Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
File: DfDWLe46FKBuUrfveggwM42dd1E.mft (raw, json)
Hash identifier: Wt6P/VRMxDr2zFpoTzt1vG+PJ+FPqIrWdrmk0dQhduA=
Subject key identifier: 22:58:3D:DE:BE:B9:49:2F:73:5E:17:CC:24:97:20:A4:3F:DA:F0:8C
Authority key identifier: 0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
Certificate issuer: /CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Certificate serial: 01A089B1002133A6C4EDF40E2369776F46D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
Manifest number: 027F
Signing time: Thu 10 Sep 2026 05:01:13 +0000
Manifest this update: Thu 10 Sep 2026 05:01:13 +0000
Manifest next update: Fri 11 Sep 2026 05:01:13 +0000
Files and hashes: 1: DfDWLe46FKBuUrfveggwM42dd1E.crl (hash: BWcUKPF71OB1lvr5x07bBqIj2Cq9ySrmM4/c8l1Cg4M=)
2: ukKanfspjPtogwslBOvKVuFlnzU.roa (hash: VJCtLd80BTyZ1jJxvamfRrMpjXu4ufEwo/wpl1CsYuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b1:00:21:33:a6:c4:ed:f4:0e:23:69:77:6f:46:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Validity
Not Before: Sep 10 05:01:13 2026 GMT
Not After : Sep 11 05:01:13 2026 GMT
Subject: CN=22583ddebeb9492f735e17cc249720a43fdaf08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2b:04:dc:5a:ee:a2:ae:75:95:aa:f2:88:79:
3b:12:2e:43:f3:33:86:24:c5:a9:27:80:b3:a8:05:
2e:71:0b:12:f8:5c:e8:b1:01:74:e7:c8:30:cc:5a:
c2:fc:f4:49:14:9d:1d:c8:b7:e9:05:b8:a0:39:c8:
6c:f2:69:75:6b:7e:ab:b4:c2:28:91:df:88:2d:6a:
ae:23:8e:63:28:3d:d9:90:a9:a7:82:ce:60:b8:82:
a8:22:f2:72:5a:d7:a7:9c:8d:8f:7c:9b:24:7f:7a:
12:35:16:85:26:06:58:0a:f7:7f:41:60:47:32:fe:
51:96:e5:14:4c:3b:08:a9:f3:b9:83:72:37:8f:88:
5d:ca:6e:d4:7c:31:79:a9:bc:03:18:9a:74:64:e3:
cd:2f:b6:96:43:20:ac:39:57:54:32:28:bb:18:92:
63:ff:60:ca:ce:a6:5f:28:78:f6:0f:ee:53:1b:6e:
0d:f6:1f:61:f0:b7:2f:9f:a3:c0:49:01:89:59:3e:
2c:a5:07:72:e7:a2:93:62:ae:a8:a7:27:33:98:e1:
a9:6d:7f:fe:e5:6f:30:58:6f:f8:0c:91:33:0e:59:
26:03:08:9f:a9:8e:ce:e2:f8:23:cf:b4:0d:27:a2:
67:5e:6c:87:e3:c6:c5:c2:81:b6:06:d0:f2:76:0f:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:58:3D:DE:BE:B9:49:2F:73:5E:17:CC:24:97:20:A4:3F:DA:F0:8C
X509v3 Authority Key Identifier:
keyid:0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:36:c6:8f:12:f5:d0:fd:f1:91:33:a2:ae:05:60:bc:a2:fc:
71:18:b8:47:19:de:24:90:07:04:6f:31:79:94:7c:e8:d8:c7:
a4:0a:63:9f:3f:da:64:9d:10:04:50:d6:e8:38:2e:d8:bc:b3:
57:a5:35:cc:c6:ef:6d:de:b8:6e:48:85:2b:0a:81:73:85:dc:
34:f7:b0:86:46:f6:06:ea:47:5d:39:4c:1a:50:e3:7a:8f:0e:
37:cd:4e:31:89:51:82:f7:2e:75:28:e3:b2:18:b5:40:c3:2e:
76:ef:d7:83:6a:87:0d:fa:40:61:1f:d6:0d:ee:d7:fc:32:6c:
c2:f4:47:70:60:b6:47:5f:16:29:af:2e:20:7a:fd:17:7d:92:
24:19:03:c2:16:77:36:04:98:4b:79:18:0c:06:9e:2b:48:fb:
a5:22:2d:58:21:45:eb:79:d8:da:f9:e4:f5:de:27:b8:81:89:
7a:2a:57:54:19:cf:d2:75:c2:b1:50:eb:2a:37:0c:c8:2c:6c:
02:5a:9f:4f:f0:59:46:b3:e7:1c:51:5e:70:2f:15:fc:5e:06:
d7:6b:f0:30:e9:0b:90:b6:6c:29:97:a7:77:2a:27:2f:8b:12:
da:5f:26:87:d3:b8:c5:ab:ec:8d:6e:9b:87:bd:fb:78:07:9b:
41:81:fc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:05:19 2026 by rpki-client