Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
File: DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json)
Hash identifier: /CA1ZemlME1iLCSV35ONtHEZGEGiRaxJ7WsP0dmNEdA=
Subject key identifier: B7:F6:71:0E:69:F4:C1:09:22:C6:21:00:6E:F6:0F:4C:30:7D:AC:39
Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
Certificate issuer: /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Certificate serial: 01A001DCD09BBCB78DDF3A18C8D175339EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
Manifest number: 1268
Signing time: Fri 14 Aug 2026 20:00:43 +0000
Manifest this update: Fri 14 Aug 2026 20:00:43 +0000
Manifest next update: Sat 15 Aug 2026 20:00:43 +0000
Files and hashes: 1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: qhQHCk/d+zsUEbbUQSwfMYJCIh6Y9YfTXLQo8kjvK10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:d0:9b:bc:b7:8d:df:3a:18:c8:d1:75:33:9e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Validity
Not Before: Aug 14 20:00:43 2026 GMT
Not After : Aug 15 20:00:43 2026 GMT
Subject: CN=b7f6710e69f4c10922c621006ef60f4c307dac39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8c:af:1a:38:0d:16:a6:ee:44:b9:f2:a6:fd:
ed:8e:0d:56:f2:66:f9:12:3f:b1:57:9d:d3:09:68:
6e:fe:74:e2:93:a5:20:04:df:8c:30:bc:7d:55:85:
fd:96:80:db:51:1c:78:12:12:4f:0e:fb:79:a6:76:
4e:05:08:32:17:1c:14:53:e7:02:c0:ed:b3:7f:2d:
15:16:64:33:f0:6e:bd:8b:26:78:71:cb:20:af:5b:
b9:9b:b8:1b:73:82:4e:53:17:35:f2:83:2a:d2:f6:
7d:ec:11:02:84:9e:b4:4c:fa:2f:95:52:25:44:5b:
41:25:a9:20:de:11:5f:68:05:23:be:f3:0c:a1:89:
80:e8:37:6c:d0:3f:6c:7d:c9:fa:fb:ca:c9:49:37:
e8:c8:26:66:01:e0:c6:e6:0c:6c:30:fe:2b:6d:3f:
91:6b:a0:68:53:fd:10:6c:6c:cb:46:3d:04:27:68:
d1:4e:b2:96:54:04:9b:ae:1c:4b:7f:1a:e9:30:6b:
e1:12:39:9f:00:69:43:56:9e:0e:21:4f:0a:ac:ab:
e9:4b:92:eb:70:7a:40:55:c2:2b:81:0e:eb:e7:0a:
20:ef:5e:e5:3e:8b:0f:7f:35:02:18:33:c1:aa:46:
91:91:44:f2:18:d5:00:b1:67:91:67:9a:68:bb:78:
9d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F6:71:0E:69:F4:C1:09:22:C6:21:00:6E:F6:0F:4C:30:7D:AC:39
X509v3 Authority Key Identifier:
keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:25:72:d3:f7:6e:d4:15:eb:86:62:c4:6e:5b:a8:72:7b:84:
25:a8:ad:80:e3:b4:c6:4f:4e:27:1e:34:db:6f:da:b4:f5:ab:
ef:88:4f:9c:6d:bb:17:19:3f:4e:a0:22:5e:6a:7d:a9:09:01:
e4:50:ee:d3:74:be:f7:31:1a:d9:4b:1a:a1:08:2d:e6:3f:31:
ce:96:0c:58:bc:3d:7f:21:6a:72:b6:24:0b:e4:18:25:2a:28:
47:ff:55:30:24:90:3a:c3:53:f0:df:97:e0:60:0b:d5:48:a0:
98:a5:46:2f:a7:2a:04:4b:14:ac:bc:06:cd:3f:8a:a4:ff:c6:
1e:6e:b5:e5:b7:18:61:50:d2:c5:31:2f:15:25:13:2e:dc:99:
0d:c4:2e:a6:d3:64:f1:74:6e:6f:5a:4e:37:0e:d8:f1:24:e4:
13:5f:ce:5d:6c:c7:f1:5c:6c:11:4f:4e:2a:31:80:74:f5:5e:
dc:d0:91:45:5c:a4:05:17:21:e4:be:db:df:47:14:b0:9c:8a:
cd:10:28:eb:d3:9d:b8:fc:40:db:50:db:8a:0c:20:df:22:bb:
99:af:6d:3e:44:64:45:fa:0f:3c:1b:5e:e4:44:ef:16:1f:92:
b2:17:99:98:30:c0:d4:e1:3e:a2:d8:d9:2d:b0:0f:2a:8d:d9:
e1:5e:68:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3NCbvLeN3zoYyNF1M57lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTFkZmQ0NTY4MzQyODljMWZkMDNhMGZlZjFiNTJhNWVm
ZDFkOTEwHhcNMjYwODE0MjAwMDQzWhcNMjYwODE1MjAwMDQzWjAzMTEwLwYDVQQD
EyhiN2Y2NzEwZTY5ZjRjMTA5MjJjNjIxMDA2ZWY2MGY0YzMwN2RhYzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYyvGjgNFqbuRLnypv3tjg1W8mb5
Ej+xV53TCWhu/nTik6UgBN+MMLx9VYX9loDbURx4EhJPDvt5pnZOBQgyFxwUU+cC
wO2zfy0VFmQz8G69iyZ4ccsgr1u5m7gbc4JOUxc18oMq0vZ97BEChJ60TPovlVIl
RFtBJakg3hFfaAUjvvMMoYmA6Dds0D9sfcn6+8rJSTfoyCZmAeDG5gxsMP4rbT+R
a6BoU/0QbGzLRj0EJ2jRTrKWVASbrhxLfxrpMGvhEjmfAGlDVp4OIU8KrKvpS5Lr
cHpAVcIrgQ7r5wog717lPosPfzUCGDPBqkaRkUTyGNUAsWeRZ5pou3idzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLf2cQ5p9MEJIsYhAG72D0wwfaw5MB8GA1UdIwQY
MBaAFA2R39RWg0KJwf0DoP7xtSpe/R2RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mYmJlNDEtMTViNy00ZjZlLTllMDct
OGJjY2UzMDNiOTE5LzEvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mYmJlNDEtMTViNy00ZjZlLTllMDctOGJjY2UzMDNiOTE5
LzEvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiVy0/du
1BXrhmLEbluocnuEJaitgOO0xk9OJx4022/atPWr74hPnG27Fxk/TqAiXmp9qQkB
5FDu03S+9zEa2UsaoQgt5j8xzpYMWLw9fyFqcrYkC+QYJSooR/9VMCSQOsNT8N+X
4GAL1UigmKVGL6cqBEsUrLwGzT+KpP/GHm615bcYYVDSxTEvFSUTLtyZDcQuptNk
8XRub1pONw7Y8STkE1/OXWzH8VxsEU9OKjGAdPVe3NCRRVykBRch5L7b30cUsJyK
zRAo69OduPxA21Dbigwg3yK7ma9tPkRkRfoPPBte5ETvFh+SsheZmDDA1OE+otjZ
LbAPKo3Z4V5oLg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:12:06 2026 by rpki-client