Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
File: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft (raw, json)
Hash identifier: YZ4nFsV5zP80MFfC/bkNSRS4HL9M5jpuPGo/KnwylAU=
Subject key identifier: B4:D3:65:DF:5D:3F:15:36:34:EC:6E:2B:4E:17:B8:5B:21:84:3B:C8
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Certificate issuer: /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial: 01A0C1E844B5369B3C3EE4AA768E61A68EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
Manifest number: 097C
Signing time: Mon 21 Sep 2026 03:00:19 +0000
Manifest this update: Mon 21 Sep 2026 03:00:19 +0000
Manifest next update: Tue 22 Sep 2026 03:00:19 +0000
Files and hashes: 1: 8SAch57AMOQRbiAz1pknxEq8_AE.roa (hash: dOCl4oMRadim0zorBGeK3Z3XhSzd3Cim0jIw4uxvw28=)
2: D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl (hash: bxjIHGan9t3X133Yl8+jVZ5JF1vFLC0tMbLSSIyhqLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:44:b5:36:9b:3c:3e:e4:aa:76:8e:61:a6:8e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
Validity
Not Before: Sep 21 03:00:19 2026 GMT
Not After : Sep 22 03:00:19 2026 GMT
Subject: CN=b4d365df5d3f153634ec6e2b4e17b85b21843bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:4e:e5:4e:88:e9:cc:03:a1:a4:b3:5b:d9:
57:ec:2f:d4:94:50:7c:65:99:71:26:bd:95:78:7c:
c9:38:17:89:6d:90:7c:59:fd:1d:6e:e1:03:3b:7d:
31:04:3b:ab:c0:53:48:c7:c0:00:cc:5c:32:48:9f:
36:2f:4d:04:46:f0:2a:78:ca:a1:0b:8e:0b:80:26:
68:9f:75:9b:53:2f:99:0e:f6:ab:f7:96:f4:d3:d5:
8b:84:af:69:8a:1f:4a:96:35:04:c9:69:4a:79:45:
e2:37:e0:4d:23:f8:30:c5:f3:6e:6c:4a:57:4a:2b:
8d:37:8c:25:a1:ec:7c:8a:ef:d5:8a:76:3c:c8:6f:
9a:5c:25:88:6a:81:74:13:9c:49:77:23:a2:e6:71:
51:03:8c:2d:ba:fc:ad:cc:f7:b3:fc:0e:8b:aa:c3:
a2:d6:d1:41:89:3c:67:32:6e:1e:22:ce:78:49:ba:
12:b7:1a:91:a0:68:d0:3b:71:1a:8f:55:06:7e:ae:
43:e2:e1:ba:3a:cc:d6:43:a4:08:91:1b:9e:57:d4:
73:25:0e:78:f0:8e:8e:5e:b8:60:25:44:e5:b7:29:
73:07:d6:7d:b9:0f:10:d1:84:fc:65:6c:87:53:5b:
eb:5f:69:81:f8:43:c4:bb:f9:e1:e0:d3:1e:c8:3d:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D3:65:DF:5D:3F:15:36:34:EC:6E:2B:4E:17:B8:5B:21:84:3B:C8
X509v3 Authority Key Identifier:
keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:33:96:3c:8c:21:05:af:fe:00:bb:dd:4c:2e:bb:9d:a5:38:
36:f3:bc:66:0b:59:3f:fd:6f:48:fe:66:9f:7f:ce:66:ff:23:
2c:6f:e7:09:45:b1:d5:e3:b9:07:66:8d:0a:a6:a8:5a:84:76:
09:bd:e6:36:b8:f6:26:71:38:ab:04:35:ce:9d:94:3d:bf:7c:
5a:15:c2:c7:b3:62:5d:47:38:34:9f:0e:3f:e7:7c:c3:8a:fe:
b7:18:63:fc:c1:1e:98:1b:a9:80:42:95:5a:12:43:33:0a:6c:
54:d2:e2:db:24:fd:be:67:64:1e:3e:6a:81:4e:3b:a4:49:b5:
d7:d1:87:99:1d:e0:67:1a:bb:7a:f2:77:e7:22:2d:b7:77:e5:
a8:41:2d:63:ee:a7:46:8a:7c:f0:31:8d:f2:e3:07:c7:eb:2e:
7a:e9:b3:9c:24:25:ef:ec:a2:2a:19:80:b4:dc:8a:db:e2:dd:
b2:1d:f0:b2:f4:38:23:17:fd:1f:b3:5e:e4:0e:4f:a1:07:c5:
94:d4:9b:93:f9:58:5d:2a:c3:31:d2:d4:ce:97:bb:f5:6b:79:
5c:9d:f5:a8:e2:85:79:0f:89:8b:c1:30:69:b1:5b:16:c8:e9:
ab:69:ee:66:b3:bf:51:20:3e:2e:13:cf:bf:d9:eb:aa:80:4c:
e3:c3:b0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:34:37 2026 by rpki-client