Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
File: D5JWkWA5A-8kSFy0vzXigweGe4M.mft (raw, json)
Hash identifier: DwYobQvVSYNB1h6UgyeG3E97LuwcPganL1Ilgqo7B2s=
Subject key identifier: 23:4D:39:09:D3:28:FF:EE:E6:AA:B4:C2:E9:A8:52:BF:7D:82:96:6D
Authority key identifier: 0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
Certificate issuer: /CN=0f925691603903ef24485cb4bf35e28307867b83
Certificate serial: 01A13E5CC22349837CF9B377F12BBE199E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
Manifest number: 08B3
Signing time: Thu 15 Oct 2026 07:00:28 +0000
Manifest this update: Thu 15 Oct 2026 07:00:28 +0000
Manifest next update: Fri 16 Oct 2026 07:00:28 +0000
Files and hashes: 1: 80qBnu2XnhFRiBmZiF038oU110Q.roa (hash: LIRyJNKQ/3u7PO7ipf6wdyHbe0bKIPQwJsid3/CO5Lg=)
2: D5JWkWA5A-8kSFy0vzXigweGe4M.crl (hash: oq1nx1/hFblGXQcodCBF0HeFuhKWThtIcgJg7l1WcsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:c2:23:49:83:7c:f9:b3:77:f1:2b:be:19:9e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f925691603903ef24485cb4bf35e28307867b83
Validity
Not Before: Oct 15 07:00:28 2026 GMT
Not After : Oct 16 07:00:28 2026 GMT
Subject: CN=234d3909d328ffeee6aab4c2e9a852bf7d82966d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:63:c6:0b:89:58:c2:d1:96:7e:93:05:b1:
61:64:db:ca:cb:dc:a8:92:50:90:82:e3:58:c8:47:
57:d0:31:76:35:fd:30:f9:02:24:2a:77:22:8b:eb:
d8:24:b6:c9:da:94:29:f3:dd:19:49:25:86:02:0d:
83:a3:98:69:cb:74:6a:02:0b:45:21:d0:4b:13:2c:
90:10:b7:6e:59:cc:8c:64:eb:ae:7f:d2:43:f5:b6:
86:79:75:29:63:7a:09:80:90:88:36:b1:5f:bb:6a:
db:10:18:80:0e:b9:ba:bf:93:79:86:10:3d:5a:6d:
b7:3b:ff:ac:74:22:2d:c5:a2:5a:dd:b0:f8:83:d5:
3b:42:e7:d8:79:df:c0:16:b2:66:88:a6:56:52:fc:
a6:c3:16:ee:f0:bc:78:36:06:e7:a4:14:b9:a3:5e:
ef:78:22:dd:39:89:9b:d7:5c:53:03:0a:d0:c7:e3:
d1:db:f5:22:7e:93:ca:1c:38:18:ee:a4:4a:93:b4:
e4:33:10:d1:68:45:d9:09:85:98:73:b2:aa:39:8f:
94:2d:e9:c3:ed:31:f7:5f:f4:c7:e0:34:b0:5a:22:
fb:32:32:cb:8b:04:01:15:60:d1:98:ff:ae:59:ea:
54:9e:20:d9:0f:ee:71:8b:ad:3d:1a:77:e5:67:64:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4D:39:09:D3:28:FF:EE:E6:AA:B4:C2:E9:A8:52:BF:7D:82:96:6D
X509v3 Authority Key Identifier:
keyid:0F:92:56:91:60:39:03:EF:24:48:5C:B4:BF:35:E2:83:07:86:7B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5JWkWA5A-8kSFy0vzXigweGe4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ff9252-3db4-455f-b20f-e3e302005d8f/1/D5JWkWA5A-8kSFy0vzXigweGe4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5b:7a:e6:87:da:d8:54:a8:8c:d4:0a:7f:a9:ff:c0:19:58:
4d:13:36:35:6d:83:9d:69:69:d8:2b:49:44:71:67:83:b4:47:
12:f7:92:fd:d9:57:8e:98:bb:b6:e5:23:8c:78:30:6f:56:1c:
af:ef:ce:b7:a8:65:af:e4:7f:02:dc:1b:10:8e:58:42:ec:4f:
49:d8:ef:29:11:8a:af:2c:de:b1:5b:6e:c0:df:bd:aa:3f:57:
10:4d:40:cb:1f:87:0a:d5:83:c3:f3:67:4c:73:c4:80:f3:f9:
cd:7f:b6:2f:fe:3d:d6:b2:33:58:10:8b:a4:eb:51:d5:d5:aa:
98:24:10:2b:bd:11:b0:c7:9b:14:8a:48:d7:6d:a8:8b:33:98:
43:40:83:6d:37:a0:c1:55:f8:dc:9d:91:77:fd:7c:3f:3a:94:
d8:e1:25:70:70:fd:66:da:df:18:cf:d9:14:fe:90:e1:1b:f5:
62:2f:e4:7f:c6:a7:c6:13:07:c0:f7:55:0e:9b:dd:8c:82:1f:
fc:1c:b8:65:7b:4b:f7:ca:6f:16:23:69:73:8f:83:24:aa:e8:
58:5c:9a:5d:ad:44:0d:ca:d8:7a:d8:25:a4:73:90:0e:c2:92:
87:37:1e:7e:5b:ef:8b:46:30:e0:43:de:82:7b:f9:e0:46:77:
32:e6:42:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:09 2026 by rpki-client