Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: RyZSreG6TS8QCY5Aj1LkSpirk5X/4Hd/IT9lmfvSJqA=
Subject key identifier: 3A:19:27:0F:DE:5C:39:96:00:A8:DA:5C:0F:EF:32:BC:01:56:82:58
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 019E2F5FAF37EBFBBFAA577EA400C75CA9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 0602
Signing time: Sat 16 May 2026 06:01:00 +0000
Manifest this update: Sat 16 May 2026 06:01:00 +0000
Manifest next update: Sun 17 May 2026 06:01:00 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: l8esGcCFt1NMrlxfem462Z3NlZgmk5/pL4i+D4oproU=)
2: w8wkCFScjGQvdttAQ8x_xzp50Xk.roa (hash: w/c38fhRy3be0XuDkxP9zkUOolRFgZszn3JD1Qb99Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:af:37:eb:fb:bf:aa:57:7e:a4:00:c7:5c:a9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: May 16 06:01:00 2026 GMT
Not After : May 17 06:01:00 2026 GMT
Subject: CN=3a19270fde5c399600a8da5c0fef32bc01568258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:9f:dc:f6:73:6b:df:5e:59:77:34:bc:51:
a9:d0:c3:73:e9:ee:01:e7:be:e7:72:6d:bb:1a:18:
6a:63:7b:ba:0d:85:eb:e1:64:41:de:e7:e1:0a:f4:
e4:52:07:56:71:c6:3f:57:a5:bd:2b:96:a9:3c:ee:
5a:87:33:e5:77:fe:a7:38:db:9b:04:08:31:aa:31:
df:de:be:2e:f7:23:cc:ac:d7:00:37:93:1f:67:8e:
69:45:5e:7f:57:1b:4d:38:ec:83:9f:30:ad:a5:f0:
0b:41:c6:3a:82:de:64:1e:3d:2f:ac:f9:34:ca:eb:
81:00:74:6a:30:73:84:9a:32:5d:e1:44:78:74:e3:
d6:b7:68:6b:4e:d7:a5:1c:9a:40:79:bd:38:f4:78:
5a:8b:98:03:cc:5d:36:fb:a1:86:83:62:f3:98:ab:
89:58:a7:7b:5e:74:71:3c:79:4e:41:49:79:1e:2a:
f8:02:e1:e2:43:b1:76:c7:4d:32:41:32:a8:d2:e8:
ba:19:4f:fb:53:ae:30:0e:84:8f:a4:b2:f2:6d:92:
f9:c6:91:6b:71:9e:6b:00:ba:05:4d:ee:0e:78:71:
55:25:cf:e5:31:83:ff:b4:a8:70:19:ff:e8:b1:c5:
0e:ba:d0:55:ba:8e:85:62:40:ff:25:57:19:be:79:
1d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:19:27:0F:DE:5C:39:96:00:A8:DA:5C:0F:EF:32:BC:01:56:82:58
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bd:94:ea:29:0d:77:fa:9f:8f:87:36:c3:cf:59:f7:c9:aa:
5d:e4:7c:79:ba:6c:e9:17:02:04:d4:2d:2b:4f:6a:5b:5a:ef:
1a:7d:08:8e:cf:a4:b4:a2:72:34:f9:c8:0c:a5:a3:0d:8a:d5:
82:80:f5:03:e7:ef:9c:3f:c6:c0:dd:15:6e:34:d4:e5:18:3b:
2d:c7:0a:1f:de:f2:84:a1:b0:df:51:0e:2d:51:70:b5:79:79:
0d:df:b4:41:1e:51:5a:b9:08:64:06:8c:ca:53:7e:db:ce:23:
39:7a:c7:79:4d:6f:20:e9:73:11:e9:de:28:eb:cb:2d:da:d0:
84:e7:65:9f:e3:c7:3a:d0:40:6c:30:90:82:16:de:60:f2:7a:
54:17:45:f3:fc:5b:f2:13:15:c9:ae:5e:e9:77:58:6c:04:be:
5b:11:f6:11:cb:bf:30:f4:b7:15:d5:f8:fc:c6:b5:3c:ef:17:
11:2c:05:08:78:68:77:6f:02:23:23:8b:f3:75:a4:ea:3a:e2:
b4:92:cf:72:2b:bd:99:26:87:f2:71:a0:66:e3:34:d7:15:30:
ee:8e:79:66:fc:2c:07:a2:51:71:cb:c1:f7:12:6c:ff:64:e0:
7e:03:85:b5:b5:12:dc:c7:6a:f0:1f:a4:e6:2e:8f:1a:af:3d:
62:d6:85:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:27 2026 by rpki-client