Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier: oaOU2okMX0io7WsHgsqULzH8X5Z7ZWUipWmtXWKnU4s=
Subject key identifier: DC:31:F6:75:41:C7:9D:00:40:F9:5B:31:4F:A4:4F:A2:94:40:BD:E8
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 019D397777A4FEF93518AB97B625B6528457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number: 0C15
Signing time: Sun 29 Mar 2026 12:00:23 +0000
Manifest this update: Sun 29 Mar 2026 12:00:23 +0000
Manifest next update: Mon 30 Mar 2026 12:00:23 +0000
Files and hashes: 1: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: 9YNQX+5lf47he8cFJGo5SmYIwip2sjuanE+Qq76XleU=)
2: R9CKdSuhKcix03lDYUZNj_9bSZw.roa (hash: 25D9RZgSbgAoxxPe4MQJY7sqqlRu8rIg+8wl9bKE/EI=)
3: mq48_sBKvAEWvtf8WzXrPhnKlKI.roa (hash: 7dt1YErJg3/qsgZU38eup42hAog0One7x1CvO3l5p0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:77:a4:fe:f9:35:18:ab:97:b6:25:b6:52:84:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Mar 29 12:00:23 2026 GMT
Not After : Mar 30 12:00:23 2026 GMT
Subject: CN=dc31f67541c79d0040f95b314fa44fa29440bde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:9c:e5:0a:2e:7e:02:45:c5:8d:40:40:ce:
fe:41:22:5e:3a:48:dc:e8:ff:ce:9c:51:77:f9:bc:
74:d0:7f:03:56:20:36:0d:88:ff:86:04:19:43:9f:
e8:20:fd:07:38:f2:f8:68:ef:35:92:63:54:fb:69:
92:32:b7:44:5e:16:51:74:27:88:86:15:f4:f0:15:
06:a8:5a:b7:e0:7f:73:9b:bd:6e:5b:f5:a1:76:23:
61:bd:3c:83:af:98:41:24:c6:c9:1c:04:7d:9c:cd:
9c:e0:86:6f:8a:95:0f:5f:32:6d:02:16:92:db:b9:
56:4f:06:55:5e:5b:37:7b:18:ce:9c:f5:27:64:06:
a5:9f:65:aa:40:95:c5:04:dc:b6:42:4d:55:53:b1:
7a:55:0b:67:d1:61:00:da:47:51:6a:95:80:6f:6b:
88:83:49:f0:d1:92:41:42:4d:35:8f:c5:08:14:b8:
bb:4a:91:5b:f0:e5:b7:40:b1:cd:38:a9:b6:3c:a0:
c7:c9:69:d8:b5:da:bd:45:7b:9f:a6:48:8b:0a:8e:
e5:34:09:ff:e8:3e:d8:30:96:b7:1f:be:c5:cb:59:
b2:a9:ba:fa:67:1b:a3:23:45:34:c5:12:04:7e:71:
9e:54:75:57:03:13:7a:f7:57:62:bd:cd:5f:e8:67:
fa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:31:F6:75:41:C7:9D:00:40:F9:5B:31:4F:A4:4F:A2:94:40:BD:E8
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:91:f2:cc:d1:87:47:54:3c:b7:11:3d:3a:58:9d:35:68:23:
f8:04:e6:ad:33:bf:44:0b:27:91:8c:32:74:c9:1c:f5:a0:34:
07:25:8e:4a:0b:e0:aa:2e:87:07:da:85:55:b1:97:cb:f1:9c:
09:a6:da:8f:77:e1:c3:68:41:7a:a1:30:5d:e3:36:6c:01:43:
04:c6:36:be:09:bc:01:2a:7a:f3:ed:57:22:db:ea:b0:64:e7:
7d:f5:79:91:16:8f:ca:e4:35:e1:e8:fc:a0:21:d4:e1:c0:2d:
dd:96:c7:44:2a:0c:02:26:98:c7:7e:c9:7e:92:7b:73:51:29:
82:d4:f8:1b:6c:3e:18:1d:3a:18:8c:47:be:51:ee:e4:39:e3:
4a:2c:34:11:f8:8c:ad:c3:6d:2b:80:99:86:48:5f:ee:bf:78:
7a:b4:fb:25:19:8a:83:42:31:b4:17:3a:06:20:d6:ad:e1:ce:
15:6f:b4:0b:8a:c9:c9:34:6f:f8:5e:62:a6:46:de:2f:63:29:
92:2f:2a:c8:04:1c:d6:30:b8:46:51:f3:a3:e8:6d:33:09:57:
7e:28:b0:d6:8e:a2:0e:ca:cd:06:35:55:e0:65:fc:1e:b2:4e:
f8:2c:23:d4:57:11:db:e6:d8:92:15:1c:9a:f7:a8:e6:1a:b5:
b4:26:1e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:22:03 2026 by rpki-client