Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/DlF73Wltm7EfqnjCFqFeFg10Xmk.mft
File: DlF73Wltm7EfqnjCFqFeFg10Xmk.mft (raw, json)
Hash identifier: pZp4fyp7Cq3apWCaJLUdZPuLQ4R4nzaBLXa9YU8+6C8=
Subject key identifier: 5B:42:F3:2C:1B:21:12:07:4F:F0:12:A5:8D:B1:08:BB:FD:A8:9C:85
Authority key identifier: 0E:51:7B:DD:69:6D:9B:B1:1F:AA:78:C2:16:A1:5E:16:0D:74:5E:69
Certificate issuer: /CN=0e517bdd696d9bb11faa78c216a15e160d745e69
Certificate serial: 01A18F4207E924D7C1CAB5053FE94D2A423F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlF73Wltm7EfqnjCFqFeFg10Xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/DlF73Wltm7EfqnjCFqFeFg10Xmk.mft
Manifest number: 0148
Signing time: Sat 31 Oct 2026 00:00:31 +0000
Manifest this update: Sat 31 Oct 2026 00:00:31 +0000
Manifest next update: Sun 01 Nov 2026 00:00:31 +0000
Files and hashes: 1: DlF73Wltm7EfqnjCFqFeFg10Xmk.crl (hash: LLnnBF0zFaNLENbef+B0HuZP0XzqZh9x9nEUvomzhhs=)
2: Q1Q0DhzuTCi0jVC3ZwvS2z89fWY.roa (hash: gZPINODeqX2SsKrHs+U4Y9Hw6JIKCtowrKwWGgtFtv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/DlF73Wltm7EfqnjCFqFeFg10Xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/DlF73Wltm7EfqnjCFqFeFg10Xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlF73Wltm7EfqnjCFqFeFg10Xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:07:e9:24:d7:c1:ca:b5:05:3f:e9:4d:2a:42:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e517bdd696d9bb11faa78c216a15e160d745e69
Validity
Not Before: Oct 31 00:00:31 2026 GMT
Not After : Nov 1 00:00:31 2026 GMT
Subject: CN=5b42f32c1b2112074ff012a58db108bbfda89c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:ec:8e:86:43:30:ee:c2:53:5c:45:b5:2b:
6a:cf:c3:b0:9e:19:9d:66:ea:ec:df:52:9c:a2:0e:
10:e2:d1:48:ed:5d:a8:6d:b1:2c:da:9c:3b:f2:2c:
a9:32:76:e8:f6:e8:8a:37:b4:c2:ed:22:ab:b3:cc:
b7:13:4e:fb:34:26:83:34:13:e0:2b:11:d3:4a:5e:
ee:d6:c5:bc:d8:56:33:7b:88:a7:d2:98:6e:79:f2:
90:95:a0:9c:fa:e9:f4:f8:2e:fa:76:4a:55:71:db:
6e:bd:40:16:92:a3:f1:e8:81:fd:25:ac:d3:9e:fa:
83:57:aa:8f:a0:46:07:d4:64:18:7e:8e:37:f7:57:
59:e6:b5:fc:12:75:a1:c5:9e:6c:8a:c1:c1:7d:b7:
e2:29:8a:58:85:1c:f6:2f:b4:15:bf:f1:2b:92:fc:
f9:d4:b1:d9:5a:00:20:89:bb:09:1a:54:c1:8d:38:
6b:38:50:6f:2e:83:71:10:46:71:76:68:80:1f:46:
ec:68:e2:a5:bf:7a:e4:36:90:24:3c:00:a8:e7:c7:
de:2a:c4:41:68:21:e1:04:56:a1:3c:8c:af:93:68:
74:43:d2:4d:0b:44:90:1f:24:d2:83:e8:1f:ac:ca:
0c:3b:12:ff:49:a5:23:a4:a2:b4:1e:4a:88:68:3a:
a6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:42:F3:2C:1B:21:12:07:4F:F0:12:A5:8D:B1:08:BB:FD:A8:9C:85
X509v3 Authority Key Identifier:
keyid:0E:51:7B:DD:69:6D:9B:B1:1F:AA:78:C2:16:A1:5E:16:0D:74:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlF73Wltm7EfqnjCFqFeFg10Xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/DlF73Wltm7EfqnjCFqFeFg10Xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/DlF73Wltm7EfqnjCFqFeFg10Xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cb:93:1b:d2:2f:8e:35:b3:a7:5b:41:80:20:a1:59:31:d6:
eb:d0:d3:63:cf:5a:90:65:ec:74:c2:6d:47:fd:c2:47:4d:6f:
1a:b9:7f:23:47:db:cc:65:e9:67:f4:2a:0d:c3:13:c1:e6:7b:
56:1f:c9:0b:4a:e9:60:a8:df:4b:84:02:8f:8c:c2:9f:78:38:
d1:86:1f:bf:68:73:17:5b:fe:86:1a:3e:b9:35:d6:6c:76:71:
50:8b:32:75:9c:00:c2:dc:af:f9:55:ee:4a:e5:3b:34:39:a9:
b3:ab:5f:1b:ed:77:fa:fa:b6:be:ab:b0:39:9c:ef:e9:7f:34:
3a:2d:ee:db:90:86:a7:88:24:60:18:8f:c5:a1:c3:02:0e:9e:
a7:68:b5:56:8f:63:b7:04:5b:3f:a4:ce:81:cd:25:b0:54:2c:
d2:87:e2:0f:44:39:7d:d1:46:0c:b9:0d:ff:50:9a:ba:62:16:
7b:9f:bc:d3:5d:a4:7c:e8:a9:fa:c4:d0:db:3f:ad:2a:eb:38:
78:5e:88:d0:50:45:ca:b9:75:36:a2:88:58:b9:59:28:1f:74:
0b:41:9b:e8:95:23:59:b3:21:d0:0e:da:fb:c5:3c:39:0d:7f:
98:ea:b1:ea:52:ee:13:d2:ab:27:54:22:71:a3:34:ea:25:6c:
d0:2f:83:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:43:12 2026 by rpki-client