
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: /9pNaNMyInHrPNcArCnnDpXAYYN8tO64F9v3q5JDh5s=
Subject key identifier: 92:EB:00:FF:36:BC:37:0C:E9:E0:87:2A:84:FF:FD:A5:B1:F4:C5:5D
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 019F190CC9EFB4DFE68AA240095508F631A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 067B
Signing time: Tue 30 Jun 2026 15:01:36 +0000
Manifest this update: Tue 30 Jun 2026 15:01:36 +0000
Manifest next update: Wed 01 Jul 2026 15:01:36 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: /SLS1Ax2C8e1x11AGyHnXcmJ1LwyoS+Dzjc8QMKbu2Q=)
2: w8wkCFScjGQvdttAQ8x_xzp50Xk.roa (hash: w/c38fhRy3be0XuDkxP9zkUOolRFgZszn3JD1Qb99Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:c9:ef:b4:df:e6:8a:a2:40:09:55:08:f6:31:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Jun 30 15:01:36 2026 GMT
Not After : Jul 1 15:01:36 2026 GMT
Subject: CN=92eb00ff36bc370ce9e0872a84fffda5b1f4c55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:39:7e:cd:b6:be:ab:74:bf:12:06:61:5d:21:
ff:bd:c7:a1:e8:ec:7d:b5:6d:4c:cd:36:0c:e3:34:
ab:2e:9f:b4:82:b9:6c:ac:0e:03:9f:d7:2b:37:4f:
b3:9b:5e:60:48:cb:3b:2b:38:22:77:2e:0e:33:96:
3a:fc:d4:b9:6b:59:7b:7d:30:e2:ea:a6:31:e8:92:
ed:20:23:18:d8:6a:00:5e:57:a4:e2:6d:cf:81:a1:
05:02:46:1d:f5:c0:1f:c3:52:97:86:9f:5c:9e:85:
aa:c2:2c:27:3f:4b:3b:04:63:4e:d6:0d:fe:b7:d7:
b6:c2:e7:f2:45:ad:a3:13:63:11:9c:3c:fc:64:40:
90:2a:c0:e8:e9:16:31:ac:a8:12:cf:68:31:a1:bd:
5f:56:bd:15:f5:e6:94:41:f1:3d:96:c8:c4:53:61:
b3:42:07:fc:77:8c:c8:fb:35:4e:79:af:40:3f:45:
8c:97:83:b1:e4:2d:47:94:c4:87:80:da:c5:fc:ad:
74:b9:e8:3b:c2:32:30:f5:31:0a:a4:00:16:7e:51:
cd:1d:cc:f0:c6:ba:c6:44:c0:49:77:e2:29:28:12:
96:23:a4:4f:8f:29:ab:e9:1e:2e:38:2a:af:9b:66:
0c:1d:ce:a5:18:4a:fe:64:52:44:74:83:a3:40:87:
2a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EB:00:FF:36:BC:37:0C:E9:E0:87:2A:84:FF:FD:A5:B1:F4:C5:5D
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:72:27:c1:23:e4:c6:72:32:38:2c:09:7a:9e:9a:8c:97:10:
80:74:d6:37:5b:88:f9:6c:f3:a5:14:8c:db:d4:3e:7d:4c:74:
d7:e4:3d:ca:b4:e7:6b:02:15:53:42:ea:d1:74:bf:01:88:64:
fd:b6:a1:77:da:25:11:d9:04:24:86:68:d9:e1:96:4a:76:dc:
32:31:fb:2d:ca:c6:f4:99:c7:f6:40:e5:1c:4c:2f:36:fc:bb:
39:fc:c6:d5:d2:d0:b5:6a:8e:33:2b:b9:e8:c7:68:8f:f7:d4:
ab:25:d1:68:89:eb:c7:e2:df:e2:5e:f7:d0:68:a2:8b:ae:db:
4a:4d:9b:0a:f9:7c:8f:e0:64:ac:a7:43:ad:20:96:67:1b:00:
c1:9a:41:e5:10:c4:2a:c9:71:3b:2a:d5:f2:bf:c6:45:15:da:
2b:0b:72:ce:d3:84:a2:fd:22:ad:94:f5:5b:71:7e:53:9c:86:
19:3e:72:fa:da:7c:dc:ad:d6:e8:c9:21:46:61:25:e3:0b:07:
18:45:28:8f:e1:9d:6f:e8:17:1a:8a:70:b6:29:ae:7f:2c:1d:
62:45:a2:c5:02:29:c4:3d:8e:d7:93:10:37:23:54:da:98:ef:
9f:8a:ad:c8:8b:64:07:93:6c:08:4c:61:59:8f:15:90:0f:37:
89:d5:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:05 2026 by rpki-client