Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
File: DflWa2LehAS4VsVgBMxJvmITVOg.mft (raw, json)
Hash identifier: 0qAnzyK/L/TaXF6z1SYCy9kd8uG4ylAoPz4rr0YK56U=
Subject key identifier: 89:34:C3:E4:62:7B:FD:3E:68:0B:42:5B:D1:49:5D:FF:1E:CD:08:D7
Authority key identifier: 0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
Certificate issuer: /CN=0df9566b62de8404b856c56004cc49be621354e8
Certificate serial: 019EE1E70574E79AF3808304B74CCEA92DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
Manifest number: C3
Signing time: Fri 19 Jun 2026 22:01:14 +0000
Manifest this update: Fri 19 Jun 2026 22:01:14 +0000
Manifest next update: Sat 20 Jun 2026 22:01:14 +0000
Files and hashes: 1: DflWa2LehAS4VsVgBMxJvmITVOg.crl (hash: 6UHin9r7N05JRXSqIjOAppdFXmeBJwdMW6U21O2yikE=)
2: sxG-Ohcwvb8aZM2TpYd1NB5vOgY.asa (hash: vSd/IIQwZif93HYdwUlXhWDqa5hZsFOQGXaTzyxogbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:e7:05:74:e7:9a:f3:80:83:04:b7:4c:ce:a9:2d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df9566b62de8404b856c56004cc49be621354e8
Validity
Not Before: Jun 19 22:01:14 2026 GMT
Not After : Jun 20 22:01:14 2026 GMT
Subject: CN=8934c3e4627bfd3e680b425bd1495dff1ecd08d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:f6:8f:74:88:59:bb:6e:b3:78:3e:56:be:
50:19:73:7c:7a:e5:e0:fc:1c:8d:dc:0a:02:00:a7:
ef:7a:90:7e:20:d7:dd:d7:e8:84:3b:4e:ae:a8:5c:
a2:87:e0:b2:97:20:06:c6:57:85:ab:07:ec:48:4e:
1a:bc:93:a2:01:de:a9:5f:ec:e3:73:1a:2f:73:d8:
f8:f6:3f:8b:0f:45:c1:d6:4e:ed:2e:60:c9:28:c9:
38:67:8c:9b:5b:36:d5:88:87:52:d5:aa:ac:80:8a:
21:bf:d8:64:ed:f4:37:c9:e9:ac:af:b0:57:0f:e4:
ee:93:fd:50:0e:95:85:99:f4:0e:ca:03:4c:fe:3e:
46:63:e4:e5:f8:6b:b4:d3:5f:6f:cc:57:43:d8:23:
56:83:a4:dc:df:fe:c6:7c:a7:14:46:73:db:78:ff:
1c:37:7c:db:3a:78:6d:65:e1:36:e4:0e:59:fd:fc:
b5:15:00:37:aa:78:50:ae:4a:1f:75:73:bc:33:36:
16:f3:bd:12:75:3b:26:cd:3c:d7:26:af:42:17:f6:
44:42:be:51:f7:0c:50:ed:58:d8:bc:c7:22:ff:86:
e8:84:b8:37:ef:d5:8e:7e:95:5a:e6:a3:cc:1f:ca:
51:7f:a4:14:2c:11:e4:1d:48:48:0d:31:4d:00:7c:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:34:C3:E4:62:7B:FD:3E:68:0B:42:5B:D1:49:5D:FF:1E:CD:08:D7
X509v3 Authority Key Identifier:
keyid:0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:de:4f:d8:d0:02:f9:8a:fc:9e:1f:b4:e7:7e:af:3c:4d:df:
90:34:76:6e:86:47:90:ee:80:d9:8c:14:2d:90:17:bc:a4:8d:
f2:54:1d:6d:8c:46:20:3c:a2:22:3e:01:49:66:ed:c8:24:80:
02:97:5e:64:3e:4b:af:fb:f3:a2:e6:7f:af:57:7b:a1:6c:84:
ae:c5:68:f0:7f:c3:b1:d7:d5:6b:65:e0:8b:6d:58:4e:fb:c0:
af:2f:f3:e4:f2:fc:a6:90:e9:89:f8:04:70:2f:2b:87:8e:df:
0b:c7:8a:c6:34:9e:f6:78:68:62:6a:ea:9e:db:d9:32:a6:b1:
70:ca:eb:41:db:45:ce:e3:30:cb:27:a0:4a:c8:88:b6:c5:ab:
c6:6e:45:e0:21:0c:95:dc:dd:48:6b:7f:ca:7f:3a:90:91:3f:
e6:c5:51:9e:a0:0c:19:aa:c7:52:f5:6d:ad:c8:3a:c4:39:3a:
a3:6f:3f:c1:b5:f7:82:c7:e1:92:36:7c:ab:03:8b:0d:ac:f2:
e0:60:59:d1:d8:cd:b7:2e:ca:40:0d:fa:ca:ac:30:c5:14:a6:
a1:52:54:d9:18:d0:5a:98:7c:a6:29:68:ba:ad:5f:d7:01:f7:
22:83:b3:43:41:e8:26:db:7d:72:6e:eb:a0:35:eb:aa:1f:62:
ed:12:e5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 07:25:16 2026 by rpki-client