Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
File: DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft (raw, json)
Hash identifier: H/5S3x/b8usXbDjiVHZSc2s/1dA9lAt92GSjGiZjsIc=
Subject key identifier: 2F:A3:8B:0F:E9:4E:B5:E7:7D:A7:E9:C8:3E:52:2A:1A:60:1D:A6:59
Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
Certificate issuer: /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Certificate serial: 01A13F026ED87D3299D78244D6C0A14B81ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
Manifest number: 1AA9
Signing time: Thu 15 Oct 2026 10:01:26 +0000
Manifest this update: Thu 15 Oct 2026 10:01:26 +0000
Manifest next update: Fri 16 Oct 2026 10:01:26 +0000
Files and hashes: 1: DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl (hash: UOXyoAZPwkhij2uGafflw6mSXnKAxZqj2oXI0elvRC4=)
2: O42Gic4dc360gIgddLeLvJAb0gg.roa (hash: cQ+n7ZgZ26eThRiniwC6AUO7/0CEDaEl6tna9PIT/9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:6e:d8:7d:32:99:d7:82:44:d6:c0:a1:4b:81:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Validity
Not Before: Oct 15 10:01:26 2026 GMT
Not After : Oct 16 10:01:26 2026 GMT
Subject: CN=2fa38b0fe94eb5e77da7e9c83e522a1a601da659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:32:ae:06:e7:18:4d:e5:c0:6e:9e:44:21:
08:e9:b7:8a:07:db:a4:f2:fd:66:5c:94:87:bc:80:
44:b8:9b:47:71:2f:bc:80:72:b2:d2:d0:5f:d9:53:
ce:cb:0b:dd:c6:33:79:1b:c8:31:19:1d:0d:b8:7d:
e9:28:ba:b2:7f:42:80:d3:88:b3:45:c6:62:74:3d:
36:bf:8b:de:81:fa:38:ea:53:07:e2:c5:fc:46:be:
e7:5b:9a:1c:2a:0c:ad:eb:ad:ef:90:d0:56:f1:3e:
27:ba:b6:ce:cd:88:ce:45:17:a0:14:b9:d2:31:74:
a2:2d:98:51:22:cb:fc:1a:6d:47:66:39:81:ab:54:
60:48:65:72:a3:de:13:63:89:ce:68:3c:1f:42:09:
34:b5:9d:be:96:2c:06:54:a2:cb:b6:0e:6e:71:52:
84:44:27:ff:94:41:79:6c:4d:b2:21:cb:f4:95:d6:
27:0a:6d:9a:96:aa:e1:3c:c2:32:ad:ee:65:54:67:
43:1d:a9:e9:8d:a0:ba:e3:9f:f6:45:0a:fd:e9:5e:
27:13:56:d2:ae:ad:95:2a:61:05:b5:a4:7f:4f:dd:
fe:89:ea:4e:74:d2:56:72:24:d8:ed:82:78:af:0c:
60:14:9a:f2:2e:f4:2a:d4:5e:27:61:95:5c:f4:ee:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A3:8B:0F:E9:4E:B5:E7:7D:A7:E9:C8:3E:52:2A:1A:60:1D:A6:59
X509v3 Authority Key Identifier:
keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:cf:f9:14:65:c4:56:cf:5a:6a:85:0a:ed:7f:12:f9:1c:5e:
1f:11:09:38:66:28:f0:de:30:e7:00:3d:be:b9:dd:a1:85:6d:
11:c4:35:49:55:30:61:54:f9:c9:74:e6:58:7f:27:88:f5:ca:
b4:1b:0f:84:d6:90:fb:43:6b:10:27:d7:1c:36:2c:15:3d:a6:
e7:2c:18:62:7c:52:0d:b4:20:18:3f:a1:49:0b:69:cb:10:8d:
58:cd:23:27:3c:07:ec:c9:d3:f0:54:b7:db:7f:25:8e:6d:4e:
60:d0:85:f8:42:55:dd:6e:71:67:dc:a7:10:d9:81:30:2b:bc:
92:76:c4:1d:b6:52:cd:27:51:96:72:e8:31:c0:2a:4e:b6:ee:
cc:b1:60:cc:6e:b0:31:6a:5b:61:ff:49:12:b4:d9:63:87:36:
bf:f5:59:50:43:dc:bc:10:b4:84:28:1b:b0:91:e2:8d:a2:43:
0e:f6:f2:6b:8d:71:b5:34:5d:88:f6:7a:a9:c4:30:a5:a7:22:
d6:70:69:be:18:23:e2:9d:1f:41:6d:74:50:21:37:6d:f6:a8:
ab:ef:08:14:ab:13:59:51:b7:fb:cc:9e:e0:f5:e2:4a:ff:2f:
38:db:82:58:1b:a9:8a:ea:c4:57:77:fc:f6:e6:76:c2:18:b0:
71:18:c2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:44 2026 by rpki-client