Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: 1EkqoCC2NAAP83ZiRMFl9QCW8pywlfE0mdXMQxpcW2w=
Subject key identifier: E3:0E:3B:F2:3E:58:3C:E8:33:DB:89:DC:FF:BF:7B:94:71:E7:F9:56
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 01A17EBD460D5B0DAA56CF9571E184A7F2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 0613
Signing time: Tue 27 Oct 2026 19:01:35 +0000
Manifest this update: Tue 27 Oct 2026 19:01:35 +0000
Manifest next update: Wed 28 Oct 2026 19:01:35 +0000
Files and hashes: 1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: 1YAXx90BTeRdfUnEersT157XsXgriHz4iHLLOBFGaU8=)
2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:46:0d:5b:0d:aa:56:cf:95:71:e1:84:a7:f2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Oct 27 19:01:35 2026 GMT
Not After : Oct 28 19:01:35 2026 GMT
Subject: CN=e30e3bf23e583ce833db89dcffbf7b9471e7f956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:82:5c:e0:20:0e:17:27:d7:65:71:91:5e:42:
26:73:02:5d:0c:30:6c:ab:1e:98:58:9c:e1:d4:80:
1e:59:a1:9e:0c:6d:cd:95:25:c1:99:2d:35:fd:59:
d1:50:73:16:96:cf:fa:f9:c2:e9:0c:e1:2f:24:18:
a2:c6:60:1f:ed:12:9c:e2:14:a4:67:2b:ac:cd:bf:
cd:ed:5f:f0:44:36:68:52:91:f3:7c:d3:4f:49:22:
79:73:12:60:99:ab:da:a5:2b:fe:fc:5e:05:f5:14:
c3:4e:9a:5b:46:93:b3:51:cb:a1:33:19:9a:5a:b2:
e7:7e:1f:08:f4:27:a0:40:e7:63:65:f3:28:08:d0:
b9:26:01:fc:60:6c:2f:5a:94:66:1f:c0:03:02:28:
62:47:b3:3a:4a:14:71:9d:0e:ad:7b:c3:ca:7a:d9:
9e:22:6d:51:eb:cf:d8:03:50:02:c3:21:81:0e:8d:
64:00:99:05:6e:9b:93:f0:23:b8:6e:1f:de:a5:f4:
54:bc:be:f9:45:cc:05:2a:0b:5e:7e:bc:4e:19:66:
9c:0c:43:94:ad:72:66:56:a5:57:48:53:48:a6:26:
54:d4:cc:ab:6a:8f:db:c9:e2:4a:b3:42:34:36:75:
41:84:8e:07:6c:69:26:05:88:fb:02:dd:21:17:49:
f6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0E:3B:F2:3E:58:3C:E8:33:DB:89:DC:FF:BF:7B:94:71:E7:F9:56
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cb:0e:7d:b2:3b:8d:ee:af:5a:af:d7:3b:74:4d:ce:4e:19:
96:f5:be:dc:2c:02:ca:7d:3d:e5:2a:f1:66:1d:73:15:ab:03:
45:05:84:10:1f:ca:95:a6:69:e3:8a:84:6e:14:46:c5:c1:22:
0f:49:c7:6c:15:bf:e1:75:26:ad:0d:71:38:a5:bb:be:09:6f:
11:4d:60:f9:81:54:bc:98:69:9c:92:72:10:a7:53:a3:82:82:
78:71:18:f6:82:04:b3:bb:28:38:8a:b2:bc:8a:35:3d:08:45:
74:33:7b:80:87:85:9b:d3:7f:61:63:a6:1a:9b:25:31:9d:b2:
7b:e1:92:fb:34:a3:16:68:56:99:d7:23:16:67:57:34:b9:fc:
1e:35:0b:82:b9:f2:d5:bc:34:29:1f:7f:2e:c6:a4:4c:8f:6b:
43:29:5c:6f:25:ad:5f:ca:f4:52:ca:4c:60:bd:96:76:b7:aa:
b7:12:7e:d8:b2:4e:42:1c:b5:94:41:96:9c:2b:5d:30:fe:72:
66:4f:85:b2:31:3c:3a:0d:99:33:57:62:ff:b2:1b:7c:4f:59:
ea:3d:d0:42:ce:d6:d5:af:8f:55:f4:56:e5:bc:3f:b4:c7:21:
9e:14:9a:0b:1e:ac:b9:b5:02:c0:a1:cf:3c:43:c6:b9:73:2d:
e9:dd:de:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:26:43 2026 by rpki-client