Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File: DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier: 4Zsck+8JmlgIz3BqdNBlYYcfqJu5oZM673hdW/UGh7g=
Subject key identifier: 3F:80:BC:EC:C8:28:06:7F:88:D7:4D:32:3D:DF:2D:17:E6:D6:33:2A
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial: 01A0024AEAA002DED927353BFFD6B59523D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number: 0BF0
Signing time: Fri 14 Aug 2026 22:00:59 +0000
Manifest this update: Fri 14 Aug 2026 22:00:59 +0000
Manifest next update: Sat 15 Aug 2026 22:00:59 +0000
Files and hashes: 1: 96SX2S5aBWouZ5qx7BRgteL4iq8.roa (hash: M3a2yFufjkSiLfAokMv1+05AOpH8jhB4+9skztdJecg=)
2: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: VxxrIwN27vTMCDdIfwpYgIeBju5wmEbht9I001HM/kM=)
3: Fy__JVL_Lepo6mUUM4F3EM-X7dg.roa (hash: 841fgQfyyxsP5yvIt805yflD9ODKBpncCMo1CIp2tRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:ea:a0:02:de:d9:27:35:3b:ff:d6:b5:95:23:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
Validity
Not Before: Aug 14 22:00:59 2026 GMT
Not After : Aug 15 22:00:59 2026 GMT
Subject: CN=3f80bcecc828067f88d74d323ddf2d17e6d6332a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:96:c8:ad:b3:26:f4:bd:5f:6a:0f:50:64:8d:
51:03:4f:77:c7:ba:ef:b0:e8:e4:7b:f0:12:33:f0:
60:99:c0:94:0a:ba:28:e6:ed:aa:31:1c:d8:1d:6d:
2d:82:81:7a:98:dc:09:ac:60:df:65:78:81:56:59:
31:75:c9:44:da:37:d1:7e:af:d1:2d:fc:4d:5d:3d:
e5:0e:c3:68:d8:e9:a3:b0:ec:51:b5:76:e9:59:e3:
83:3a:5c:85:f7:05:1f:43:c1:df:67:a5:8d:20:ef:
ad:ed:37:cc:b5:d0:2a:db:62:55:ec:12:fc:5e:43:
e2:90:df:94:de:1e:bd:8b:a0:bd:73:e1:a3:3f:b4:
c1:9b:49:42:20:45:91:df:16:47:ea:7e:8f:1f:bf:
1a:39:70:9b:3d:57:9e:c3:8f:0a:20:96:d7:26:52:
5f:0c:b0:80:43:7c:a3:13:d4:8c:e6:4d:f4:74:9b:
de:45:2a:f7:35:31:2e:8e:6c:e0:6c:4e:0c:81:30:
35:a7:55:b7:be:f8:df:0a:7c:4d:1d:52:c9:ad:bf:
ad:37:28:a1:72:74:14:9e:14:7f:c5:30:55:95:ec:
a0:3c:6f:ff:c2:93:27:31:e4:7d:31:1d:b8:8e:f5:
5f:f4:a7:66:15:43:37:c4:4c:4b:04:49:a0:12:59:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:80:BC:EC:C8:28:06:7F:88:D7:4D:32:3D:DF:2D:17:E6:D6:33:2A
X509v3 Authority Key Identifier:
keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e5:94:b6:8b:55:22:45:79:50:50:9b:94:4f:14:b7:05:f0:
3a:42:57:15:0f:c0:fa:42:96:c6:c4:81:b4:ed:46:a4:3a:3c:
a0:2e:66:0f:41:c8:e8:13:b7:7e:15:27:3c:3e:b3:14:b5:b0:
2d:11:e2:91:0d:f7:5b:7b:27:31:52:9c:a0:95:e4:8e:64:eb:
3f:1c:20:a8:a8:e2:39:47:f7:b3:19:ff:ab:44:e1:af:bc:02:
81:f7:2b:46:d3:63:94:05:85:9d:5d:2d:3d:79:81:be:5d:28:
9d:79:05:1d:d6:60:c1:16:10:2d:26:72:00:74:4f:9b:63:9d:
9e:3c:ae:fb:e4:2b:d5:9e:09:19:5d:39:88:81:96:35:c0:df:
b2:3a:88:13:ba:2f:ba:9c:99:96:e6:8d:08:d5:33:98:9b:17:
6b:b2:62:77:8e:60:b4:49:42:4d:2e:f5:ee:e9:f5:15:59:d4:
05:56:01:8d:32:cc:c2:bd:3c:a2:fa:3a:34:b6:18:9a:81:0d:
2e:a6:b7:25:20:7a:8f:68:96:f4:5e:ab:d8:b2:dc:71:55:67:
0f:95:2d:42:1b:63:eb:77:74:3f:f9:b3:73:e4:3a:f9:2d:3f:
f7:0e:4f:ed:1c:aa:85:bc:5e:dd:02:fc:f9:cb:d9:87:7d:91:
d5:1a:df:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:30:56 2026 by rpki-client