Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: QvkpNNxEaKM+YhEXIsN2ZUFXml8I4VskKzLZ+WrCIvs=
Subject key identifier: 7B:EF:7B:CD:70:14:FA:E1:74:D2:20:46:31:9E:3F:25:E5:5B:98:E4
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 01A0D34ACA6B590F0E7BCBF9F2446051D874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 0760
Signing time: Thu 24 Sep 2026 12:01:28 +0000
Manifest this update: Thu 24 Sep 2026 12:01:28 +0000
Manifest next update: Fri 25 Sep 2026 12:01:28 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: 1Tsikmvwf9l+xQBzV1r1QmrJxsN69XLoW94mnYZm/mQ=)
2: w8wkCFScjGQvdttAQ8x_xzp50Xk.roa (hash: w/c38fhRy3be0XuDkxP9zkUOolRFgZszn3JD1Qb99Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:ca:6b:59:0f:0e:7b:cb:f9:f2:44:60:51:d8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Sep 24 12:01:28 2026 GMT
Not After : Sep 25 12:01:28 2026 GMT
Subject: CN=7bef7bcd7014fae174d22046319e3f25e55b98e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:9d:eb:cc:29:15:ce:6c:60:6f:e3:87:72:
c8:bc:d2:31:9b:d9:36:43:57:fd:cd:e3:a2:86:85:
a7:6b:c8:16:fb:db:63:c0:6f:06:ef:2e:7b:bd:ac:
51:9e:27:e6:ef:6d:8a:b4:e9:fd:dd:29:60:e0:5a:
39:0b:6a:6d:40:84:64:05:97:5b:23:94:49:81:d0:
77:26:e2:3a:37:a9:9b:de:5d:24:01:81:37:33:ae:
29:5b:5f:a1:07:e4:75:75:c1:09:73:56:a8:71:b1:
0a:20:a9:7e:dd:3e:ff:a3:17:8d:c8:f5:26:42:a4:
20:c5:2f:cb:ac:79:ae:74:26:9b:b1:c2:ab:24:b7:
f5:47:95:fd:e1:1a:5e:89:7d:ba:11:ec:57:64:7e:
15:36:08:c6:ca:e5:b0:87:49:6b:1d:95:6f:57:c1:
0a:79:84:68:59:f4:3d:f9:6a:28:76:02:56:e1:88:
8d:14:ea:7c:bf:5a:5e:5c:26:ad:bd:cb:09:a8:bd:
db:2c:f7:21:ab:04:52:f0:2b:fd:2f:30:2b:4f:b3:
f2:a1:a1:f9:4b:8d:d7:1c:d9:84:8e:9f:1e:b9:d8:
63:0e:db:40:14:fc:54:b6:ca:7b:37:db:2f:b8:55:
09:51:d0:96:89:3f:23:c2:63:75:75:3c:e8:06:68:
fa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EF:7B:CD:70:14:FA:E1:74:D2:20:46:31:9E:3F:25:E5:5B:98:E4
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c4:8b:5a:e8:36:cd:c3:3f:6b:90:fe:5d:38:e0:34:c8:3f:
8f:c0:81:53:30:97:67:79:5a:01:17:0b:f5:1a:30:2b:19:40:
87:f5:cc:6c:f2:b1:9e:a1:9f:ed:f4:01:bd:b7:15:48:4c:f9:
a6:c8:b7:cf:0e:46:b2:09:0e:f3:79:3d:b4:9d:96:c1:36:86:
b1:f3:5e:fd:c5:b1:2e:70:0c:41:1d:b8:cc:81:b8:6d:e1:5a:
3e:dd:fa:fa:33:b9:12:96:82:24:ff:8d:4c:2f:1d:34:2a:b1:
e7:58:37:4e:c8:a6:c5:0f:a5:6a:f4:58:cc:4a:17:d0:1a:df:
c1:67:e9:5c:d0:ed:c0:59:02:2f:ae:3b:ea:b3:5f:84:38:86:
83:3a:32:01:d8:4b:c1:0f:2c:4b:a6:48:06:9f:62:7b:0c:b1:
ec:fe:a6:3f:87:d9:3b:a4:2b:3f:17:d7:91:16:38:0d:5f:f9:
f4:9d:ed:54:ec:29:4b:dd:7a:88:1f:a8:3d:d4:7f:c8:cd:9b:
ff:9d:d8:74:bc:7e:50:ff:7a:89:96:67:6b:55:cf:76:c6:77:
02:d8:3e:5d:20:08:15:c2:98:f1:09:45:af:70:8b:f5:a4:b7:
84:18:c4:13:60:53:59:48:c5:7d:35:33:9a:ab:f7:eb:6e:32:
2f:58:75:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:19:18 2026 by rpki-client