Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: EsQAjey37/fRHevuDvK0LDJIwQxtYB2niGI6RlmEs9A=
Subject key identifier: 69:9B:45:80:C2:F2:8A:D9:B0:CB:E9:0B:7F:7D:BF:11:0B:46:E3:1B
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 01A13D815A2C174EE7CCE32C9BDCED7EB0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 0797
Signing time: Thu 15 Oct 2026 03:00:49 +0000
Manifest this update: Thu 15 Oct 2026 03:00:49 +0000
Manifest next update: Fri 16 Oct 2026 03:00:49 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: cySIj9VnY5D1hfHCw9GgzhJwBdIpqhEPAq3ACzEhKDI=)
2: w8wkCFScjGQvdttAQ8x_xzp50Xk.roa (hash: w/c38fhRy3be0XuDkxP9zkUOolRFgZszn3JD1Qb99Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:5a:2c:17:4e:e7:cc:e3:2c:9b:dc:ed:7e:b0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Oct 15 03:00:49 2026 GMT
Not After : Oct 16 03:00:49 2026 GMT
Subject: CN=699b4580c2f28ad9b0cbe90b7f7dbf110b46e31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2d:ec:32:b4:d9:66:33:57:ee:6c:7a:22:27:
d0:f0:59:a5:20:dc:fc:d3:4f:4b:d1:89:cb:cd:8c:
81:b0:c7:e4:69:03:93:ea:12:1a:cf:3a:f1:c6:dd:
36:ca:ba:92:9d:cb:4a:3f:19:f1:c0:50:c8:92:dd:
fd:09:44:87:df:0f:99:59:15:4a:06:cb:f0:11:cc:
de:07:9e:5d:94:aa:e8:79:f3:4b:1e:06:6f:f8:dc:
98:74:5e:10:19:59:6e:55:d6:17:36:2a:40:7b:16:
77:8c:ed:6a:7f:86:35:e2:c0:9f:e9:95:59:8d:60:
b7:3b:16:c8:0e:c9:6f:38:0d:91:d2:74:0a:4c:f1:
07:81:8d:4e:aa:f0:7b:67:97:0a:44:61:3c:bb:60:
1b:f2:e5:69:e1:d8:e7:21:ab:6d:4e:8c:64:96:2f:
63:b6:7e:d2:ed:16:07:8a:0b:b4:57:d0:20:ae:c6:
ad:05:9c:0a:b3:5a:04:86:fb:10:41:d7:f9:e0:0c:
5c:9b:66:34:ab:2f:16:76:9f:f3:a5:ae:ca:14:70:
19:a2:41:22:d0:90:2b:ea:5a:c4:61:ea:49:f4:f9:
cc:a4:c9:9a:df:24:1d:bd:7c:9e:2d:fe:a0:9d:58:
57:36:9b:c7:a2:c2:98:eb:31:58:88:e9:7b:a5:97:
5b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9B:45:80:C2:F2:8A:D9:B0:CB:E9:0B:7F:7D:BF:11:0B:46:E3:1B
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:85:cb:e2:dc:cb:8a:d1:43:e1:4c:8b:2d:e6:1b:62:22:96:
cd:7e:31:b0:ec:f0:35:c9:cd:4e:a2:7f:59:7c:e7:a9:2e:cb:
b1:02:b7:7a:62:33:44:1b:82:74:46:8b:7d:0e:7f:3d:25:d9:
e2:68:2c:10:84:c0:04:69:0c:28:19:89:19:03:da:11:15:e9:
b5:80:69:6d:cc:5a:00:9c:2c:49:c9:18:2c:7d:f8:61:ec:1d:
59:85:3a:f5:54:e6:66:90:4f:6d:d7:6a:0b:68:0b:1c:29:38:
ca:1e:53:3c:ad:c9:aa:78:80:04:05:19:43:7b:54:dd:6d:ed:
5e:5d:60:5d:c2:51:67:a0:26:f4:d6:16:40:8d:d1:9b:a0:d1:
db:37:0a:41:2c:f6:4a:8f:0f:2c:7e:b0:00:9e:fb:ab:96:5c:
0f:42:ef:37:12:af:63:94:51:33:8d:50:a2:c5:6a:9b:2b:53:
cc:71:55:61:75:70:eb:2c:c3:5f:d7:ab:80:87:29:f7:84:1f:
4c:9e:67:2c:02:76:80:e5:d3:22:fa:e3:74:fc:63:1d:4b:8e:
a9:79:61:d7:f5:da:13:10:9f:b0:29:03:3c:e6:27:b6:36:33:
9c:d1:c0:51:ca:09:d1:49:96:83:e3:d2:a2:1a:0b:67:67:af:
c2:a2:57:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:36 2026 by rpki-client