Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: 4NAZbxTizatmpY6NNUJXuk+/H0l6gqbckkrtUNoxx2g=
Subject key identifier: 0F:A4:11:25:B5:EC:CF:89:53:0F:D3:B4:66:4B:73:07:29:25:9B:16
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 019D98BD62AFEE74C0B70E9A98269F8FD444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 05B4
Signing time: Fri 17 Apr 2026 00:00:41 +0000
Manifest this update: Fri 17 Apr 2026 00:00:41 +0000
Manifest next update: Sat 18 Apr 2026 00:00:41 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: YWIPAgSJQ7mBQo3rvTTlwH9e9ZYvATC/WGksZ+UVwqc=)
2: w8wkCFScjGQvdttAQ8x_xzp50Xk.roa (hash: w/c38fhRy3be0XuDkxP9zkUOolRFgZszn3JD1Qb99Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:62:af:ee:74:c0:b7:0e:9a:98:26:9f:8f:d4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Apr 17 00:00:41 2026 GMT
Not After : Apr 18 00:00:41 2026 GMT
Subject: CN=0fa41125b5eccf89530fd3b4664b730729259b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:76:f8:9a:41:87:e9:a6:19:ed:0b:97:48:
9e:f3:ee:ff:77:b0:9f:2a:80:81:f1:47:0d:0b:fb:
24:70:9e:12:b2:25:72:43:c9:e4:5e:70:56:7b:34:
27:5c:e0:19:b5:03:c0:56:b7:fc:bd:09:87:3f:41:
97:73:77:7b:68:49:dc:d8:52:91:a1:8d:58:20:16:
bb:00:d2:83:60:9a:2a:4e:ed:2b:04:ab:12:b1:b2:
4f:3f:bd:6d:11:42:33:57:f2:2c:f1:55:c4:9c:c9:
1f:b4:a5:d4:15:66:d6:32:7f:5a:df:4c:ee:52:c5:
78:1e:63:dd:2d:4f:8e:48:84:32:8d:1f:c8:91:e8:
0c:02:22:89:ec:00:f9:0d:0c:91:20:37:15:a4:30:
e6:f2:68:f3:95:d5:0d:e9:68:c4:84:af:b9:97:a2:
98:c1:41:aa:a3:ab:c9:7a:ad:ad:59:00:8b:15:ce:
9c:57:d9:c5:a7:e5:b7:be:81:4b:d4:c6:db:01:51:
78:58:76:75:c3:62:00:1f:9a:e8:2a:f0:e0:34:52:
ad:9f:e6:c6:99:0f:50:7f:0e:02:bd:22:09:d2:73:
b6:17:c9:85:26:45:7a:ba:27:c5:3c:85:de:b1:39:
a4:77:0d:7a:ac:8f:60:7c:39:6a:88:13:ce:22:2b:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A4:11:25:B5:EC:CF:89:53:0F:D3:B4:66:4B:73:07:29:25:9B:16
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3d:a1:78:2c:43:d3:6e:a0:75:b5:50:69:67:be:79:06:c8:
09:d7:a9:f2:87:6b:9e:8a:09:6b:1d:dd:00:e9:39:ec:8f:a8:
10:2b:dd:a6:4f:a5:69:e5:18:00:01:f7:c8:31:cf:e3:a0:d6:
53:07:ad:dc:1c:fa:8c:93:48:15:c2:90:63:1c:62:ab:15:2d:
96:c4:90:f8:0f:6f:d0:4e:61:92:2f:de:55:b2:e9:66:89:9f:
03:e3:3b:28:02:a1:d1:54:3e:f3:5a:98:1b:61:4c:d6:60:0b:
e1:be:7c:5c:78:2b:32:b7:b8:f9:a3:b0:20:04:01:61:9a:2f:
4e:96:25:44:52:f4:fe:46:32:ef:47:af:8c:fc:fb:6b:65:21:
7a:bf:1f:41:c7:ad:76:b4:e2:3f:af:65:d4:9f:ed:bc:56:2e:
dc:9a:86:b2:86:bc:a2:39:b9:71:65:4f:6e:7f:ae:6c:eb:a8:
6f:9d:8b:1b:ca:93:7d:46:ec:4f:4b:af:97:72:c0:de:5b:8c:
45:03:8d:94:2e:0c:d1:2e:35:e6:4d:71:da:f2:9a:8e:1b:6b:
f2:9a:c8:4a:af:ee:95:c5:b6:03:98:f3:00:4b:98:8c:49:6e:
f5:a4:7f:94:e7:ad:0b:a2:2e:8b:c5:ec:6d:1a:9b:1c:44:8c:
b2:85:a0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:04 2026 by rpki-client