Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: mMV4eQYfJ4dKWZSofn7t9yV7J9n1AihSjmcI7Q0EH7I=
Subject key identifier: 2E:D7:C0:83:0E:4C:E4:FD:BC:AE:42:A0:9D:53:81:C2:B3:47:3E:91
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 01A08B68B1ED73FD098073E7DAAE2314E423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 0595
Signing time: Thu 10 Sep 2026 13:01:29 +0000
Manifest this update: Thu 10 Sep 2026 13:01:29 +0000
Manifest next update: Fri 11 Sep 2026 13:01:29 +0000
Files and hashes: 1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: 0o+RgzHKw9JJCgmdQSclaOrEpTpfdLlixrG8QeQC4LQ=)
2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:b1:ed:73:fd:09:80:73:e7:da:ae:23:14:e4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Sep 10 13:01:29 2026 GMT
Not After : Sep 11 13:01:29 2026 GMT
Subject: CN=2ed7c0830e4ce4fdbcae42a09d5381c2b3473e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:66:b3:96:ac:44:2f:2d:7b:8e:1d:e9:e6:a3:
e1:10:4f:af:0f:ce:15:15:fa:c5:44:c5:e4:72:e0:
47:3f:f4:97:51:f0:89:7c:78:d5:f9:89:ee:93:3a:
69:7e:6a:ef:26:f7:6b:81:b9:38:c9:46:81:13:09:
3f:25:c6:43:15:0a:ed:67:9d:20:a4:ac:5b:67:96:
d4:72:d2:2f:fc:c4:4a:25:cd:10:53:31:1b:3a:b9:
6c:83:31:8f:87:21:fd:65:6f:fb:48:97:46:b6:50:
03:d0:96:95:2f:dd:ae:ce:16:30:de:77:c4:68:30:
8a:a8:b1:83:c5:fe:93:84:08:9a:fa:7a:59:67:57:
5f:c9:45:25:1b:70:76:30:4a:3c:b4:ef:fd:4b:22:
9c:4a:74:df:09:ba:3e:8c:b9:b9:8d:13:eb:36:b0:
1f:1f:cd:d5:1c:a7:13:49:a7:13:13:5c:7f:ca:34:
36:aa:50:a7:df:c7:aa:91:ba:07:5b:64:1e:b5:93:
7b:04:f8:cb:e3:cb:2f:0b:81:61:4f:c7:0b:0c:7d:
b6:5c:95:ed:f8:1b:a7:b5:8f:c9:66:ec:2e:65:12:
7a:07:f0:be:34:ce:63:7f:2f:df:ee:16:1e:87:ee:
39:ef:0c:ee:fe:78:3c:ca:11:0e:65:04:99:98:11:
6d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D7:C0:83:0E:4C:E4:FD:BC:AE:42:A0:9D:53:81:C2:B3:47:3E:91
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:51:d0:3e:85:0c:b8:a1:1d:ca:4b:ba:e1:21:4a:3b:22:64:
ff:02:15:d2:1a:ab:8f:8a:4d:18:2b:0a:f6:fa:0e:7d:15:8a:
86:59:d6:fd:c2:75:1f:68:eb:f1:3a:73:cd:0c:aa:b0:3b:42:
59:0b:19:28:e0:55:08:a2:5f:3b:d2:9a:d5:87:25:eb:21:22:
71:11:ef:bd:6c:31:69:5b:e0:a3:9e:80:7e:29:7d:cd:03:2e:
7f:53:b5:30:13:d0:5b:7f:a9:be:73:d6:22:fb:e9:76:9b:d5:
75:b2:0a:4b:e9:91:ac:b5:93:72:90:b6:89:46:d0:68:c9:3f:
c7:f8:bd:12:27:86:1c:fd:8b:e5:d6:92:64:9a:1f:91:d3:3d:
37:ae:c6:c3:7b:ac:89:ea:54:01:41:07:1f:75:8e:a0:0f:62:
36:fa:c1:b6:d7:43:9b:9c:eb:d5:82:8b:bf:7e:78:38:42:f3:
ac:24:5c:6c:4e:91:3d:df:a2:50:e3:27:62:55:b8:fd:20:5c:
51:9e:70:d6:f7:d1:e1:f6:27:7e:94:07:26:cd:16:77:47:92:
fc:3e:93:0a:68:ce:92:54:f4:48:ec:2c:40:3f:d9:b8:c8:bf:
1a:68:91:73:bf:2a:ea:8f:2e:b1:87:b6:ac:71:0e:52:73:b2:
9d:d0:03:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:04:51 2026 by rpki-client