Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: jzZ6ulYKdVwlGMNAu6NekYn4m2MY8wqj4lZGt35/VcQ=
Subject key identifier: 91:76:D1:7A:5A:1C:77:46:03:0B:F9:58:AD:DF:CC:A9:A0:17:73:06
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 01A001A5E7482E2D16C6B30225A40F7BF017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 080F
Signing time: Fri 14 Aug 2026 19:00:44 +0000
Manifest this update: Fri 14 Aug 2026 19:00:44 +0000
Manifest next update: Sat 15 Aug 2026 19:00:44 +0000
Files and hashes: 1: 80qBnu2XnhFRiBmZiF038oU110Q.roa (hash: LIRyJNKQ/3u7PO7ipf6wdyHbe0bKIPQwJsid3/CO5Lg=)
2: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: Jw4sRd/7///zA3sVRZCCeQxLarL5QOOMdOK8p+PxrVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:e7:48:2e:2d:16:c6:b3:02:25:a4:0f:7b:f0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Aug 14 19:00:44 2026 GMT
Not After : Aug 15 19:00:44 2026 GMT
Subject: CN=9176d17a5a1c7746030bf958addfcca9a0177306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1e:1a:b8:17:2d:d8:21:28:7c:c8:0d:64:63:
64:96:7e:c0:18:1d:6d:6e:81:94:81:23:5f:b4:c5:
60:e4:6d:46:d2:e6:15:cb:ba:f3:78:2a:52:21:53:
fe:cd:d4:c5:89:2d:25:56:97:1a:ab:b5:eb:b3:f1:
67:b4:b9:8c:b6:85:23:af:fc:ee:32:3e:14:eb:ae:
73:6a:38:b1:d5:06:db:00:6f:25:7e:18:0e:23:2d:
0c:2c:f2:62:dd:e2:c2:92:0f:0b:ba:91:ce:fd:25:
df:4b:5b:e2:08:3c:0e:c1:f9:a7:7e:c2:19:07:50:
34:31:4a:bf:dd:45:7c:95:03:09:0a:d2:41:e4:5e:
ef:df:ba:80:34:c6:8d:08:8d:f7:1b:28:3a:48:2f:
61:e8:02:a5:bf:d4:cf:29:68:9f:1e:54:0c:1d:4e:
0a:81:3e:6c:96:f8:56:f0:69:3e:35:2d:ac:32:5a:
f4:d5:cc:d9:da:9a:08:f3:96:c4:79:32:fa:0f:90:
80:cf:cf:4e:36:f4:49:27:6d:d6:17:da:d5:ca:d0:
81:bc:04:ad:2f:3e:83:45:8a:81:e8:12:59:50:33:
cc:3f:bc:42:e3:d1:ac:6a:b4:d8:03:58:ab:e3:fe:
03:30:3c:7a:b3:2b:6a:6e:d6:20:f5:84:40:a8:4c:
3b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:76:D1:7A:5A:1C:77:46:03:0B:F9:58:AD:DF:CC:A9:A0:17:73:06
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6a:f2:54:75:3d:e8:9f:50:b6:86:ed:42:a7:91:89:2a:76:
d4:36:a7:bb:fc:c3:13:42:bf:dc:84:a3:e7:e9:9f:fc:f1:b6:
20:58:60:78:d0:02:a9:ef:95:ae:d0:c4:d4:c5:1b:c1:0b:16:
40:13:77:4d:cb:8b:4d:a5:42:7b:ec:2b:f3:aa:18:7f:67:33:
45:89:21:c0:36:9f:ef:bd:b9:d7:a3:98:7f:00:6e:24:4f:a3:
ca:a9:1e:df:67:24:5e:0f:63:db:4b:eb:8a:27:93:0d:16:b2:
fd:e4:c3:76:2a:fd:ce:82:5c:42:be:48:a9:70:a5:cd:c9:90:
76:c5:79:ea:4a:2e:ce:81:61:ae:b5:dd:c2:ca:b4:e4:f3:7e:
3b:47:52:9a:25:71:a5:5b:22:85:42:77:9d:eb:8f:3f:7f:98:
0d:10:e2:c2:3d:51:4d:0a:a9:ae:5f:2e:c2:e0:3c:23:b8:1b:
10:ff:07:3f:63:c5:eb:9e:d8:d0:14:19:87:7a:b8:c4:03:6c:
93:3e:fd:01:eb:e5:43:85:01:c4:4b:84:09:ac:66:f9:c1:ea:
98:92:f4:a3:7a:ab:8a:7a:bc:d4:3d:2f:97:67:e5:2f:f8:66:
5f:79:c8:03:7e:e6:b3:b5:f2:14:f2:5b:d0:df:88:25:c4:38:
59:66:dd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:20 2026 by rpki-client