Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
File: DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft (raw, json)
Hash identifier: 4v9uKu/usWNRQQuEYtqurEK3SxJqTU7KDB8xm5K785Y=
Subject key identifier: 2C:79:37:B5:14:8B:B6:E5:A2:80:03:88:EC:D9:1A:8E:82:71:95:9C
Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
Certificate issuer: /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Certificate serial: 019D37C1153147E95506A426A18FE9E13C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
Manifest number: 0AB6
Signing time: Sun 29 Mar 2026 04:01:33 +0000
Manifest this update: Sun 29 Mar 2026 04:01:33 +0000
Manifest next update: Mon 30 Mar 2026 04:01:33 +0000
Files and hashes: 1: DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl (hash: jn5KNrR/4fLrwDcxrmKfu1aTk8rhZDMuoGfT6Gpfa9o=)
2: n3TEcj2cHwyJM-ltU6Fz4mQkgOk.roa (hash: qzbLDwyzPoZSNZu2f+YOUcC/z1BsSoehvOpIyMT5K6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:15:31:47:e9:55:06:a4:26:a1:8f:e9:e1:3c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Validity
Not Before: Mar 29 04:01:33 2026 GMT
Not After : Mar 30 04:01:33 2026 GMT
Subject: CN=2c7937b5148bb6e5a2800388ecd91a8e8271959c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:76:73:31:c1:4c:80:40:d3:f4:3e:2b:e6:
96:21:d8:28:d9:9a:0f:e5:39:9f:ee:ca:bc:83:ca:
3c:50:97:ec:6d:84:53:b6:7c:a6:20:9f:1c:93:87:
3f:ae:4c:ec:68:7d:93:cb:2b:5a:b3:10:96:6b:e3:
88:34:e1:1f:c1:f8:ef:47:4c:59:5a:fd:d0:06:8c:
ab:00:79:1d:87:1b:21:3c:dd:d7:cb:0e:81:3c:7f:
a6:54:9d:cd:9a:23:04:9e:0c:51:a2:99:05:69:f9:
b4:b1:7d:e6:54:a1:cd:ae:0c:28:f5:a0:fa:f2:3a:
16:9e:36:30:e5:62:5a:b8:8d:71:21:ce:b2:70:ab:
32:79:1b:fc:c7:ac:e6:00:93:8a:c1:e3:15:af:e2:
d5:3e:64:9d:55:aa:3a:e0:80:61:95:dc:ff:d7:aa:
6d:a5:5e:b6:4a:31:1b:c1:b2:c5:a2:82:33:e7:02:
1e:39:56:f9:47:31:61:21:21:92:ba:e8:9e:22:b4:
f6:e8:e1:c2:cf:3d:c3:76:a0:c1:b1:f2:62:ca:f3:
9a:2f:88:e6:ea:ef:9d:a6:a1:bf:8e:09:57:df:40:
34:c3:25:ff:2c:de:a8:03:a2:72:0d:6a:1a:96:f1:
b5:52:9f:c2:53:36:c6:33:de:4b:82:db:6d:4b:82:
2c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:79:37:B5:14:8B:B6:E5:A2:80:03:88:EC:D9:1A:8E:82:71:95:9C
X509v3 Authority Key Identifier:
keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8a:08:81:ff:f8:9d:16:08:d4:3a:b7:98:c7:6d:8b:da:ac:
a4:ff:2c:50:d8:4a:5a:df:75:6c:e8:21:2d:89:8e:07:16:16:
e6:4e:90:a8:30:56:fe:ae:4e:83:d6:70:01:67:75:90:4f:02:
03:bf:7c:03:eb:77:b1:6b:5e:49:6c:bd:64:f0:cd:9f:44:10:
66:30:87:d9:8e:94:ac:80:e8:96:1f:74:c1:77:37:be:ec:13:
9b:4c:75:d4:cf:00:5d:6c:a5:5d:6f:e7:e0:8e:24:5d:15:e3:
9e:18:86:38:ac:5e:48:ca:f6:a5:79:f0:5e:14:7a:ed:62:38:
3b:3f:03:8b:97:0c:4a:19:08:cd:3f:1d:b1:59:c8:23:c7:13:
fa:33:82:e5:c8:a6:aa:f5:db:96:81:68:db:71:ee:60:30:18:
29:4b:9f:fa:54:6c:26:69:c7:f3:7e:74:06:88:cd:01:8d:16:
dc:f1:a6:ce:1b:20:07:f7:2b:f1:55:e3:b9:58:44:25:0c:26:
83:58:a7:7b:84:36:e2:9d:9f:6a:af:82:7c:4c:cb:b2:93:c2:
20:97:21:a4:36:c5:26:d4:11:a7:07:24:56:aa:95:bf:42:67:
18:ab:0a:b8:91:64:f8:7a:01:c9:fe:6a:0c:a7:68:0c:ef:77:
15:1e:45:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:26 2026 by rpki-client