Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft (raw, json)
Hash identifier: xcum+twrleWvsIPvSoaVTvd2Yd8J1JURGPbJn9Zd7T0=
Subject key identifier: E2:9E:61:1A:FF:EA:49:46:E8:25:03:7A:91:0E:5B:AB:F4:1B:34:E7
Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
Certificate issuer: /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Certificate serial: 01A0005C4BC8E330C1D335B72A0513F0A13B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 13:00:43 +0000
Manifest this update: Fri 14 Aug 2026 13:00:43 +0000
Manifest next update: Sat 15 Aug 2026 13:00:43 +0000
Files and hashes: 1: DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl (hash: 6X6AsIzCk9H+hzfY+vw6T/iPfMpZhFm3GUbN54VJBCA=)
2: O42Gic4dc360gIgddLeLvJAb0gg.roa (hash: cQ+n7ZgZ26eThRiniwC6AUO7/0CEDaEl6tna9PIT/9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:4b:c8:e3:30:c1:d3:35:b7:2a:05:13:f0:a1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Validity
Not Before: Aug 14 13:00:43 2026 GMT
Not After : Aug 15 13:00:43 2026 GMT
Subject: CN=e29e611affea4946e825037a910e5babf41b34e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:c0:3b:85:33:2b:0d:81:c6:30:8e:e3:03:
34:93:48:2b:2b:47:19:84:96:6f:9d:c7:54:6c:96:
b6:1b:94:e4:15:3e:f1:fd:c4:e8:cb:dc:99:3f:75:
e7:09:b3:12:fd:10:5c:9c:16:39:d6:b3:64:67:4f:
1f:f7:a1:a0:7b:08:fd:17:f3:3b:b5:f7:a0:18:58:
7d:c3:2f:29:e1:a1:24:23:2a:89:4b:ea:d8:6c:c8:
92:6a:07:e3:1b:03:fa:a1:93:64:06:8c:a1:65:40:
2f:79:99:8e:79:9e:b4:0c:a6:79:dc:cf:dd:6f:8a:
5c:63:e0:69:3e:71:97:7e:11:1c:7d:69:4d:cd:b0:
10:78:a0:c3:48:cf:59:80:41:22:6f:30:f9:cd:95:
3b:ec:32:e2:2d:0b:42:80:99:4e:7d:e6:79:ba:51:
dc:02:a2:4b:c0:87:9b:6d:96:c8:5f:67:29:05:76:
e4:b6:c3:21:4d:db:2e:b6:a4:27:43:b9:de:d7:08:
66:f6:f3:9b:56:c1:8c:20:f0:9a:00:7d:9b:6d:cd:
14:ba:f7:3e:49:14:73:93:6a:85:84:f1:a8:b8:7a:
aa:3a:94:9b:d7:51:01:ff:f1:0d:6c:ed:03:fd:f9:
19:18:ba:08:07:24:4d:2d:12:a4:c9:de:8c:85:b3:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9E:61:1A:FF:EA:49:46:E8:25:03:7A:91:0E:5B:AB:F4:1B:34:E7
X509v3 Authority Key Identifier:
keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:3f:1d:52:78:fd:04:52:2a:29:b4:99:93:ae:d7:36:39:45:
b8:02:25:29:f2:45:21:46:27:a0:85:00:3e:09:ae:b6:b9:ba:
ad:81:80:66:31:6e:72:98:aa:89:b7:d4:14:be:6f:e7:74:5a:
d9:b6:62:53:17:40:f9:ab:83:d7:7e:b0:d4:b7:7e:51:30:c2:
47:54:3e:1b:47:8a:3f:52:8f:02:79:07:2e:66:6e:2a:9d:c5:
53:a8:0f:45:da:af:f9:8f:0c:12:c9:f9:a2:fa:bb:0d:ae:d2:
c2:ba:92:05:92:9c:da:69:07:4f:d9:09:e7:7f:7c:a2:c3:0a:
70:75:e8:3e:6b:fa:c4:db:89:2d:71:b4:f5:b0:71:fc:88:52:
40:e0:44:7f:d5:a3:71:00:4b:a8:fc:c2:a1:f1:e7:c8:21:0a:
49:39:17:4a:6a:5d:65:84:ab:c6:f4:40:12:c7:c0:5b:6d:5c:
3b:a7:1b:05:49:30:7a:ba:d9:c5:dd:be:b2:e1:1b:72:59:42:
41:57:26:c1:0c:56:f4:a5:74:9e:b3:d1:02:2e:f0:9c:74:4a:
c1:da:8d:31:66:71:c6:77:1d:02:3e:13:09:27:41:4d:3c:96:
19:cc:a2:af:e3:56:fc:50:79:57:1e:b5:c2:dc:b5:56:a7:38:
f2:81:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:12:26 2026 by rpki-client