Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
File: DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft (raw, json)
Hash identifier: qrhehkTkXpOkxwBvMxCs55FaMedaloaeS0IF7F7JqAQ=
Subject key identifier: BF:E7:06:99:5A:DE:55:AA:CD:39:2B:63:59:28:9B:DF:8F:69:3B:E4
Authority key identifier: 0D:91:DC:30:C5:9E:AB:15:30:5E:C3:C8:BE:4E:52:CB:44:06:A9:2B
Certificate issuer: /CN=0d91dc30c59eab15305ec3c8be4e52cb4406a92b
Certificate serial: 01A021D5E9A0C814731FB32325F36CE9D16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
Manifest number: 44
Signing time: Fri 21 Aug 2026 01:01:02 +0000
Manifest this update: Fri 21 Aug 2026 01:01:02 +0000
Manifest next update: Sat 22 Aug 2026 01:01:02 +0000
Files and hashes: 1: DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl (hash: RFPm0HARkkSO00bA4yEFEynE0PBYbiirJV80Omn3asU=)
2: G-iHoe7mwWpGmZKyDftprKnS8pg.roa (hash: 8M86BXdsas21dJjs/WQbp6DYixMlHiokbVFdj5Dah24=)
3: zg5WlcC4NX4gmrZjUBDsq1SjIJY.roa (hash: RBJVe3dHTZ47Sn+AGjBXy4sIQT9e7Zb35xuSCKcJGSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:d5:e9:a0:c8:14:73:1f:b3:23:25:f3:6c:e9:d1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dc30c59eab15305ec3c8be4e52cb4406a92b
Validity
Not Before: Aug 21 01:01:02 2026 GMT
Not After : Aug 22 01:01:02 2026 GMT
Subject: CN=bfe706995ade55aacd392b6359289bdf8f693be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:07:4f:c3:46:78:64:d3:ec:c9:24:6e:44:6f:
09:22:5c:c2:38:a0:d1:39:39:9d:82:de:95:d5:c3:
e6:14:c8:6c:74:94:84:51:d2:f5:31:8c:12:30:bd:
09:00:98:a1:6c:7f:d1:32:bb:27:99:86:14:5a:94:
44:a6:74:6e:6e:b1:61:af:bc:7f:9e:c7:c9:4c:9e:
27:46:33:51:0a:0e:46:55:c8:cd:49:15:ed:7a:bd:
d3:61:55:64:46:e5:a1:16:8c:c5:cf:4f:38:f8:d0:
10:9b:df:1e:15:39:e4:54:bf:f7:69:8e:3c:36:f5:
be:38:ff:fb:84:5d:87:1b:28:46:0f:b6:00:48:40:
ae:78:d2:62:71:e3:68:46:e3:45:9c:50:4a:e1:79:
d2:a9:cd:81:9b:1f:c2:f0:c1:57:0e:f8:63:2f:a7:
39:bc:76:31:3d:0c:1b:ac:73:8f:96:f9:f2:e6:5d:
85:49:da:52:fc:e1:42:5d:99:8f:2d:49:62:15:75:
fb:9b:43:f8:25:1d:d4:8c:e0:6d:3d:00:4a:cf:33:
e5:d8:52:55:97:da:f0:9d:3a:76:dc:16:ac:e2:51:
e6:d2:e7:5b:d6:76:74:41:56:42:47:dd:e6:3b:78:
46:ad:9f:de:a3:03:da:9e:02:1e:52:a7:98:0c:55:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E7:06:99:5A:DE:55:AA:CD:39:2B:63:59:28:9B:DF:8F:69:3B:E4
X509v3 Authority Key Identifier:
keyid:0D:91:DC:30:C5:9E:AB:15:30:5E:C3:C8:BE:4E:52:CB:44:06:A9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1b:91:3f:13:c4:3b:33:f8:b5:0a:b5:17:21:90:a6:c6:02:
57:93:78:cc:d5:22:73:0c:6c:5e:e4:d1:d7:fd:63:5c:a2:12:
bb:57:0c:91:88:cd:b9:5a:8e:d8:ab:8a:b0:d9:28:5b:77:c6:
09:45:44:a8:1c:99:72:64:e6:f9:c2:41:5a:57:8b:e9:b6:41:
43:a3:62:d9:9e:da:9e:0d:b2:fd:c0:d5:4d:86:b8:2c:5f:1a:
99:2a:07:8c:1a:4c:fe:d3:d5:54:6e:86:6c:37:7e:45:5c:6b:
d7:33:be:53:c4:05:8f:d8:38:56:a3:e2:36:37:56:66:7b:42:
32:18:4e:2d:f0:f0:e4:07:47:e3:dc:06:6d:90:d7:1d:cb:c9:
d7:5e:e7:50:e5:dd:33:64:18:e0:ed:8d:78:54:f2:e1:4f:c8:
4e:18:7d:bd:55:bd:52:2b:b8:8f:72:63:44:87:cb:ff:86:01:
fb:db:5f:b3:04:5e:4a:9b:08:95:6a:6b:5e:bc:0f:96:8e:dc:
46:50:8c:55:d3:7e:48:83:5b:0b:d0:a2:14:3b:a4:b4:43:48:
87:43:ba:9b:07:aa:ac:e8:01:d3:7b:23:c1:99:8a:92:19:7b:
e1:3d:f8:19:ca:80:b1:61:3d:0a:a0:61:b7:09:ad:e1:99:76:
e0:af:97:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:54:27 2026 by rpki-client