Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: R2PARKpQAhbb8HNFDgvp2niLz6GZ5ZLvvFsHgYg3Ixk=
Subject key identifier: F3:88:11:80:CB:62:98:5D:F4:15:65:D9:8A:09:EA:6F:64:3E:8E:36
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 019EB9FD029DD21F25A8EEFCA7F629DB7F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 04A4
Signing time: Fri 12 Jun 2026 04:00:26 +0000
Manifest this update: Fri 12 Jun 2026 04:00:26 +0000
Manifest next update: Sat 13 Jun 2026 04:00:26 +0000
Files and hashes: 1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: eVxSqDC7UozOlYG68OuGV1XT/T93mg7YWud1kISXKtU=)
2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:02:9d:d2:1f:25:a8:ee:fc:a7:f6:29:db:7f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Jun 12 04:00:26 2026 GMT
Not After : Jun 13 04:00:26 2026 GMT
Subject: CN=f3881180cb62985df41565d98a09ea6f643e8e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:f1:24:1d:46:c9:62:c3:2e:7b:9f:4e:a5:
bc:51:e0:09:ee:78:60:8a:9e:80:22:06:bc:17:df:
6f:1d:c0:a3:b1:cb:78:f2:f4:c0:70:69:2b:93:fe:
16:b9:c9:b1:0a:9f:77:a5:8c:eb:f4:f2:09:55:2e:
c5:93:31:c1:ff:d3:c6:33:91:9f:1a:da:73:04:20:
77:3c:21:2e:97:3a:13:84:10:13:35:10:05:42:3a:
9d:c5:d3:3e:2a:63:3f:25:69:f6:ac:d3:9d:2d:6d:
39:46:d7:c8:69:62:f8:87:a9:8e:92:ea:a7:fe:ab:
28:c8:aa:27:34:92:ea:f0:ce:76:34:fa:17:0e:2b:
fc:e6:36:34:40:15:bc:23:85:02:70:b2:1d:7d:37:
58:be:89:c8:08:fa:58:3e:b5:06:54:a0:0c:39:4c:
70:c5:3d:25:4f:06:af:63:7d:1a:8b:a0:41:d2:9b:
d4:cd:0f:84:ad:2d:11:6e:25:59:ff:ce:e1:dd:b2:
fb:6b:7d:bc:bb:8b:67:58:55:91:5a:89:a7:8b:87:
ae:ef:04:f9:8a:ef:27:79:5e:fe:12:03:e4:ec:75:
f4:fc:44:95:a4:b0:55:f7:a4:e7:18:d8:ca:53:80:
22:dc:3d:f2:8c:3f:81:8a:16:2f:14:74:aa:6f:5b:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:88:11:80:CB:62:98:5D:F4:15:65:D9:8A:09:EA:6F:64:3E:8E:36
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:05:69:fd:17:7f:42:30:d9:b0:3f:57:5d:e3:dd:b6:86:aa:
e1:85:f0:88:cc:23:57:c0:0a:24:38:c2:86:f3:02:b4:95:24:
af:dd:47:e1:a1:33:4e:7f:24:5c:c7:a6:02:8d:f2:3c:45:f5:
4e:25:eb:b7:5f:c7:e7:0e:4e:19:c2:d9:22:73:93:be:a6:55:
be:91:db:46:a9:51:bb:76:27:6f:60:d8:05:88:1f:02:67:a6:
65:d3:08:34:a8:2d:f7:86:08:de:32:fc:88:56:f4:7b:e4:79:
da:07:86:32:3c:6b:78:ab:c2:5e:3f:07:8b:c9:50:fa:cb:95:
04:e5:8f:77:30:6f:04:6d:70:41:4b:4a:f6:09:6e:33:30:ca:
42:06:8e:c5:7e:f6:79:f9:27:a6:4c:66:7a:a2:21:ba:bf:d2:
0e:7e:fc:f9:65:49:db:a9:d7:f0:e2:9f:98:82:66:8b:50:4f:
78:b7:27:be:bd:f1:cc:64:4d:bb:2d:9c:65:e7:7e:2d:c2:a7:
ef:d7:1a:b3:f2:b9:d4:db:fd:76:30:de:19:a5:12:90:0b:ac:
d4:8f:8a:fe:24:5d:bf:b9:10:cf:35:3d:76:8f:08:20:f1:75:
43:8d:c0:a7:03:4c:6a:d5:ff:df:27:51:b9:36:b5:54:57:1c:
38:ab:94:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:10:04 2026 by rpki-client