Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
File: D97nlErE2jERKV2B4p3roAwWOpY.mft (raw, json)
Hash identifier: m053XvTvZNXQS+EIDO6EEFfVN8M1+9TKm+2mRGfSDUg=
Subject key identifier: 6B:4D:E1:37:EE:28:2E:68:75:A0:52:02:AC:E5:C7:3F:E7:38:18:E5
Authority key identifier: 0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
Certificate issuer: /CN=0fdee7944ac4da3111295d81e29deba00c163a96
Certificate serial: 01A1494F26E14658750F27124853644CC2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
Manifest number: 14A5
Signing time: Sat 17 Oct 2026 10:01:26 +0000
Manifest this update: Sat 17 Oct 2026 10:01:26 +0000
Manifest next update: Sun 18 Oct 2026 10:01:26 +0000
Files and hashes: 1: D97nlErE2jERKV2B4p3roAwWOpY.crl (hash: Kx8Qzr9p0aOoOJMcb7Lx2apFGsdrlZVWvZj5vyZsALA=)
2: WgNv7-eEqKwSW95Nva_O1MQX1iY.roa (hash: 9ipqetu8ePvj0pp7eCO9cwEQqK0gXGR/o2mUfaHu77U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:4f:26:e1:46:58:75:0f:27:12:48:53:64:4c:c2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdee7944ac4da3111295d81e29deba00c163a96
Validity
Not Before: Oct 17 10:01:26 2026 GMT
Not After : Oct 18 10:01:26 2026 GMT
Subject: CN=6b4de137ee282e6875a05202ace5c73fe73818e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3f:f7:59:22:b3:bd:36:9d:37:70:f1:b7:aa:
06:bc:1e:64:69:a0:56:2f:75:e7:14:67:5e:6f:c7:
bb:68:a2:ee:d4:47:86:12:62:1a:60:25:dc:40:67:
f4:46:10:6d:58:f5:61:b7:90:e4:42:00:48:27:de:
98:6e:7d:e9:59:00:86:e3:a1:a6:67:64:0e:a1:25:
e2:e3:fd:65:8b:ca:5a:b5:94:43:36:83:2e:50:9b:
7a:6e:dd:23:d0:9c:0a:7c:46:b3:c4:1b:8c:c3:f6:
6d:35:85:8a:d8:e1:d6:15:58:f6:17:76:83:36:4f:
87:f9:69:4f:91:c7:d6:e0:7c:9e:1c:ff:80:05:ab:
f7:84:37:f2:ca:1c:51:cc:08:61:99:63:67:e8:59:
1b:17:ac:db:66:99:fa:c0:9b:e6:54:3b:5e:e6:b0:
f9:4b:ba:a6:5c:35:4d:03:49:d0:76:f8:e6:4e:49:
df:89:9a:17:3e:64:35:4c:4a:60:82:ff:68:6f:3f:
29:d1:b2:6c:9a:00:e5:18:89:f6:0b:6d:62:fb:1e:
f7:2c:ff:d3:15:28:6c:6b:dc:75:f6:70:b8:be:ac:
c7:81:1c:f3:a4:b6:57:06:03:fc:cf:6a:13:e2:0e:
e4:3a:1f:cc:ea:b6:8e:04:01:8a:c9:cd:c4:f3:95:
cc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4D:E1:37:EE:28:2E:68:75:A0:52:02:AC:E5:C7:3F:E7:38:18:E5
X509v3 Authority Key Identifier:
keyid:0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:93:18:e7:cc:1b:1a:9c:db:a4:d7:34:5c:0b:b1:89:4e:be:
25:9a:0b:6f:3a:8a:50:d9:1c:ef:43:d6:36:46:e5:65:21:fc:
1e:71:ba:7f:f9:75:0f:c4:5b:cb:b2:93:d3:16:83:c8:d4:c0:
52:5f:94:b1:72:a1:03:9c:88:d1:6f:ea:6c:b2:a4:0e:b7:7c:
99:1e:e9:2c:8c:cf:98:dc:b9:f9:04:5f:9e:e8:25:69:00:fc:
b5:30:2f:43:33:14:3a:21:37:c3:05:6b:1b:41:c4:bb:7d:9d:
97:3f:d7:92:af:70:99:51:58:64:6d:ca:ef:df:dc:f2:c3:57:
93:ca:b9:9a:f5:47:e1:6d:93:98:22:b9:a3:a1:67:6f:ad:14:
72:b3:3e:5a:4b:6d:6d:42:fe:bf:dd:2a:a3:5d:72:c0:c1:8d:
ea:02:f1:bc:7c:44:6b:12:28:20:38:cd:7b:3c:d8:70:03:85:
6c:3d:bf:63:05:a5:ec:f2:67:f2:00:eb:8e:08:de:47:9f:7a:
ff:54:f5:6a:29:37:e1:e5:20:43:1e:24:1a:36:c9:50:b6:9e:
9b:57:ae:a9:0b:ab:2a:63:d1:d8:8f:61:4a:d7:ec:d5:14:15:
da:36:91:80:66:74:8c:7d:28:a5:4e:5e:5d:c4:30:20:7c:ef:
6f:62:e0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:23:36 2026 by rpki-client