Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
File: DflWa2LehAS4VsVgBMxJvmITVOg.mft (raw, json)
Hash identifier: V36WE4+Qz7jnJj8VzWQxIzcB4Mk/nkQOCBGM8j7LTro=
Subject key identifier: 2C:9D:9C:89:A1:11:C9:B6:96:06:2B:B6:B3:49:E7:96:3B:97:F9:63
Authority key identifier: 0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
Certificate issuer: /CN=0df9566b62de8404b856c56004cc49be621354e8
Certificate serial: 01A0B53F528E370A4A160E07D3839935C2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
Manifest number: 01B5
Signing time: Fri 18 Sep 2026 16:00:21 +0000
Manifest this update: Fri 18 Sep 2026 16:00:21 +0000
Manifest next update: Sat 19 Sep 2026 16:00:21 +0000
Files and hashes: 1: DflWa2LehAS4VsVgBMxJvmITVOg.crl (hash: pRsq0TM6QkSypKeDG9HqK2enOZbtNcPVpJQapGQ+4Vs=)
2: sxG-Ohcwvb8aZM2TpYd1NB5vOgY.asa (hash: vSd/IIQwZif93HYdwUlXhWDqa5hZsFOQGXaTzyxogbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:3f:52:8e:37:0a:4a:16:0e:07:d3:83:99:35:c2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df9566b62de8404b856c56004cc49be621354e8
Validity
Not Before: Sep 18 16:00:21 2026 GMT
Not After : Sep 19 16:00:21 2026 GMT
Subject: CN=2c9d9c89a111c9b696062bb6b349e7963b97f963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:50:fe:cc:e8:6e:ba:34:b0:a7:f4:43:65:
8c:b0:9b:5e:1d:a5:13:75:16:69:c4:79:6f:c3:66:
2e:61:3c:61:33:94:a7:73:b3:0d:52:35:e4:0c:2a:
36:51:66:9c:c3:b9:69:59:95:40:35:7b:a8:b6:c1:
81:b8:8e:78:7b:a4:4f:66:65:1c:08:79:64:1c:6e:
b7:64:be:f7:75:1f:ba:1b:9f:5d:1e:0e:64:e5:e5:
eb:18:ce:ea:e4:fb:ef:ee:94:06:4e:4d:fc:58:44:
f4:c6:52:1c:20:d3:d7:52:e7:8f:9e:43:5c:33:27:
8c:74:a4:86:ea:d3:86:47:0f:27:59:c9:14:4f:4a:
e7:92:7c:b7:9c:e4:c3:e5:79:83:70:35:2f:d0:6c:
4f:70:cf:c2:41:39:9b:7e:a4:6c:64:01:d7:b6:f6:
8f:07:3c:55:4c:cf:5d:01:bf:e8:30:f1:94:8d:38:
4b:60:8c:af:02:f7:3e:45:ac:34:05:7e:a1:ca:66:
bc:0d:18:06:2c:4d:79:dc:0d:18:3e:0b:4c:65:a2:
42:72:74:6f:87:a9:51:47:d8:cf:b4:e2:41:92:fd:
e3:6a:8c:99:89:60:ed:38:97:a5:e8:46:3b:25:8c:
6c:bf:3a:20:4a:dc:e0:24:64:10:79:f2:b1:96:26:
7c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9D:9C:89:A1:11:C9:B6:96:06:2B:B6:B3:49:E7:96:3B:97:F9:63
X509v3 Authority Key Identifier:
keyid:0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:56:6a:ce:f1:0f:24:f9:14:9c:2d:aa:ad:36:d1:de:71:74:
43:86:dc:c9:3b:89:b5:1a:34:59:6e:15:62:ed:a8:2a:c6:cd:
02:c5:59:4e:66:4b:af:03:88:33:94:b2:1f:ba:5e:13:b9:52:
62:59:d3:8a:22:48:c2:11:c8:35:bf:b8:74:b6:07:39:6a:66:
75:bb:12:fa:da:34:36:47:53:01:c7:26:80:f9:a7:ee:b2:f2:
df:20:30:46:b8:e6:85:37:c8:93:d0:ac:8d:1f:b4:0a:1f:b0:
b4:17:a3:bb:2f:80:66:f5:31:09:09:4d:38:c3:78:25:98:47:
e2:63:ed:ce:c9:a8:5a:e7:35:49:a3:55:5a:2c:34:37:df:63:
89:c8:e8:f9:01:3b:37:1c:37:94:27:7e:db:79:cb:63:aa:c3:
12:63:0c:5c:eb:ff:54:e3:4c:85:37:2e:4a:bd:2e:fc:7d:d0:
55:36:2c:8b:87:05:e8:d3:ec:4b:81:a1:ac:47:8b:48:87:dd:
f5:57:3c:4d:a1:e2:d0:e4:d8:92:ab:dc:1e:99:53:cb:27:c6:
b8:71:74:db:c9:71:ed:07:78:ae:60:8f:5f:3c:01:14:2f:f7:
c1:5a:68:3a:a3:8b:b8:23:aa:32:e3:b3:e8:02:83:99:75:6f:
f5:fa:3e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:39:22 2026 by rpki-client