Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: flaktl0DQ6C+wg8RsKHSsIXvlK0RMGwydlltQWwN3gI=
Subject key identifier: CD:5E:13:3F:B3:39:BA:84:9E:1F:6A:CE:B7:3A:45:85:2D:F5:AF:F7
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 01A0C2C3F4B8C1CB3A275F96DC2FD312626D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 0873
Signing time: Mon 21 Sep 2026 07:00:17 +0000
Manifest this update: Mon 21 Sep 2026 07:00:17 +0000
Manifest next update: Tue 22 Sep 2026 07:00:17 +0000
Files and hashes: 1: 80qBnu2XnhFRiBmZiF038oU110Q.roa (hash: LIRyJNKQ/3u7PO7ipf6wdyHbe0bKIPQwJsid3/CO5Lg=)
2: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: wENURzquT1//mXmev0mbSBuyIr93Uz08N1Z0SeS/Oek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c3:f4:b8:c1:cb:3a:27:5f:96:dc:2f:d3:12:62:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Sep 21 07:00:17 2026 GMT
Not After : Sep 22 07:00:17 2026 GMT
Subject: CN=cd5e133fb339ba849e1f6aceb73a45852df5aff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:87:0a:28:16:fa:dc:5a:df:0d:fb:d9:99:
9f:54:2a:1e:8e:91:5b:bc:a7:b3:19:36:3f:7a:02:
35:5f:f8:4a:01:b7:91:75:cc:21:f4:bc:c2:b8:4c:
eb:41:96:23:a1:19:52:b1:88:8b:8e:00:9d:46:1b:
85:f0:9c:77:70:13:21:84:8f:e9:18:fd:3f:91:d5:
55:24:64:92:20:d7:4b:ea:4b:e2:e2:c1:ed:37:d1:
87:b5:5e:ae:b5:64:42:94:8a:c4:b7:fa:09:62:48:
2c:89:12:2b:aa:18:1e:a6:89:18:ee:11:2b:ba:4c:
73:76:49:b6:85:67:01:71:ed:2d:53:23:89:c5:8b:
f4:9b:47:be:e4:6b:68:26:b5:e2:39:40:39:dc:ab:
1b:a0:b5:32:66:e0:96:a8:0e:13:55:6a:f1:14:7f:
bc:b9:24:62:26:05:0f:09:31:39:3f:bc:b8:04:39:
39:a3:5b:11:c4:09:68:fa:49:33:07:a4:90:8d:5f:
8a:78:07:fb:99:5c:00:f6:d0:73:8f:5a:ed:45:77:
0a:04:6d:16:e0:ee:de:aa:2b:93:03:c4:a4:bb:fe:
5a:13:12:52:1a:bb:c7:c5:c5:d5:ff:4c:53:2c:74:
35:ff:ed:d2:9d:b9:4a:12:e2:a6:44:c9:8e:0d:c6:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5E:13:3F:B3:39:BA:84:9E:1F:6A:CE:B7:3A:45:85:2D:F5:AF:F7
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:7c:2f:6c:3e:cd:09:63:8d:71:75:3f:d1:f2:47:12:69:e5:
7c:22:00:7f:b9:6a:ac:54:4f:b5:93:ba:a2:51:33:6f:df:8c:
a3:93:60:6c:b6:87:6b:2d:46:2b:9c:9b:29:61:6a:af:a2:3e:
2e:c0:62:67:73:7c:43:7b:5f:04:9c:e9:e5:ac:a4:40:4e:dc:
44:05:1e:40:9d:cf:f0:2f:b4:83:8e:30:e8:f7:71:e6:c5:dd:
fc:44:7f:8e:a9:b0:07:d7:c9:9f:4e:55:e5:ba:9c:64:5a:77:
cc:23:9d:b5:01:32:b8:93:97:48:5c:86:82:3f:e2:77:6b:fc:
f6:f2:d8:75:33:22:f5:e7:10:01:bf:7e:0e:ed:ca:45:6c:c0:
1b:2a:95:1b:3f:2f:52:e5:65:63:bc:a6:c7:97:95:b4:a1:6d:
25:c6:37:c8:48:ae:52:83:24:6b:30:10:0b:7c:01:a3:85:79:
87:cd:a7:42:a6:bc:68:a1:c5:6c:2c:04:cb:24:d0:8c:3a:25:
29:47:ab:22:3b:c8:14:90:f3:72:bd:ed:bc:85:db:56:61:9e:
af:82:35:bd:2e:4c:a5:e6:5e:5a:f4:3a:89:bb:96:e4:62:a6:
cf:29:ba:a0:2e:f3:4c:d2:50:e1:33:52:0f:06:1a:f3:a6:7f:
73:78:f2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:24:13 2026 by rpki-client