Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: 2QSqaYxg6jyhgOLlVUHpgebs9vf7Hwrff0bXRN6TPM8=
Subject key identifier: AE:7B:F2:DD:3B:77:45:DC:17:73:AB:37:DE:C5:94:72:CD:4C:E4:6A
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 01A13D8121D271306AF7653087516D43DE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 03:00:35 +0000
Manifest this update: Thu 15 Oct 2026 03:00:35 +0000
Manifest next update: Fri 16 Oct 2026 03:00:35 +0000
Files and hashes: 1: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: 04tEa8XL9rhpkt4FsEsJY9chXman8Vaf2LGlOM2dDKg=)
2: LINYNse5gTnQTaGpDC4P2orwLNw.roa (hash: jwdJGzlRoAppijnlgLmKSEl5CMBxNzYsYm+HHhXiWR0=)
3: Wu-LPUMqwocBNlt5ypkyRQ-BcG8.roa (hash: udr6u/rjNC9kwCUZ4fpiUpE5gr+CoJtYznz4JyS606g=)
4: dpzibW71BafVtewDmI9jnKwB0PE.roa (hash: Lb6hcW86Ys7t4OSo9igJpzp6AC9QU/RfmTo/e1nf/rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:21:d2:71:30:6a:f7:65:30:87:51:6d:43:de:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Oct 15 03:00:35 2026 GMT
Not After : Oct 16 03:00:35 2026 GMT
Subject: CN=ae7bf2dd3b7745dc1773ab37dec59472cd4ce46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:b0:6f:d4:1e:69:db:17:17:8e:5a:aa:b7:
93:cc:26:c7:0c:57:ff:0b:99:ad:87:64:25:ba:39:
46:ae:59:8d:ba:34:e8:f5:4b:90:d2:59:7f:a8:95:
72:ee:42:35:77:49:84:60:b6:f7:92:2b:42:54:a4:
b3:a8:f3:da:6e:5a:fe:dc:08:14:50:c9:78:ad:d4:
4b:bb:85:48:26:e4:5b:47:1a:0f:22:d5:f0:3a:71:
73:a5:a2:ac:c3:cf:19:5a:6a:4a:aa:d1:cc:7f:3c:
49:71:bd:b5:cc:17:12:92:a3:4f:2b:4e:ec:f6:8b:
32:ea:53:93:6e:08:f0:f6:75:6a:64:da:83:20:19:
b5:b6:c4:47:2c:16:f9:7b:24:8d:1d:ca:33:5b:58:
8b:4a:ad:2f:3b:89:ba:5c:98:62:81:c4:fa:ea:c3:
bc:a1:b2:9d:ac:d9:51:ad:98:20:c4:86:f0:ff:3a:
be:89:b0:13:22:39:c7:92:f5:b8:d7:48:e6:bf:ad:
57:fb:27:55:fa:d1:28:07:3a:0a:42:a5:76:6d:de:
d0:0d:95:13:53:0f:21:30:a4:2f:17:f3:01:2d:23:
0d:ef:ea:84:fb:b2:c8:37:0c:0a:72:e4:86:33:7c:
dd:c2:21:af:99:b6:ff:3f:e3:67:dd:40:5a:e6:88:
64:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7B:F2:DD:3B:77:45:DC:17:73:AB:37:DE:C5:94:72:CD:4C:E4:6A
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:16:c3:8e:dd:26:60:ef:9b:48:a0:cd:7e:12:68:e8:1d:17:
5a:f1:4b:37:3e:1d:14:e1:b7:bd:26:85:d4:6b:e9:9b:2f:aa:
f4:35:31:b0:48:34:3f:6c:c5:68:dc:d0:c1:e3:a3:0c:ea:fe:
c4:d2:6d:9c:aa:dc:ba:23:0a:cb:65:c2:cd:08:b3:a3:f9:7f:
36:7a:79:f0:96:3a:06:b9:13:3c:72:2c:2c:c2:48:70:cd:da:
22:53:b3:14:67:9c:21:d3:23:9c:b9:05:ed:57:bc:cf:8b:4b:
d9:5a:8a:51:91:36:11:45:ae:7d:83:b5:95:ad:2b:d6:46:76:
1d:46:d4:b8:61:4e:21:d7:32:59:7c:60:62:7f:68:b2:45:c4:
8c:40:fe:1e:72:a4:4f:96:4e:3c:bd:ab:18:19:a8:dc:59:8a:
c5:4e:67:b3:a3:94:08:e0:ed:2f:e4:80:7a:9f:b6:98:5e:38:
30:d7:a2:05:48:e2:36:75:06:7c:c0:f6:3d:fa:9a:30:2f:7c:
cb:ca:38:78:c7:11:9c:ba:e7:39:d1:94:3a:28:d4:d4:2f:95:
eb:60:28:dd:1d:10:d4:fc:a2:db:72:a5:06:52:c4:c9:b1:13:
f2:20:03:53:44:ff:a2:03:e1:eb:13:ef:58:16:87:e8:d6:42:
43:16:9c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:52 2026 by rpki-client