Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: RyZrxs8gzvulydWhIWn553P3N0aDgnibT7BWSLh9Qys=
Subject key identifier: DB:7E:69:F4:36:94:BF:FD:F2:6C:1B:A3:A3:15:4E:1E:5B:27:E0:AD
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 019FA9E2818F12449F6E6F334FDAC6247DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 06C6
Signing time: Tue 28 Jul 2026 18:00:21 +0000
Manifest this update: Tue 28 Jul 2026 18:00:21 +0000
Manifest next update: Wed 29 Jul 2026 18:00:21 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: YqDrnjBCzD8WnPgjHuJuivwJInhltUa3T9YHhPhd2z0=)
2: w8wkCFScjGQvdttAQ8x_xzp50Xk.roa (hash: w/c38fhRy3be0XuDkxP9zkUOolRFgZszn3JD1Qb99Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:81:8f:12:44:9f:6e:6f:33:4f:da:c6:24:7d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Jul 28 18:00:21 2026 GMT
Not After : Jul 29 18:00:21 2026 GMT
Subject: CN=db7e69f43694bffdf26c1ba3a3154e1e5b27e0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:ea:af:a7:e3:e2:18:d8:9f:08:05:ed:f7:
38:90:e4:d6:88:98:24:65:2b:1e:8e:34:df:34:1f:
a7:0b:2a:3d:63:5d:0a:e9:90:8e:2a:32:ba:19:32:
0f:a7:ae:bd:69:8b:27:02:94:6e:81:dd:66:3b:c2:
12:90:fc:c2:9d:06:16:49:66:4e:8d:1e:d6:de:68:
ec:33:bf:eb:37:10:14:ce:ff:50:aa:3d:9d:77:74:
26:16:41:d8:9c:d5:82:b0:a9:e9:3d:03:83:4a:a1:
19:20:ea:7b:61:e2:51:85:ec:64:72:2e:50:27:0f:
bf:d1:33:d2:76:4a:97:86:2e:bb:d4:12:30:c8:18:
83:3d:84:78:3b:ab:5c:cf:cb:18:a1:d6:dd:13:ca:
20:ee:af:b8:eb:5c:67:fd:d5:ad:a9:87:62:ed:f9:
8c:db:26:d6:39:1a:cc:c2:31:f9:a8:24:05:48:32:
43:9d:60:ba:a5:77:94:75:79:e2:ee:08:13:ad:59:
6e:ec:35:1a:ab:6f:9f:e8:e9:9d:60:ea:9f:f0:5a:
4e:f3:92:81:97:ad:23:a0:6d:81:f7:5d:a4:e9:33:
1a:bd:a6:a4:d1:07:56:16:d3:f9:ea:93:39:2f:44:
d9:11:2b:cc:e6:ca:ce:d1:3f:0f:a7:f8:5f:ba:d5:
98:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7E:69:F4:36:94:BF:FD:F2:6C:1B:A3:A3:15:4E:1E:5B:27:E0:AD
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:69:99:96:7c:dd:cb:e3:d8:f3:c9:4c:28:7c:d5:97:e2:6f:
f5:2f:04:55:2a:55:f4:a8:a7:3c:27:c2:62:0f:4a:b9:b6:e9:
ed:9a:42:fc:92:45:32:82:d0:e5:5e:80:94:f0:53:62:b3:1c:
36:3b:35:6e:d0:29:d6:32:61:32:a8:e4:6d:8d:fb:5f:f9:34:
c4:d1:44:77:d8:49:c7:a3:f5:15:bf:1d:86:70:ba:8f:c3:0f:
1d:5b:01:ee:d6:95:58:44:0d:8b:6f:e8:16:ec:14:ee:cc:a6:
6b:c1:47:2e:a1:34:d4:24:e2:6c:6d:6d:d5:2c:7e:86:45:f6:
46:1f:bb:cf:53:4f:18:9e:14:25:89:01:70:ef:58:be:07:8c:
90:5d:40:38:35:4a:5b:a7:90:5e:0a:bc:e1:31:9e:80:d1:49:
4a:57:98:00:6a:d9:51:37:25:3f:75:c6:66:58:b9:67:68:d1:
81:c3:d1:ee:21:b9:13:67:8b:34:60:3f:e9:19:10:26:90:10:
c1:bc:82:9e:33:ea:48:c4:18:37:46:26:8f:e9:5c:e5:65:95:
d6:af:4a:17:60:d0:99:3f:87:2d:20:0a:3b:75:c9:b9:73:f2:
05:e9:97:cc:8a:de:cb:ee:ca:35:5d:91:25:b8:f2:eb:89:0b:
60:6c:09:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4oGPEkSfbm8zT9rGJH3kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNWNmNzA3MzA1MTJhZWZhNzAzMDc2NjJjZjU5Mjg4ZThj
ZDI2NGMwHhcNMjYwNzI4MTgwMDIxWhcNMjYwNzI5MTgwMDIxWjAzMTEwLwYDVQQD
EyhkYjdlNjlmNDM2OTRiZmZkZjI2YzFiYTNhMzE1NGUxZTViMjdlMGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohPqr6fj4hjYnwgF7fc4kOTWiJgk
ZSsejjTfNB+nCyo9Y10K6ZCOKjK6GTIPp669aYsnApRugd1mO8ISkPzCnQYWSWZO
jR7W3mjsM7/rNxAUzv9Qqj2dd3QmFkHYnNWCsKnpPQODSqEZIOp7YeJRhexkci5Q
Jw+/0TPSdkqXhi671BIwyBiDPYR4O6tcz8sYodbdE8og7q+461xn/dWtqYdi7fmM
2ybWORrMwjH5qCQFSDJDnWC6pXeUdXni7ggTrVlu7DUaq2+f6OmdYOqf8FpO85KB
l60joG2B912k6TMavaak0QdWFtP56pM5L0TZESvM5srO0T8Pp/hfutWYyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNt+afQ2lL/98mwbo6MVTh5bJ+CtMB8GA1UdIwQY
MBaAFAxc9wcwUSrvpwMHZiz1kojozSZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMt
YWRmYzcyZWYwZGZhLzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMtYWRmYzcyZWYwZGZh
LzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimmZlnzd
y+PY88lMKHzVl+Jv9S8EVSpV9KinPCfCYg9Kubbp7ZpC/JJFMoLQ5V6AlPBTYrMc
Njs1btAp1jJhMqjkbY37X/k0xNFEd9hJx6P1Fb8dhnC6j8MPHVsB7taVWEQNi2/o
FuwU7syma8FHLqE01CTibG1t1Sx+hkX2Rh+7z1NPGJ4UJYkBcO9YvgeMkF1AODVK
W6eQXgq84TGegNFJSleYAGrZUTclP3XGZli5Z2jRgcPR7iG5E2eLNGA/6RkQJpAQ
wbyCnjPqSMQYN0Ymj+lc5WWV1q9KF2DQmT+HLSAKO3XJuXPyBemXzIrey+7KNV2R
Jbjy64kLYGwJ/w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:29 2026 by rpki-client