:70:ed:75:8a:d5:06:
45:dc:e0:05:d1:46:80:df:56:c9:30:40:48:b3:e7:65:a4:53:
5b:5f:0c:6a:f7:18:0c:bb:83:95:12:01:3c:58:23:ba:dc:cf:
03:c8:35:2d:f3:78:77:6b:d2:82:af:f8:9b:a3:72:59:a5:09:
ae:99:0c:ab:91:d8:91:98:be:0b:64:3d:ad:99:57:db:8f:01:
5d:33:a3:51:e2:f7:9a:b6:bd:19:a0:69:0f:9c:4d:05:49:23:
fa:a6:07:67:27:03:ef:f6:c9:e7:73:7c:e0:6f:a5:20:0f:0d:
1e:04:53:aa:34:8c:f8:4c:ff:b9:ea:ae:f9:e5:74:fc:41:09:
b5:c5:49:ab:01:d8:e4:6a:18:04:f1:12:68:26:8f:91:b7:16:
58:19:89:c1:48:2c:6f:d8:2c:e1:51:ab:d1:5f:c2:b6:56:6b:
6e:eb:88:20:9f:e0:ef:af:fb:1d:0b:50:f2:b8:19:0a:4b:8d:
6b:dc:5f:04:bb:35:63:36:1d:ce:ed:81:e4:76:ad:b6:82:7b:
43:95:22:6b:cd:dd:3f:4f:9c:fc:17:8e:db:e6:87:64:32:15:
6e:71:eb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:29:52 2026 by rpki-client