Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: 2wUFjLirwq6CeVYnaRdVe6SydR8DWHPQrvJdy+dr+H0=
Subject key identifier: EE:97:26:AF:FE:5B:3F:E9:A1:BD:AA:A7:1F:DD:86:93:2B:D6:F8:74
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 019CAD227C1C6E4A30B4BDC24C3659C2214A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 053A
Signing time: Mon 02 Mar 2026 06:00:44 +0000
Manifest this update: Mon 02 Mar 2026 06:00:44 +0000
Manifest next update: Tue 03 Mar 2026 06:00:44 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: p3usNRlBTpXhgdz3B/pR8CM02qORmudA89lK+o+vzvo=)
2: w8wkCFScjGQvdttAQ8x_xzp50Xk.roa (hash: w/c38fhRy3be0XuDkxP9zkUOolRFgZszn3JD1Qb99Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:7c:1c:6e:4a:30:b4:bd:c2:4c:36:59:c2:21:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Mar 2 06:00:44 2026 GMT
Not After : Mar 3 06:00:44 2026 GMT
Subject: CN=ee9726affe5b3fe9a1bdaaa71fdd86932bd6f874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:0b:43:44:d9:19:c1:99:68:76:ce:29:8f:
7a:58:c3:e6:3c:f4:ca:71:1a:36:e6:0c:0d:b5:2f:
6c:d6:75:c1:59:74:00:39:89:f6:2a:eb:d3:56:d0:
46:ec:bc:7a:7d:3b:f8:34:9c:eb:d2:8a:59:b2:4c:
73:99:f8:52:90:2c:30:38:7f:1b:83:3e:03:c5:93:
14:ac:a4:56:96:6d:26:3c:3a:60:d8:0e:7a:28:32:
93:09:7c:9d:b9:17:0f:09:8f:58:8e:16:8a:38:f5:
c7:f6:b7:83:f9:fd:9b:39:26:cb:06:9d:32:f6:0a:
86:d1:b8:0b:57:8c:c5:bc:5d:7c:dc:bd:b6:c5:18:
03:6f:63:17:b6:ee:7f:8d:9d:43:ea:ea:7f:73:2b:
8d:bd:7d:ef:51:81:95:0c:7a:21:23:ca:ab:7d:3e:
f2:0a:f8:54:e1:2b:01:bb:7e:b8:02:6b:1a:57:ac:
bc:fa:07:52:88:c8:3b:fc:fa:27:9f:8a:6a:54:b9:
9b:c3:54:7f:c5:55:f4:b3:83:16:3e:0f:89:9a:81:
00:fb:e9:cc:22:c2:d8:70:90:ed:cc:fd:6f:f5:1c:
d7:3b:de:2b:0b:6a:57:0d:2c:c9:2c:c1:20:e3:bd:
12:d8:b2:df:c5:9a:8b:e9:04:7e:2d:a5:14:34:77:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:97:26:AF:FE:5B:3F:E9:A1:BD:AA:A7:1F:DD:86:93:2B:D6:F8:74
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c9:d6:90:8e:dd:14:9f:60:ec:ed:b5:39:e0:71:1f:c1:15:
bd:23:39:b5:3f:6b:41:3f:7e:21:ed:18:8d:43:3d:39:ec:56:
d4:40:eb:62:aa:b1:95:18:eb:02:2e:2c:1d:fd:42:6a:e1:b5:
fd:02:d7:83:ac:2e:6c:b3:e1:ac:bc:f0:f5:2e:25:1a:9a:02:
cd:3c:a7:02:c1:4b:08:fa:9b:cf:f0:59:d2:73:5b:b9:1d:6b:
2d:98:af:26:94:eb:a0:7b:3a:86:63:49:c5:ce:68:9f:ff:4e:
51:6c:3b:89:73:cd:07:17:88:b8:65:23:b6:db:d6:7f:81:cb:
01:c0:a8:bb:7f:21:8f:0a:87:e8:0c:92:52:24:cb:83:09:1e:
cc:2f:49:c1:e6:25:94:a6:9f:da:d8:c0:ce:36:a4:d4:dd:98:
5c:c0:ce:8b:d9:ef:c7:78:a9:fa:39:2b:25:c5:19:88:40:24:
86:df:c4:7c:e5:cc:3f:2b:49:3d:3c:da:9b:04:e3:b3:20:85:
03:bf:eb:ab:1e:6d:5d:6c:10:50:08:c6:7f:d6:79:e5:2d:67:
46:a1:82:5c:8d:d4:ae:54:31:8e:8c:59:38:8e:1e:88:0a:0e:
e8:a3:d5:c4:f0:d0:9d:f6:21:8f:5b:6d:79:88:e3:ca:8a:76:
8f:61:d9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:18 2026 by rpki-client