Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: 3S1Kdsbz8WmUBjVDrUERAt7na6dAqyKsY0Z2zKMnBbg=
Subject key identifier: A1:63:7B:B6:DA:9E:3E:B5:75:B4:34:DF:1A:B7:66:01:2C:F4:F6:61
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 019FA1BB78F2C35C4722D1C5EA490F9FD538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 051C
Signing time: Mon 27 Jul 2026 04:00:45 +0000
Manifest this update: Mon 27 Jul 2026 04:00:45 +0000
Manifest next update: Tue 28 Jul 2026 04:00:45 +0000
Files and hashes: 1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: czrcSK3iqTV47XFoKoi1wVLSOu6rX3Rya1HAX42VAL8=)
2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:78:f2:c3:5c:47:22:d1:c5:ea:49:0f:9f:d5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Jul 27 04:00:45 2026 GMT
Not After : Jul 28 04:00:45 2026 GMT
Subject: CN=a1637bb6da9e3eb575b434df1ab766012cf4f661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:18:d0:b9:3e:8a:b9:31:71:65:4c:6d:7b:
63:fb:b1:1a:07:fa:d1:54:96:34:2d:bb:3f:ad:89:
b9:98:97:cf:40:93:4f:2a:58:72:60:29:3a:a4:da:
07:b2:c5:4f:21:5c:d3:52:b0:ea:4e:18:c2:72:b5:
c5:7b:2a:ac:9a:ec:99:a9:f0:ba:d2:38:d3:da:f0:
aa:32:87:96:ce:7c:fd:3a:b2:79:e4:cf:b4:89:41:
24:cf:12:2f:91:83:0e:38:3e:04:36:79:eb:32:89:
ba:2f:50:0a:62:04:d5:95:f7:cd:17:65:94:04:86:
3b:08:70:17:12:af:a9:5e:57:00:4b:80:85:c0:5f:
1c:d2:b5:6c:e7:75:3e:d5:7e:30:6b:b0:f2:66:4c:
04:74:8e:f6:b0:15:c2:55:c2:59:ea:7b:40:fb:4d:
61:bd:4c:cf:05:d6:65:28:ad:00:9f:98:5b:cb:66:
85:fa:a7:fa:b2:41:19:be:39:f4:96:12:51:f3:d1:
3b:14:97:18:4c:09:bd:a2:a8:c0:1b:4c:2d:0b:eb:
86:29:f8:de:5e:8a:96:aa:d9:3d:71:9e:c1:3f:44:
95:ee:50:0b:4b:f4:07:63:e4:b7:ff:7f:61:5b:aa:
9a:bc:1d:86:33:3e:f1:9b:4c:dc:a6:50:f6:ba:48:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:63:7B:B6:DA:9E:3E:B5:75:B4:34:DF:1A:B7:66:01:2C:F4:F6:61
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d1:77:e3:d9:73:b7:f2:28:a5:52:96:ba:cd:b9:3a:23:f4:
7f:5c:83:d8:6b:05:7d:72:f9:b7:26:8d:6b:a3:8b:7a:50:f4:
09:b2:49:d3:78:5d:6e:00:f0:e9:70:08:10:fd:bc:63:61:5a:
70:2b:7b:5d:70:7b:fd:93:fe:f1:ac:b5:66:bd:4b:84:1b:a1:
d9:b4:69:7d:6c:84:8f:27:09:5a:b9:13:50:bf:23:be:3f:ad:
0c:4f:a8:3f:4b:5e:e6:5d:5e:c7:21:7c:1f:99:3c:fb:d0:4b:
53:bb:3a:11:a7:8f:c8:68:27:39:1d:48:82:51:43:10:53:85:
78:2d:48:db:af:f2:5d:c9:1a:2f:0e:82:7b:11:38:f5:b4:24:
fa:24:af:71:65:88:72:f9:87:25:ac:52:b9:8f:b1:38:89:69:
46:85:53:48:92:b9:77:66:38:d3:00:85:8e:a1:4a:98:d6:7e:
03:2d:80:63:53:9a:ad:7f:98:88:28:d9:1d:f9:ae:d6:3c:52:
2e:5d:e1:5c:78:fa:53:4b:9a:6a:26:f8:9b:cf:8f:4a:ec:42:
37:5c:b7:a4:16:f1:88:af:3c:da:3b:2d:42:d3:5e:30:d5:b8:
97:0c:d6:bb:be:5a:42:15:7e:f8:a6:0a:08:c1:8f:b2:f2:9e:
1a:f3:f2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:06:16 2026 by rpki-client