Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
File: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft (raw, json)
Hash identifier: lm/wtK45ejUnZYj4E5OTzZ+9cSQIeqbO/6kFsvpZHiU=
Subject key identifier: 9F:7C:C6:82:B5:BF:EB:0C:6C:B9:21:43:98:EA:97:90:76:A9:85:2D
Authority key identifier: 0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
Certificate issuer: /CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Certificate serial: 01A13F704CC3D62560270FBFA0C0341C9A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
Manifest number: 1A36
Signing time: Thu 15 Oct 2026 12:01:26 +0000
Manifest this update: Thu 15 Oct 2026 12:01:26 +0000
Manifest next update: Fri 16 Oct 2026 12:01:26 +0000
Files and hashes: 1: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl (hash: jzEv8iLfCSZwPkPaQpxP3X2lh5DZDEoAXCYqKzIWNgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:4c:c3:d6:25:60:27:0f:bf:a0:c0:34:1c:9a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Validity
Not Before: Oct 15 12:01:26 2026 GMT
Not After : Oct 16 12:01:26 2026 GMT
Subject: CN=9f7cc682b5bfeb0c6cb9214398ea979076a9852d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:63:e5:0c:a6:87:51:15:29:04:ad:3b:72:
14:3f:e5:f2:a3:7f:08:e7:30:69:1b:10:04:18:de:
e6:0b:0a:1c:78:b6:7d:46:7b:47:ac:b6:10:7c:09:
87:b2:d9:0e:1e:11:6b:a9:aa:c7:26:a2:01:15:8a:
de:a3:27:ae:1c:6f:de:6b:f8:4e:29:1a:f4:57:fc:
02:b3:27:64:e1:5a:d3:e5:d2:3e:08:04:82:6d:07:
4f:b7:31:03:ac:2e:81:b9:61:ae:ef:47:b1:b4:48:
f3:7d:e6:09:d7:cc:5d:79:95:d7:06:de:66:03:5c:
d4:f9:3f:84:0e:3d:cf:e8:eb:55:23:34:55:2a:97:
c9:20:f2:86:d7:ad:42:90:bf:47:80:03:b1:83:f9:
f9:1d:7d:b8:d8:f2:b3:74:13:5c:ca:1f:51:42:a3:
70:9f:37:78:c2:8d:12:40:20:2e:aa:b6:dd:72:4c:
29:39:ef:e0:fc:45:7c:e7:55:92:d7:00:1b:cb:75:
ce:04:df:7b:2a:c1:50:db:53:32:84:87:46:99:76:
44:70:fd:b8:24:ae:01:42:9b:d5:29:34:95:e6:61:
b3:9d:27:79:b9:55:f8:4d:be:68:96:a2:fb:72:b8:
35:44:a2:bc:2f:7e:c3:db:69:84:f6:49:2b:b7:68:
60:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7C:C6:82:B5:BF:EB:0C:6C:B9:21:43:98:EA:97:90:76:A9:85:2D
X509v3 Authority Key Identifier:
keyid:0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:57:45:1b:60:df:94:fa:ef:1e:31:d5:8d:6b:f9:a5:ef:c7:
11:9c:f0:bd:61:e9:a0:06:42:d9:36:1e:f2:64:ee:9e:8c:75:
2a:62:22:fa:15:01:85:f2:29:7d:61:7f:cb:2f:3b:3d:a2:71:
f0:82:ec:3e:92:4c:f3:e0:73:51:ff:93:ca:71:9f:c2:e9:6d:
06:55:9a:7c:e0:42:70:fe:81:68:e6:bd:fc:0a:64:49:46:05:
5e:1a:1d:a1:e5:64:bf:ff:6f:ca:77:ae:0c:ca:96:5f:72:90:
e0:c8:77:f4:52:0f:c4:a2:dd:f8:85:e5:d7:b5:bf:2f:2b:54:
e5:50:30:c1:3d:76:66:3b:91:ab:87:7f:65:51:77:f0:50:d0:
63:9e:8b:0c:e3:b2:83:74:b9:cc:b3:db:f1:97:9d:36:b7:73:
90:a6:6e:55:6d:8b:bc:c1:fe:1a:40:6b:1b:3f:77:43:c4:be:
fc:90:f3:fa:cc:7f:bd:61:fc:c7:09:f2:5a:a4:bf:af:09:f9:
37:a7:33:8a:13:4c:87:ca:f5:2b:25:76:8f:bf:9d:64:af:3b:
bb:e2:44:5b:cd:03:b6:ca:7c:7d:79:fe:e3:91:5f:ed:19:57:
31:4f:85:7d:c8:12:01:e7:ed:51:1b:e8:96:33:bc:13:39:d2:
eb:ee:b7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:07 2026 by rpki-client