Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json)
Hash identifier: tsVCsPrOb2XTyOVWCSulNjui6/0Z/6qZwp/f5nMOxvk=
Subject key identifier: B4:8D:AC:66:0A:DC:71:19:AE:94:DA:59:46:69:E2:42:95:F0:CB:EA
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 01A13E9498897151DD9FD452B9CE3FB9E9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
Manifest number: 0828
Signing time: Thu 15 Oct 2026 08:01:28 +0000
Manifest this update: Thu 15 Oct 2026 08:01:28 +0000
Manifest next update: Fri 16 Oct 2026 08:01:28 +0000
Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: J3K6sHNq6TS0com6VPpgy4/Ti6J6T9AySE0mKx79+Zw=)
2: elu1abDHd3RfzpApGEKnDnwdAcI.roa (hash: HHOSPK0nfYS+xwtq8H1DXb/qJlWmVpm7P0B6dxlEAcU=)
3: ygV7k6nVaZCAnScNFHt4paZc8MM.roa (hash: Fv0BlTXpeeDK0QHZ/q3zQcl9lKT33vm1AnUd5vQrW08=)
4: yi7x-mBtwQeg8FprNLWvslMCrZg.roa (hash: 5V/O65AIDW9qxW7W9/IyUH97d/aU4p9WBBDyRlN9KG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:98:89:71:51:dd:9f:d4:52:b9:ce:3f:b9:e9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Oct 15 08:01:28 2026 GMT
Not After : Oct 16 08:01:28 2026 GMT
Subject: CN=b48dac660adc7119ae94da594669e24295f0cbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:62:cf:93:fe:34:b2:89:96:ae:f6:ad:4c:cd:
e7:fa:d6:ea:6d:22:13:e3:44:c7:64:d0:49:37:5f:
ca:39:de:2c:95:db:03:a1:02:f0:a3:1d:f8:9a:a2:
64:77:c4:b0:50:95:b3:89:fb:b7:d6:18:95:a4:db:
8d:20:a4:a9:ba:9f:1d:d4:2e:19:c7:b0:b3:67:f6:
78:fa:80:a4:a7:69:e5:d8:71:dc:a7:a7:9a:ba:41:
01:9f:f1:d3:8d:ac:ad:7f:38:7a:c4:01:b8:b8:e0:
d7:5b:85:2a:a5:41:c3:65:ab:94:bf:fa:3f:72:48:
40:04:16:a3:c8:e0:de:0c:37:42:05:0c:fa:6c:29:
3c:d5:b1:3c:48:a8:40:07:16:5f:36:16:53:e1:c8:
10:59:01:a7:41:36:07:af:97:ad:d7:78:12:ce:ce:
6e:19:d0:a0:3a:40:53:9c:e2:79:34:ff:e3:06:51:
7e:08:f0:8d:f0:1b:81:46:4f:7c:f5:7f:a1:e8:8c:
b3:6d:b9:d1:2a:22:3a:f0:07:2c:90:43:fc:a2:cf:
bc:8a:67:58:ee:8f:4f:6a:8d:b0:e3:42:8b:31:c7:
29:25:e1:1a:c2:d5:a3:64:32:44:52:df:b6:cf:b9:
7d:dc:3e:b0:81:8d:71:de:aa:9e:00:49:af:4b:91:
1c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8D:AC:66:0A:DC:71:19:AE:94:DA:59:46:69:E2:42:95:F0:CB:EA
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1f:f0:c3:be:06:79:5f:1c:1b:c0:17:28:22:5f:c6:f1:eb:
f3:6b:92:45:77:0c:9f:61:c9:4e:72:af:fc:22:f9:4f:24:9e:
7b:f8:8c:42:3c:2a:0f:cb:79:95:0f:9b:47:ff:40:5a:82:e7:
12:d5:23:12:bd:7e:f9:16:2b:30:60:a3:3a:f3:67:37:14:fc:
ea:61:f2:73:ef:59:3d:b5:50:3a:9b:01:f8:67:9f:56:84:ec:
8c:c0:db:9a:74:c2:93:1a:3d:20:2e:ea:e5:54:1b:8f:6e:1a:
61:3d:a1:f1:6c:a4:d9:bc:6d:0f:1e:4c:77:ec:b8:c7:a9:11:
48:48:d3:9b:d4:00:33:9c:b9:fd:05:63:47:d9:ed:7e:c0:a3:
8b:ef:7b:90:e6:62:24:4b:be:f6:ab:51:06:9c:56:e0:91:8a:
73:32:41:87:10:4b:5d:f3:d3:a0:68:b2:3c:7b:68:d4:87:ef:
a6:95:8e:e8:6c:90:b7:d6:f4:2f:23:3d:53:2f:66:d9:63:16:
5c:1f:81:9d:31:51:36:69:f9:e4:25:ae:af:97:8d:03:42:b3:
63:43:c3:97:22:e0:8b:37:33:09:96:2c:c4:4f:b7:98:d3:71:
67:32:56:70:07:96:0e:67:41:05:8f:02:28:c0:8d:69:db:d7:
4f:bd:40:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:45 2026 by rpki-client