Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
File: DlNS2UQbZcIBbtjrfi8jWVRDT10.mft (raw, json)
Hash identifier: eLfAVxdCVFfUfZnB9Io652eDlrohlGDFU2eX3gCajow=
Subject key identifier: A3:85:A1:5F:C0:1D:40:33:F4:0E:05:50:D3:1B:73:5D:6E:53:F9:F1
Authority key identifier: 0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
Certificate issuer: /CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Certificate serial: 01A15B8C5795E5FA50F26BC40097D18857D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
Manifest number: 065B
Signing time: Tue 20 Oct 2026 23:01:26 +0000
Manifest this update: Tue 20 Oct 2026 23:01:26 +0000
Manifest next update: Wed 21 Oct 2026 23:01:26 +0000
Files and hashes: 1: 7HIHyHGDiVhFywfB2aUFsNjko-M.roa (hash: Iv4sArJJwlkOrpiX31eTz3pS1dqhRbw3dXCKTSlvosg=)
2: DlNS2UQbZcIBbtjrfi8jWVRDT10.crl (hash: OD5dc+hV/nhWwZ0dmQYUkTIoOmGvLuCNl7hPotN1Pl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 23:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:8c:57:95:e5:fa:50:f2:6b:c4:00:97:d1:88:57:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Validity
Not Before: Oct 20 23:01:26 2026 GMT
Not After : Oct 21 23:01:26 2026 GMT
Subject: CN=a385a15fc01d4033f40e0550d31b735d6e53f9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:6a:3f:19:57:8f:85:c4:9f:f6:6c:4e:ae:
6b:64:d6:86:af:1e:ae:75:92:71:66:22:83:20:7a:
ef:de:20:4e:17:f2:cb:0f:99:41:d5:fa:5f:83:2b:
6d:b9:46:19:af:d3:21:ff:cf:ba:31:6f:0b:7a:14:
ed:aa:91:ce:6e:99:46:28:e5:86:52:ec:29:c9:89:
a4:e3:a1:65:ef:91:39:db:33:8b:37:41:58:7b:e0:
4e:f6:4e:13:cd:59:b0:4d:01:98:7a:0b:dc:60:1f:
f2:21:f0:cd:6e:15:5e:69:a6:41:46:a9:5b:43:0e:
e6:63:c3:6e:f9:c5:e2:03:19:3c:a9:dc:08:43:9d:
0f:b6:93:69:3d:6d:bd:ec:2c:da:cb:b4:02:ad:b1:
8d:50:e6:11:27:7b:8e:23:90:62:1e:20:a6:14:46:
43:11:0e:70:1f:2f:f0:62:ea:4b:97:5f:0e:1f:9d:
c9:56:bc:8d:32:43:7d:4f:94:b5:3c:1b:75:b1:d0:
21:6e:c8:4f:71:34:3b:17:b4:ae:e2:33:87:db:8e:
12:5d:48:6e:38:54:f0:43:c2:cc:cc:8b:e8:f3:53:
6d:01:6a:a9:95:27:ed:d8:58:22:e1:28:5d:92:a4:
3b:19:64:43:f3:4f:0a:42:75:8f:70:71:d0:c8:70:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:85:A1:5F:C0:1D:40:33:F4:0E:05:50:D3:1B:73:5D:6E:53:F9:F1
X509v3 Authority Key Identifier:
keyid:0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:04:48:82:b9:f9:d9:2d:04:6d:3f:70:db:e7:cb:61:85:32:
c7:69:db:09:5d:05:c4:1b:21:81:2a:8b:1e:88:88:02:ed:6d:
8a:78:5f:b3:1c:31:a1:c7:da:92:06:b6:1e:f4:37:ff:da:d4:
0f:9d:e0:7c:b4:b7:b5:c2:35:2d:36:4c:d9:ff:c7:23:f2:42:
0a:61:69:8f:1a:d5:fe:1b:0e:d0:f7:9d:51:b6:30:a4:7d:0f:
f7:56:76:3b:7a:43:fa:d2:57:6c:e3:c0:b1:bf:29:5b:05:19:
5a:5d:55:a8:b9:d3:1f:eb:e3:12:fc:8d:cd:44:61:d5:cf:a0:
9c:e5:46:3d:b6:6b:9b:9c:ad:a1:5e:4d:bd:0d:15:4d:40:b2:
7a:98:b3:81:50:36:cd:2d:34:45:c4:66:85:6e:ca:30:09:93:
e7:28:a1:13:72:58:aa:8c:55:7e:05:44:35:9c:1a:e9:89:09:
12:79:db:46:dd:e1:e5:e5:a5:28:ca:ff:1f:8e:86:d6:2a:f3:
e6:d0:af:b1:8e:6c:84:5b:c3:aa:67:7b:8e:37:4e:c8:17:80:
7c:df:3d:5c:5c:9c:a6:3e:f5:03:65:5b:87:45:ed:f5:b7:bd:
9c:98:e5:5f:5f:13:d8:b2:4b:14:11:e0:e3:58:fd:d6:e3:00:
23:57:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:09:10 2026 by rpki-client