Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
File: DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json)
Hash identifier: cyBhvhB2uu1YV5oDEJsgiYW7gQAph37XqtpZBPEB1cU=
Subject key identifier: 9F:74:7C:F9:68:2F:E9:3B:38:3A:46:4E:99:08:3A:95:67:88:3D:79
Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
Certificate issuer: /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Certificate serial: 01A0D45D79B9F3779602C1DA40696865F81B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
Manifest number: 12D5
Signing time: Thu 24 Sep 2026 17:01:30 +0000
Manifest this update: Thu 24 Sep 2026 17:01:30 +0000
Manifest next update: Fri 25 Sep 2026 17:01:30 +0000
Files and hashes: 1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: I+pi2ZyqRsacx2COLvv5qmGBUroZCL7onzpeIxqXnOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:79:b9:f3:77:96:02:c1:da:40:69:68:65:f8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Validity
Not Before: Sep 24 17:01:30 2026 GMT
Not After : Sep 25 17:01:30 2026 GMT
Subject: CN=9f747cf9682fe93b383a464e99083a9567883d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:34:8d:ec:4e:9a:b3:5a:d7:04:c6:aa:bf:81:
73:39:80:74:36:95:18:30:f9:dc:8c:c6:25:c5:b0:
eb:23:64:3c:1e:d8:a1:c5:c3:97:cb:57:ec:e2:46:
19:b0:28:45:64:4d:13:96:da:c4:87:d9:b4:da:da:
3b:ad:d2:8b:5a:09:45:67:a9:dc:87:35:92:07:86:
49:c0:28:95:e3:c5:12:bb:2e:1a:d6:87:45:fa:a8:
2c:2e:ce:c9:d0:eb:b1:b4:9a:ef:a4:0c:bd:84:8d:
71:f5:43:5d:2a:86:36:ee:7c:ec:79:21:56:9d:9e:
72:30:76:7e:ed:09:f8:9f:6e:25:98:28:b2:17:9e:
9c:bb:7a:e1:e4:4c:8f:d6:ab:64:8a:a6:2b:0e:b4:
cc:ad:69:81:6d:ae:67:67:c0:bf:58:06:f7:76:9e:
4d:b8:86:9d:d0:5f:47:02:de:e9:83:3d:36:c6:77:
13:e6:c9:63:c6:53:92:0c:29:9a:67:4f:e1:57:61:
e2:c0:61:b3:07:bd:69:2f:71:44:0a:cc:88:b5:40:
07:ca:40:72:48:f9:05:fd:9c:d4:06:4e:cd:ab:b4:
6d:01:7f:52:3d:15:52:3d:06:2f:b4:c6:cc:dc:8f:
83:b9:e9:70:5b:b6:ce:e3:5e:40:8f:0d:98:b9:cf:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:74:7C:F9:68:2F:E9:3B:38:3A:46:4E:99:08:3A:95:67:88:3D:79
X509v3 Authority Key Identifier:
keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:70:75:cb:19:4c:79:77:bc:f1:f4:ff:73:b3:18:b5:0c:18:
6c:04:7d:a5:6e:7b:ca:fd:e5:a6:65:a7:65:ea:aa:d8:5b:39:
bc:97:6f:f9:6a:3a:72:e7:03:90:ab:a1:52:31:df:23:b3:86:
d5:fe:3a:18:ae:6e:be:a4:e2:96:25:10:cd:4c:1d:45:54:19:
bd:fa:17:66:f6:a9:76:71:dc:4d:7a:1a:4b:c8:f0:26:71:6f:
60:90:75:c1:62:6e:0c:19:e3:df:23:54:3b:48:95:60:80:ad:
be:6f:06:c8:d5:8e:e8:f4:a5:ff:46:dc:a7:09:0e:10:1d:2b:
1d:0a:b1:dd:64:d7:62:42:f0:73:0a:91:58:0e:87:a2:29:9c:
00:af:8c:68:dc:38:d1:72:be:7c:a6:9b:18:6d:44:69:e8:76:
73:97:c1:ec:5a:3d:61:a4:33:45:d2:26:82:fe:ae:02:f7:52:
6d:80:46:75:3f:45:39:3c:2b:22:77:6d:00:cb:9f:6b:91:2f:
94:9c:90:17:79:72:dd:ac:d1:c5:f0:47:c5:ef:5a:d6:2e:2d:
cb:d0:b3:dd:b2:c0:ad:0f:a3:b4:9c:31:57:56:ea:03:7a:c9:
de:ad:c9:51:fa:ce:69:01:8e:31:a2:fb:58:64:9d:dc:49:68:
07:f6:8f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:23:55 2026 by rpki-client