Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: e2YpSi9FdSSljZXF90nQuOc/an6QntmncikawQJYt/Y=
Subject key identifier: 1F:EE:37:0A:00:3C:AF:24:A2:0E:32:7B:62:66:32:14:13:CA:F5:1E
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 01A0D07FA1657C089C3DDD77A6F6249E8B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 194A
Signing time: Wed 23 Sep 2026 23:00:20 +0000
Manifest this update: Wed 23 Sep 2026 23:00:20 +0000
Manifest next update: Thu 24 Sep 2026 23:00:20 +0000
Files and hashes: 1: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: aCzl9QajK7HVwRpD8gbkMcUEe08EzeO7pUC2a/uyZ/8=)
2: gM2StpLZVmvayJcUvILE4XZXuLw.roa (hash: KQMOAlvZrGCc1yTty62TEDax5SGCNvxrkbvizSS1atc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:a1:65:7c:08:9c:3d:dd:77:a6:f6:24:9e:8b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Sep 23 23:00:20 2026 GMT
Not After : Sep 24 23:00:20 2026 GMT
Subject: CN=1fee370a003caf24a20e327b6266321413caf51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:d0:0e:85:3a:b9:2e:a8:73:97:05:a5:dc:
24:f3:3c:f2:21:65:66:2c:0a:99:af:9b:08:33:db:
f2:ab:15:4b:db:90:98:e5:39:3d:1c:02:c4:45:7c:
ae:1a:30:b2:84:3c:56:db:6e:55:6d:f9:8d:04:b1:
be:90:0c:78:3e:d3:63:e8:97:2e:6f:29:63:bd:52:
a5:3f:6a:4a:3e:76:fb:aa:8c:70:70:4c:dd:79:c9:
ce:b2:61:4d:3b:f7:2d:9f:85:b4:89:e1:b3:15:48:
e2:50:15:52:0a:a0:d7:f2:d3:4f:29:23:d4:46:f0:
46:a3:12:52:46:6d:e7:97:ed:9e:98:5f:b2:1e:f9:
f6:a2:50:6b:24:60:1b:84:64:59:37:df:ba:30:76:
8b:4c:dd:62:64:4d:3f:28:2f:54:1a:0b:01:7b:7a:
af:a4:0e:52:1d:6c:d4:b2:82:c3:c2:8a:67:a6:65:
a2:d0:d4:78:a0:44:a1:a7:55:8c:33:fc:33:e9:5a:
08:c6:c1:16:8d:87:4a:80:62:24:0b:c3:ed:45:3c:
74:de:89:20:9f:83:5c:88:f4:9f:fb:df:92:03:35:
80:d6:a2:3b:3c:da:ea:2c:99:4b:f6:c2:7e:3e:b3:
55:dd:a3:01:88:04:fc:d1:1e:e1:98:dc:1d:ff:39:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EE:37:0A:00:3C:AF:24:A2:0E:32:7B:62:66:32:14:13:CA:F5:1E
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f0:d0:1c:03:ae:64:e4:0e:77:56:50:01:e3:f1:6e:ef:74:
ff:0f:0f:27:ec:c6:26:69:f5:55:ed:ed:b4:7c:a5:3f:ee:35:
a4:99:b1:05:0a:98:44:7b:42:16:19:e5:99:dc:6b:2d:ab:bd:
9d:d3:83:ad:ad:22:f1:ef:5e:f6:0b:4f:7a:18:64:b7:8e:41:
f7:9f:16:0a:09:04:b3:84:4c:50:bf:9f:c9:72:14:a9:16:03:
ab:f6:5e:63:93:0e:06:ac:28:71:57:fa:55:cf:5c:bf:1b:ff:
32:65:25:7b:a6:e0:bd:33:4d:10:17:03:d0:87:03:20:50:42:
5c:ff:e8:e6:c0:c4:3e:51:a0:9e:71:19:ca:86:22:2e:40:38:
bc:2e:86:cd:08:97:6b:ea:f4:60:0e:28:14:78:77:32:d4:ed:
6b:55:75:ec:a5:91:de:d9:bf:e8:2c:f3:85:0d:a4:22:e5:18:
83:e8:3e:ec:38:97:7c:e3:b3:c1:38:ef:d4:14:48:0d:e3:17:
33:fa:b0:90:25:55:7b:64:80:c5:5a:7d:8a:e1:79:a5:62:ce:
1a:9d:73:15:e0:0c:47:99:11:b9:a2:82:22:63:21:c4:bc:8f:
d1:dd:34:03:17:67:29:15:f1:e7:81:95:de:3d:09:3f:4f:cb:
69:c4:46:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:29:55 2026 by rpki-client