Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
File: DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft (raw, json)
Hash identifier: aEE47L8qFjRleCEQ5Ki/bqLjSaShUbK5rUNShWvarPY=
Subject key identifier: 53:E2:AA:54:71:32:02:52:BA:9E:AA:F0:80:96:DC:12:BE:4F:B7:AD
Authority key identifier: 0D:91:DC:30:C5:9E:AB:15:30:5E:C3:C8:BE:4E:52:CB:44:06:A9:2B
Certificate issuer: /CN=0d91dc30c59eab15305ec3c8be4e52cb4406a92b
Certificate serial: 01A0CDB62D1ACDAB593E7F9D94D9FCEBE7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
Manifest number: 9D
Signing time: Wed 23 Sep 2026 10:01:03 +0000
Manifest this update: Wed 23 Sep 2026 10:01:03 +0000
Manifest next update: Thu 24 Sep 2026 10:01:03 +0000
Files and hashes: 1: DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl (hash: embeudGMR+Qu9EHgLQULftbc1YyADmp4jlHQHjKQtcs=)
2: G-iHoe7mwWpGmZKyDftprKnS8pg.roa (hash: 8M86BXdsas21dJjs/WQbp6DYixMlHiokbVFdj5Dah24=)
3: zg5WlcC4NX4gmrZjUBDsq1SjIJY.roa (hash: RBJVe3dHTZ47Sn+AGjBXy4sIQT9e7Zb35xuSCKcJGSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:2d:1a:cd:ab:59:3e:7f:9d:94:d9:fc:eb:e7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dc30c59eab15305ec3c8be4e52cb4406a92b
Validity
Not Before: Sep 23 10:01:03 2026 GMT
Not After : Sep 24 10:01:03 2026 GMT
Subject: CN=53e2aa5471320252ba9eaaf08096dc12be4fb7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:4f:87:90:e0:9a:92:5f:b4:be:d1:b5:0d:
df:c2:b5:8d:68:5a:8f:53:d3:81:42:90:9a:72:58:
1c:71:1c:71:b8:43:f2:e4:c1:1c:aa:d6:83:fa:37:
e4:8f:25:d9:ec:56:f7:c5:7b:bd:4a:d4:62:03:25:
84:8c:36:bb:32:e5:8f:8e:0e:99:bf:5f:ef:c0:88:
19:fb:ba:ef:f5:7d:89:36:b2:bc:3c:34:1d:cd:92:
57:26:c1:85:52:b1:ea:06:91:2d:fe:89:98:33:23:
1f:af:08:48:59:4f:bd:1f:79:36:f7:80:cd:d8:17:
6f:a9:f9:7d:6b:be:98:6a:30:1d:4b:3c:5a:68:14:
43:c2:64:15:02:80:06:00:59:9f:e1:44:6a:fe:95:
74:99:c9:ea:97:dd:16:01:90:cb:18:40:ce:cb:ff:
45:42:14:fd:8b:f5:bc:6d:05:3f:98:aa:b9:11:6c:
fb:5f:7c:86:48:68:2f:36:7b:4b:4f:72:af:76:8a:
0c:0e:22:6f:5a:fc:a9:80:4c:fc:4c:d0:38:cf:bb:
53:23:00:b8:06:a8:11:45:fd:22:13:45:c2:8d:a5:
5e:a9:ca:22:ee:a3:e6:d7:f6:cf:8d:d9:ec:8f:a2:
f3:36:0f:63:b0:dc:dc:1d:de:f5:e9:61:11:c4:80:
5e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E2:AA:54:71:32:02:52:BA:9E:AA:F0:80:96:DC:12:BE:4F:B7:AD
X509v3 Authority Key Identifier:
keyid:0D:91:DC:30:C5:9E:AB:15:30:5E:C3:C8:BE:4E:52:CB:44:06:A9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c5:f3:30:b2:35:9d:74:99:82:8c:cb:80:cc:4b:64:af:1a:
9f:09:fa:0a:dd:70:43:1a:04:e3:6f:b1:b7:af:ae:8a:99:cd:
4a:b6:c6:e3:31:5f:f3:f4:95:b5:43:4e:c3:78:63:d2:c4:79:
57:44:67:cc:08:da:19:60:88:35:bc:e2:1a:9f:e6:2e:56:68:
d3:6e:c4:19:07:84:c3:bf:2d:74:88:9d:6a:3b:ad:8d:ac:23:
fb:3a:d9:d4:ab:34:90:bb:34:44:2c:09:96:37:f1:24:d7:88:
05:98:de:70:59:a1:44:5e:05:ab:a3:4f:e1:8a:5a:b0:7c:08:
c9:df:02:44:3d:60:7d:ab:3e:2b:68:d1:bc:11:d4:cf:d8:7c:
ce:12:53:0b:59:ca:08:22:d6:70:ed:0c:34:78:05:ac:82:d0:
85:d7:cd:82:63:67:b7:6d:a1:6f:bf:b2:e3:3a:ca:69:f8:81:
11:a4:91:5e:af:65:3e:aa:04:07:62:21:ea:b8:51:43:c8:0f:
0d:ad:92:09:e6:08:b5:77:36:d5:de:2a:03:0b:24:9b:e2:bd:
77:49:f6:e1:26:7f:c2:54:ef:25:da:d9:9d:41:dd:94:e5:b1:
97:25:72:23:27:3b:99:d1:a3:b2:97:ba:0a:8b:99:9c:9b:7a:
db:9d:ac:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:36:43 2026 by rpki-client