Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json)
Hash identifier: Oa5NzczJ8vvHDeeQ7XCL9FRUPXybCWiP1zTD0S+U5qA=
Subject key identifier: 1E:DB:59:EB:FC:CD:28:E3:89:5C:47:C6:C3:68:24:56:0C:36:5D:D4
Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c
Certificate serial: 019D382DF21F89460F5A2A072745ABD99309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
Manifest number: 0582
Signing time: Sun 29 Mar 2026 06:00:28 +0000
Manifest this update: Sun 29 Mar 2026 06:00:28 +0000
Manifest next update: Mon 30 Mar 2026 06:00:28 +0000
Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: xxMDyP1dlKh1cjPGQCCo66y4YLpqsHUre0F+3ADwSlo=)
2: w8wkCFScjGQvdttAQ8x_xzp50Xk.roa (hash: w/c38fhRy3be0XuDkxP9zkUOolRFgZszn3JD1Qb99Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f2:1f:89:46:0f:5a:2a:07:27:45:ab:d9:93:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Validity
Not Before: Mar 29 06:00:28 2026 GMT
Not After : Mar 30 06:00:28 2026 GMT
Subject: CN=1edb59ebfccd28e3895c47c6c36824560c365dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:1c:22:c7:2c:c4:c4:1a:bf:c6:1a:8f:8a:
c4:95:19:b7:38:cb:c5:1e:79:3b:12:ad:3d:ef:55:
f3:3b:04:1c:9f:cf:35:c8:6f:97:34:8e:f6:f3:dc:
eb:f9:84:8a:c2:96:8f:69:f4:67:de:ed:37:2d:de:
c3:8f:6c:05:0d:fd:a9:2f:f0:95:34:db:e7:c1:7f:
f0:0b:e2:22:a7:53:08:23:ff:b1:55:3c:e7:cf:77:
7e:ee:e2:c0:f1:b6:39:a2:08:12:21:bb:d1:0a:53:
4a:03:02:a2:1f:22:aa:cf:e6:2b:df:78:b1:73:3a:
71:ff:29:38:fe:cc:d9:fd:be:d5:73:d9:43:81:d9:
72:ce:b4:be:9f:cd:1f:56:eb:07:17:4a:b3:4e:f4:
8d:1b:8d:c7:50:ca:75:23:2d:2a:15:ba:55:1d:77:
52:fa:6e:c0:c5:a3:82:4b:a1:c3:52:b5:84:c1:55:
5b:31:6e:19:7a:18:88:9f:a3:af:e2:0c:15:a9:02:
83:e7:47:13:2b:1e:24:fa:ae:e0:b0:d1:e0:04:53:
7e:46:b8:e7:50:f2:22:26:77:15:84:72:ba:4c:e8:
31:73:12:c3:4c:aa:a1:64:90:0e:71:a2:5c:4f:ea:
86:85:a2:0f:b4:e0:73:27:fb:10:88:a3:8d:40:e0:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DB:59:EB:FC:CD:28:E3:89:5C:47:C6:C3:68:24:56:0C:36:5D:D4
X509v3 Authority Key Identifier:
keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:09:79:ca:b4:a6:d2:20:e0:c7:74:52:9f:38:83:97:59:77:
fb:62:56:c1:92:38:19:51:30:8f:e4:f8:76:8c:99:a2:69:9a:
1f:69:22:ae:48:f3:ac:3a:f8:4f:da:a9:9f:ea:96:6a:19:a2:
8a:94:e0:68:ee:83:e7:52:f9:21:5e:bf:32:fb:74:9d:e0:05:
5c:d5:09:d5:af:af:ff:29:ae:b6:34:78:9c:b0:1a:26:ca:72:
ee:9a:e1:80:29:cf:f6:c4:45:82:52:cf:8d:4d:b8:ef:79:fd:
86:eb:54:16:7d:17:37:de:a0:ad:14:9c:6e:2e:47:b3:ac:75:
8e:20:64:4d:d4:fc:8f:0e:f5:e1:ab:aa:9a:3d:5b:df:ee:4f:
28:95:44:6b:6e:f3:da:94:ac:04:fd:59:09:85:e4:c5:c0:36:
a6:28:4c:11:1b:85:2b:5c:8b:a1:09:3a:b6:46:32:14:c7:0f:
9a:7c:ec:d2:cd:8d:1d:c7:ca:aa:0d:e4:2c:02:ef:88:12:68:
3d:73:d9:00:6b:2f:21:be:db:00:bf:15:be:83:d9:2d:cb:c7:
17:d6:98:00:cc:46:79:cb:ac:12:a7:d3:e6:04:64:8b:df:be:
7e:43:7d:48:9d:92:28:46:79:7d:20:d7:06:41:04:54:d8:a9:
34:95:17:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:21 2026 by rpki-client