Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: UP7DOQx/FgxaMiF7TphE1hEHyFQC2ddT7h5wnJmIIPE=
Subject key identifier: 51:A5:8D:66:89:90:CC:FB:B7:03:CD:E3:07:FA:17:83:38:5B:21:F0
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 019DCE634B615E594BE7A727ADF81224838F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 042A
Signing time: Mon 27 Apr 2026 10:01:46 +0000
Manifest this update: Mon 27 Apr 2026 10:01:46 +0000
Manifest next update: Tue 28 Apr 2026 10:01:46 +0000
Files and hashes: 1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: n6FpbReviek1p1rKKiZy9Q7XDpMxYyM3pB0o7TGbjc8=)
2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:4b:61:5e:59:4b:e7:a7:27:ad:f8:12:24:83:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Apr 27 10:01:46 2026 GMT
Not After : Apr 28 10:01:46 2026 GMT
Subject: CN=51a58d668990ccfbb703cde307fa1783385b21f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:83:7a:ae:a0:4c:9d:d4:8e:4a:2d:7b:62:
f1:0b:fe:7d:30:82:af:cf:d8:58:69:6f:0b:67:2a:
7b:1f:64:ac:15:8a:80:b2:43:d3:0e:94:d7:9c:51:
9e:42:98:de:43:b8:29:9a:16:2a:43:9c:3d:17:ce:
2d:66:08:41:aa:87:b0:9c:36:30:f2:23:12:16:27:
ff:69:21:ee:34:1e:b4:c6:99:24:de:06:fa:f2:37:
7d:e0:a4:ea:de:91:4e:15:3d:ab:65:7a:9c:db:5b:
f6:5f:17:6a:f3:a9:98:bf:21:7e:a5:33:aa:54:af:
28:46:6a:69:d7:a0:36:97:50:b1:5d:39:2e:b8:a7:
84:7e:54:a7:8d:ab:27:10:97:7a:3c:3e:59:5f:56:
ba:bb:ff:21:6c:44:60:b7:be:8a:ee:f6:c8:0d:e5:
00:77:f8:bb:95:84:4e:31:79:90:a8:8f:29:37:03:
75:15:93:01:54:bb:a5:98:46:ec:f5:61:fe:ff:41:
45:71:f2:5f:f3:71:b6:3b:f8:29:14:bc:12:f2:aa:
26:32:ea:db:da:d1:29:89:d1:44:1f:6b:9d:af:55:
90:a5:5b:41:4b:bc:d9:8f:b5:6f:a3:43:f0:fb:d7:
fe:cb:67:30:91:98:1c:76:80:01:71:b0:8c:a5:49:
8c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A5:8D:66:89:90:CC:FB:B7:03:CD:E3:07:FA:17:83:38:5B:21:F0
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:de:47:a3:75:e2:9d:a8:35:2c:cd:cf:5e:42:64:50:a7:78:
46:c8:4d:a7:3d:e2:ff:37:16:7f:f9:8c:00:0c:17:b2:0a:fb:
7d:ed:d3:1f:0c:f1:9c:80:fa:a3:0b:62:c2:61:94:c9:3e:66:
af:fe:1d:14:40:8f:0f:1f:80:4c:58:f3:ca:17:06:fc:5a:c6:
34:9e:09:fa:d1:c7:f4:f0:bb:c7:a8:50:34:4f:c7:44:85:58:
ee:13:af:2b:4b:82:c7:53:ff:2c:57:47:58:f9:9b:f7:ae:fe:
2f:e8:e5:c8:a9:a0:43:68:cc:65:05:4a:fa:4d:82:00:dc:b3:
57:0d:e1:dd:6c:cb:24:af:0d:f1:a2:51:5c:11:6c:4f:4f:79:
98:3b:b5:37:a8:0c:ce:c4:1c:fa:16:af:e2:0f:eb:eb:df:9d:
53:18:47:8d:c6:9c:4f:63:ed:e6:13:da:6e:b9:e7:1e:f4:a3:
3d:21:48:7b:91:e7:39:37:a9:3c:87:f0:b1:17:4f:ba:21:fb:
92:6a:ab:d2:c4:96:5d:23:db:dd:fb:80:80:6f:02:fb:d1:98:
ad:d2:a7:93:3a:1c:0a:a8:aa:35:84:d9:1f:26:a5:49:32:70:
c0:9c:37:49:35:66:86:28:77:1e:6e:a3:bc:75:36:ec:7c:da:
8d:99:19:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:25:06 2026 by rpki-client