Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
File: DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json)
Hash identifier: 4uN/OQ7IRI+mG9AfRxHi9zWLUYtwVrD4ftb1JlwCz7g=
Subject key identifier: E2:A3:30:93:AF:90:E7:1A:E9:BB:CE:82:53:A7:74:39:BC:CC:93:26
Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Certificate issuer: /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Certificate serial: 01A13DB8A57B1B48F7D73FE94D65A969A179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 04:01:13 +0000
Manifest this update: Thu 15 Oct 2026 04:01:13 +0000
Manifest next update: Fri 16 Oct 2026 04:01:13 +0000
Files and hashes: 1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: AXTYDSQopqSSVZXGsppOZh1vb9Q9N7KSBmA6jB8VFbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:a5:7b:1b:48:f7:d7:3f:e9:4d:65:a9:69:a1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Validity
Not Before: Oct 15 04:01:13 2026 GMT
Not After : Oct 16 04:01:13 2026 GMT
Subject: CN=e2a33093af90e71ae9bbce8253a77439bccc9326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:aa:eb:4e:d4:56:08:5e:c6:e0:0b:0a:bf:23:
fd:f0:f6:69:58:4d:f1:d1:52:0a:8d:18:ab:1f:b4:
74:ae:74:c0:3d:0f:bd:af:28:15:20:96:1e:72:06:
f7:17:26:87:7f:57:68:51:6a:99:f5:af:e9:ec:43:
c4:23:8c:63:9d:0e:d1:23:a6:5e:d9:e3:7d:c5:20:
b9:c6:96:f8:31:b3:52:24:c3:3d:68:e0:bb:a4:34:
51:4c:3a:2e:0f:4d:fe:9e:15:fc:11:6e:82:cd:82:
0f:4e:23:af:e7:c0:ee:f6:ef:a1:0f:09:d0:65:db:
01:52:ed:bc:7f:99:dc:23:93:15:c1:4b:bf:d0:69:
b2:18:f1:fa:19:e8:8d:5f:89:4c:48:ba:3f:0f:3e:
75:09:08:0f:3b:b0:b8:d4:0c:67:1c:28:1f:c8:07:
50:04:58:5c:e5:68:20:50:b0:53:5c:4e:f3:7d:0a:
35:4f:48:e1:39:7c:8b:a0:b7:64:2f:af:33:f1:bc:
a4:7d:d4:cc:54:80:cd:d5:2d:dc:0c:e1:f3:33:58:
08:77:6b:4a:45:c1:cc:60:12:54:54:34:e5:99:54:
63:30:fb:ec:03:0e:90:e6:fa:3d:04:3f:62:f6:df:
5e:24:97:de:9d:75:a1:c5:a5:ba:b8:2c:be:93:cf:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A3:30:93:AF:90:E7:1A:E9:BB:CE:82:53:A7:74:39:BC:CC:93:26
X509v3 Authority Key Identifier:
keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:98:eb:62:f0:28:a0:f9:4c:0a:df:3c:d3:76:b0:2a:0a:86:
31:fc:4c:de:9a:1c:0f:be:2d:54:79:53:d9:0e:d9:ee:50:92:
ce:63:f6:ee:1b:cd:da:4a:87:2d:02:71:7a:71:88:36:8c:a2:
05:51:ff:67:1a:91:83:5b:c4:ae:e8:ba:14:e9:99:ca:0c:88:
e6:3d:e7:0c:31:30:a9:70:3e:41:b0:dd:8c:29:e1:aa:af:68:
54:5a:46:f1:4b:03:85:41:8b:f1:35:be:2a:ee:c6:c3:2e:ba:
f8:62:9d:8c:2c:47:f7:c3:d5:c3:12:69:88:48:db:3f:60:42:
e5:be:a2:93:7a:85:b2:12:15:92:7d:ca:c7:c8:e9:de:b5:bd:
79:ea:10:78:55:f6:05:4c:cd:7c:0d:e2:7c:50:db:3c:bf:f3:
7a:92:90:2b:7c:3b:af:1b:79:41:fb:eb:7b:bc:18:62:2d:5f:
e0:ee:0a:42:bf:58:2d:54:62:d2:66:9b:21:fd:57:be:bf:5d:
33:3b:4e:48:0a:9c:96:67:3d:f7:11:bc:c9:0e:44:cb:35:d7:
3c:b4:27:bf:39:c1:46:9e:a3:0f:56:a5:f2:93:b6:cd:c7:c8:
34:80:62:3e:21:b7:37:c2:6e:80:08:b5:cc:96:78:19:1c:56:
83:52:0f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:56:53 2026 by rpki-client