Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
File: DASLX4FSNcOT_qdh4H64uLv4f9M.mft (raw, json)
Hash identifier: AKNsWfnHea5ogCGrvGJn7SMoE9Vn/ikPY3O6Llvx2w4=
Subject key identifier: E5:50:54:51:33:0C:DA:E9:14:BE:D4:8B:80:85:D1:2A:36:A1:34:E1
Authority key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
Certificate issuer: /CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Certificate serial: 01A160E8D473EDB055EEC00F32AB5EF9502F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
Manifest number: 1ABC
Signing time: Thu 22 Oct 2026 00:00:33 +0000
Manifest this update: Thu 22 Oct 2026 00:00:33 +0000
Manifest next update: Fri 23 Oct 2026 00:00:33 +0000
Files and hashes: 1: 1-KiwJ7_SOfhMSL1wh3lOIzJdqf0.roa (hash: Q/Tsqdd7rd4T6xRRkiE1SIt+/mkcRs5YGJIeO2ihizo=)
2: DASLX4FSNcOT_qdh4H64uLv4f9M.crl (hash: Wn8ouQjYEzLCPqyTMryuvudoCkldQi3EcqO8vEQRFnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:e8:d4:73:ed:b0:55:ee:c0:0f:32:ab:5e:f9:50:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Validity
Not Before: Oct 22 00:00:33 2026 GMT
Not After : Oct 23 00:00:33 2026 GMT
Subject: CN=e5505451330cdae914bed48b8085d12a36a134e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:14:74:8c:14:11:80:24:6e:1c:fc:56:94:
5f:3b:c2:b8:8e:2a:ff:35:8c:06:9c:8b:6e:eb:f1:
2b:62:a9:98:f5:f0:6e:e4:c4:63:52:a3:66:21:5a:
68:d4:2d:2f:ff:fa:d0:cf:c1:51:e9:c0:c9:0c:97:
c0:98:88:57:21:24:42:b8:57:37:e4:3b:85:03:18:
77:5d:bd:90:59:63:19:3a:4e:e8:6b:81:91:97:37:
60:bb:fa:33:95:a5:22:91:bf:69:25:bd:4a:89:33:
4f:fd:dd:c8:14:0d:cd:70:42:ce:09:ae:26:3c:67:
d1:f5:c2:7d:a2:8c:6e:35:33:fc:4a:16:29:8e:65:
43:d5:46:0b:19:d6:b8:23:a2:41:53:30:64:49:f9:
62:fc:50:56:97:95:66:f1:90:de:0f:97:44:64:86:
b4:2a:fa:60:52:9f:ce:67:1d:bd:75:52:9a:5c:77:
8c:d7:d5:dc:48:72:c9:76:48:6e:89:77:ea:01:01:
b2:d5:d8:59:0e:a0:67:65:39:c0:a9:60:c5:3e:98:
f5:ee:fb:c7:99:0d:bc:8e:05:86:22:33:cb:63:f3:
bf:53:45:d9:10:9d:c7:48:56:da:c4:41:af:d5:bc:
4d:dc:77:54:c6:67:b1:5f:fb:f5:ee:12:cb:a7:64:
5c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:50:54:51:33:0C:DA:E9:14:BE:D4:8B:80:85:D1:2A:36:A1:34:E1
X509v3 Authority Key Identifier:
keyid:0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5b:c2:a2:ff:ca:2e:3b:5e:ee:18:bb:41:6b:1d:fa:4f:be:
eb:64:f3:90:11:4e:29:ba:6c:d7:20:96:0d:30:83:1e:7b:22:
0f:16:50:c7:e6:cb:c0:07:40:3e:15:98:a8:9b:ee:c3:02:28:
9e:60:94:5b:75:9f:52:ec:98:e4:b4:26:0e:37:46:f5:b1:e6:
5f:fb:5e:7e:b2:65:a5:eb:00:2e:92:68:88:c2:30:78:88:e9:
12:e8:72:d1:ad:5a:c1:62:06:39:a2:07:a0:b2:5c:8e:91:cc:
1e:45:28:39:a9:31:09:d2:dd:38:22:ba:a3:6f:b6:ba:42:94:
cd:55:69:a8:77:21:3b:eb:3d:c2:73:7b:f2:81:a4:d3:2c:e2:
2d:9d:a6:f0:e1:6d:8d:d3:07:82:43:f0:2a:68:a1:77:6f:b3:
7d:5a:75:83:48:f3:b6:85:18:cb:f7:be:6e:af:03:0e:c9:9e:
06:cc:b7:68:f1:f0:33:57:a7:6d:82:8b:59:df:f5:07:a5:5a:
5f:f5:89:b8:94:df:c0:c9:74:20:dd:cf:a5:bd:51:9a:31:67:
6d:4a:5e:bd:30:2c:89:a5:7c:aa:c7:f3:13:8c:b2:7d:71:6b:
46:c7:29:e7:4d:94:70:63:cd:c1:60:ed:e0:2d:d8:89:1b:cf:
48:ad:3d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:54:36 2026 by rpki-client