Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
File: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json)
Hash identifier: /MP1aaRhBhsE8dauvDCwxsYcOecEF69H+nkJ7bLnSZo=
Subject key identifier: BC:0B:C4:91:AC:75:4E:C5:A1:08:85:0C:A9:E9:45:C9:13:D7:27:F4
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Certificate issuer: /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial: 01A148E0C968C0D70197505C7DF8DB8FD7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
Manifest number: 0EE9
Signing time: Sat 17 Oct 2026 08:00:53 +0000
Manifest this update: Sat 17 Oct 2026 08:00:53 +0000
Manifest next update: Sun 18 Oct 2026 08:00:53 +0000
Files and hashes: 1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: dy+7va8ajwF4Ggv4RsZ6s5ff5aCjP0/hhfjfkKhWRgA=)
2: DxAIf_G4bsCHSuF3mUqxe5pwn4w.roa (hash: QSb3YvRlfaog1Dj3+gzS3BBfYETY8z0tkMgWbxsJbyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:e0:c9:68:c0:d7:01:97:50:5c:7d:f8:db:8f:d7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Validity
Not Before: Oct 17 08:00:53 2026 GMT
Not After : Oct 18 08:00:53 2026 GMT
Subject: CN=bc0bc491ac754ec5a108850ca9e945c913d727f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:a5:0d:83:73:64:e4:0d:10:5c:27:9f:73:
2d:76:dd:00:a3:72:ff:00:79:91:ab:57:b5:8c:1d:
61:3c:1a:34:62:b9:10:1c:ac:9a:b4:43:7b:29:95:
04:6e:b6:cf:0e:7b:66:be:b4:ba:f3:f5:27:ac:ad:
a1:ee:f8:11:04:3e:1a:fd:f4:b8:5b:6e:ae:0a:63:
13:47:d6:a8:f8:a7:98:69:4e:a9:80:b0:9a:c7:b4:
eb:31:30:20:a8:40:4c:1d:a9:f8:03:7d:58:31:01:
c2:65:92:23:fe:b1:bd:d9:94:9b:7b:b9:4c:a3:3a:
ed:07:46:a6:9b:3f:21:05:f1:96:3d:22:3e:1b:99:
c9:4a:71:43:13:2a:7f:09:5e:6d:cf:b3:2c:7b:14:
39:bf:74:db:e3:0b:3d:d4:a5:d2:f9:ae:15:79:19:
b4:7f:c0:44:9e:05:77:fa:20:e8:ca:77:84:48:b2:
67:9c:fe:23:73:d3:dc:fb:3c:61:fe:9f:5d:fd:c2:
7d:af:56:8a:f7:0a:f2:d5:cd:f2:f6:d7:06:c2:c0:
42:40:82:e3:50:3e:70:b8:fc:13:2f:f7:5e:a0:0b:
4e:a7:4e:5f:18:2c:d6:49:ce:58:97:a7:25:b3:6d:
3b:d7:f2:c3:04:8d:8a:91:54:18:af:df:c6:44:db:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0B:C4:91:AC:75:4E:C5:A1:08:85:0C:A9:E9:45:C9:13:D7:27:F4
X509v3 Authority Key Identifier:
keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:35:b6:65:61:e0:a1:ca:83:ac:e9:9f:8c:b2:1f:24:d0:96:
24:6b:79:5d:8c:c0:e4:b1:44:9b:1f:fc:76:ca:1e:58:3a:11:
69:8b:69:31:db:b2:85:0f:27:7f:97:0f:57:2c:f2:3c:5a:44:
c5:0a:29:4a:67:a9:dc:23:4c:bf:19:0e:54:1b:84:93:bf:14:
b9:34:0b:a4:69:8a:0a:e7:d3:a7:7a:d9:91:43:16:3f:d7:12:
71:f0:2d:dc:76:50:84:eb:7f:c9:f0:74:21:80:cc:07:79:bc:
9b:a3:93:a9:e4:bf:ba:7e:26:ac:43:6e:30:61:21:b6:32:02:
14:68:00:c8:59:2e:e9:61:fd:a9:48:0e:02:0d:f0:83:00:21:
bb:44:f9:84:d0:42:75:b6:62:eb:01:07:8e:ca:74:12:30:ac:
7e:fe:7c:76:a2:31:3a:fb:69:52:e5:76:aa:9d:5c:41:9e:2c:
71:f8:1f:5d:b4:26:8c:2e:21:2d:e4:a4:e4:ef:18:8f:e9:57:
b7:64:b4:e9:c6:b1:b7:8c:71:40:30:d4:12:9e:36:96:01:c2:
ae:46:b8:f4:27:85:5f:d6:61:4d:be:62:70:8d:f1:81:a7:f2:
61:2c:eb:0d:e2:15:f5:41:62:30:0b:1e:cb:7c:a1:f7:10:f3:
21:54:bc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:58:34 2026 by rpki-client