Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
File: DfDWLe46FKBuUrfveggwM42dd1E.mft (raw, json)
Hash identifier: WqvVNsIF79nq458jeJPuqtQdcqbUPdubyeHfDmB2s7Y=
Subject key identifier: 38:F5:D7:38:8C:54:49:9A:83:AF:7D:4D:1D:C3:4D:8C:53:DB:26:3A
Authority key identifier: 0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
Certificate issuer: /CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Certificate serial: 019EB6575AABE8158C35FECFCCB789B9CBA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
Manifest number: 018D
Signing time: Thu 11 Jun 2026 11:00:38 +0000
Manifest this update: Thu 11 Jun 2026 11:00:38 +0000
Manifest next update: Fri 12 Jun 2026 11:00:38 +0000
Files and hashes: 1: DfDWLe46FKBuUrfveggwM42dd1E.crl (hash: pgO3EIP9p6DSA8oyWq9zWhFZMCT6Q1DxqwQiutUdaa0=)
2: ukKanfspjPtogwslBOvKVuFlnzU.roa (hash: VJCtLd80BTyZ1jJxvamfRrMpjXu4ufEwo/wpl1CsYuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:57:5a:ab:e8:15:8c:35:fe:cf:cc:b7:89:b9:cb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Validity
Not Before: Jun 11 11:00:38 2026 GMT
Not After : Jun 12 11:00:38 2026 GMT
Subject: CN=38f5d7388c54499a83af7d4d1dc34d8c53db263a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:71:86:83:00:b5:ef:33:fa:71:ed:c1:ed:
3d:20:29:ae:af:be:98:72:56:7b:59:2d:3c:88:b0:
ac:03:13:2b:8a:56:57:23:60:c6:7c:c0:c9:2e:a1:
47:73:65:9a:fc:86:56:eb:a4:7b:37:f1:b5:80:a9:
15:0e:3c:c0:27:88:b5:54:09:8b:91:81:ab:fc:12:
df:3d:d8:6f:5f:f9:a8:89:10:9c:31:7e:e7:a9:23:
ed:be:58:a9:d5:10:3b:df:18:33:06:19:a4:05:bc:
60:33:0e:e8:d9:ab:f5:9b:32:51:a9:7b:66:3a:a2:
83:e3:b8:e6:ea:45:cc:68:fb:c5:40:38:48:1c:8f:
4b:d9:8f:ed:c1:3f:1f:e1:98:c2:06:d3:7a:70:39:
c8:00:d4:d5:04:ab:48:49:56:1c:79:a9:c8:12:55:
9e:65:ab:63:f1:d4:f7:f2:b1:e9:7d:6e:f7:b0:aa:
0d:d7:70:50:a0:39:8e:e1:f7:be:72:4a:91:7b:0d:
34:c9:c4:eb:f5:44:a2:68:a5:58:4d:37:e6:a4:65:
ea:01:ed:9c:49:f3:e3:c6:bb:ee:21:81:57:9a:2e:
eb:bf:10:7d:35:bf:a6:46:c2:50:b4:10:7e:3f:f4:
aa:8a:ba:5f:88:74:97:94:be:b2:90:28:48:43:3c:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F5:D7:38:8C:54:49:9A:83:AF:7D:4D:1D:C3:4D:8C:53:DB:26:3A
X509v3 Authority Key Identifier:
keyid:0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5d:45:40:5d:98:6d:4b:01:c8:63:64:40:15:b6:8b:60:f7:
c2:92:83:c6:a2:c9:b4:64:cc:11:3e:70:dc:00:ce:e3:07:a4:
f2:43:a3:b2:9c:f0:35:b3:61:d3:36:84:50:a0:e4:b9:7b:7d:
64:81:44:f4:e5:31:a8:e0:3c:94:8f:ea:97:f5:7f:aa:fa:3f:
68:d0:2c:00:9d:2f:ef:be:85:c8:c2:a3:e7:0b:eb:81:f1:89:
31:6f:c0:2b:bd:87:44:65:b0:ee:74:0a:e4:0a:1b:07:b3:9c:
7a:11:bf:32:43:57:c9:91:66:1d:16:7a:fa:69:88:4a:d8:71:
72:03:30:7f:63:28:0f:c4:7c:a1:0e:9e:54:af:85:35:d4:c0:
44:04:c8:4c:56:45:b8:af:a8:c2:ac:50:eb:24:c5:c9:31:f4:
6e:83:3e:64:1e:89:bf:a4:b2:35:5e:eb:b3:05:03:22:6d:65:
02:04:af:93:b2:d7:9e:9d:57:bf:9a:c9:49:69:53:d3:b0:64:
dd:9d:f8:e2:a0:c7:81:fc:dc:8a:74:b3:21:67:50:fd:8b:64:
10:81:f9:60:10:38:8c:2b:fc:57:e1:29:1f:bb:40:38:d5:d6:
d2:26:bb:2d:fa:2a:57:ff:71:f4:aa:a6:57:71:49:2e:07:3c:
48:fe:8b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:31:12 2026 by rpki-client