Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
File: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json)
Hash identifier: 9iCp906UfLJIuvX78gDXewX786e9X+ks/ibVHlqJPc8=
Subject key identifier: 92:6F:C5:32:E5:62:7D:2D:B2:28:75:CA:46:1C:30:CE:42:86:BD:40
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Certificate issuer: /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial: 01A187BF4AB6C8C348DFA6034708176AACEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
Manifest number: 1AC8
Signing time: Thu 29 Oct 2026 13:00:22 +0000
Manifest this update: Thu 29 Oct 2026 13:00:22 +0000
Manifest next update: Fri 30 Oct 2026 13:00:22 +0000
Files and hashes: 1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: iWP2nTjDJMNgYCEYx2Ur050Mx24NytiT9OvgR+mRXww=)
2: pUIM7v10t5OGFrSPmfiKdj44TIc.roa (hash: Oo445ykGaPumhWQXMGT+U7KwU/ygHDEsLqsafB1c140=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:bf:4a:b6:c8:c3:48:df:a6:03:47:08:17:6a:ac:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Validity
Not Before: Oct 29 13:00:22 2026 GMT
Not After : Oct 30 13:00:22 2026 GMT
Subject: CN=926fc532e5627d2db22875ca461c30ce4286bd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:2b:cb:d3:26:39:34:88:20:92:8a:7d:de:
d5:11:da:3c:ae:c4:f7:8b:0c:d9:59:3e:23:6b:57:
ba:76:6a:40:76:b2:9c:14:af:e0:fe:54:1b:f1:85:
d0:9c:0a:2e:72:48:1a:df:62:c2:8d:17:67:22:ec:
fa:0f:a2:21:10:af:32:d4:1d:b2:df:5e:be:19:83:
57:11:a9:a6:9c:1c:a2:e7:10:f3:fc:99:79:10:72:
cb:ca:08:9a:18:f4:af:ac:99:75:6c:e0:07:40:33:
57:35:53:3b:18:a4:d7:af:87:32:93:57:d1:15:5f:
86:35:d6:ea:27:58:be:74:03:02:7c:f6:70:f9:c9:
b1:ff:15:bd:af:b7:f9:f5:17:8d:b2:a8:9a:ff:c4:
83:38:44:29:8f:cb:1c:f4:16:b1:6e:4f:a9:33:13:
ab:b0:34:c9:6f:39:99:0b:71:1a:8f:22:1a:36:1a:
11:41:f8:c1:b3:0e:21:5d:f5:56:06:cd:88:54:39:
fe:38:52:76:d3:e8:dc:ea:14:97:da:64:dd:45:2e:
89:ee:f2:e5:13:0b:e7:ab:71:f2:ec:ed:f1:4e:0b:
c3:a3:81:81:bd:c7:d1:20:d4:d7:f6:4c:52:7b:b8:
19:dc:a8:31:a3:c1:c2:f3:bf:40:6c:c1:fd:cb:da:
72:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6F:C5:32:E5:62:7D:2D:B2:28:75:CA:46:1C:30:CE:42:86:BD:40
X509v3 Authority Key Identifier:
keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:92:3d:ef:eb:95:50:7a:cc:3c:50:ee:76:66:30:ce:81:ac:
25:2b:b8:8b:28:92:a8:8f:6e:5d:f4:12:59:a0:32:e6:73:ed:
ad:1d:d1:9e:2b:91:90:20:49:ba:2b:1c:f3:e3:a3:62:dd:96:
33:6e:53:75:c1:20:90:db:f3:a8:45:0f:43:5d:d0:70:d9:6b:
f8:cb:83:d3:6d:9e:77:22:cd:63:7d:70:77:da:d8:54:04:6e:
9f:50:4d:a6:8f:cf:a9:0e:23:29:7d:d6:a1:0c:9d:0d:cb:78:
8c:8a:4c:db:af:72:75:92:5f:69:10:e6:aa:bc:0c:47:d1:d0:
c9:ed:d8:b5:91:8e:af:cc:42:d2:b3:3b:60:5f:6f:89:6e:ca:
3c:0b:33:a5:9e:1e:25:44:6c:ba:ef:a9:19:d0:bf:89:bf:e0:
13:d9:a6:6f:61:0c:95:34:99:67:c4:63:fc:a4:30:b1:3e:8a:
da:40:a9:aa:9c:d3:77:98:21:f2:d1:dc:eb:2f:85:15:97:61:
77:9a:d6:e8:1a:fb:0c:eb:48:9c:17:e7:ad:4f:b1:28:9f:19:
5e:35:7f:8e:14:13:6c:6a:73:22:68:13:0d:aa:e5:52:b0:ce:
ad:6a:17:df:04:b1:d5:4b:05:64:26:7d:b9:db:38:d7:c9:41:
b8:59:c3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 19:43:57 2026 by rpki-client