Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
File: DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json)
Hash identifier: kl2iOfte3vuW3gUoR03HFeJ04ZhiJe6g9ekblgjsnys=
Subject key identifier: EB:83:E6:EE:AC:6D:27:B2:99:B5:FE:04:4E:15:11:99:82:0E:93:C8
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Certificate issuer: /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial: 01A13D80EB49B92F0EAA0D413215C97CA1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
Manifest number: 1280
Signing time: Thu 15 Oct 2026 03:00:21 +0000
Manifest this update: Thu 15 Oct 2026 03:00:21 +0000
Manifest next update: Fri 16 Oct 2026 03:00:21 +0000
Files and hashes: 1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: KXQhVm/jVyopBrsPPI+fcLKMf/UmXHQl2hpsG5gKbIc=)
2: DiPUcYeYMMKBJ6pco8Genqou5P4.roa (hash: k19Q1QHBDALtzKkWkQIrCed59UccTXEghHZXW9Dj4JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:80:eb:49:b9:2f:0e:aa:0d:41:32:15:c9:7c:a1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Validity
Not Before: Oct 15 03:00:21 2026 GMT
Not After : Oct 16 03:00:21 2026 GMT
Subject: CN=eb83e6eeac6d27b299b5fe044e151199820e93c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:8a:bc:a0:db:e5:45:40:a1:c5:ee:8b:e9:
95:19:60:0a:2e:7f:a9:0d:1b:20:52:d4:5f:97:de:
99:6e:74:ff:af:4b:80:a5:f6:6d:e1:a1:d8:8c:32:
a2:e6:41:e7:10:33:d4:e5:24:49:58:2d:1a:29:cc:
c7:d5:ae:09:db:71:bb:88:58:1f:8d:a0:0b:08:5a:
59:a1:fc:57:05:ad:5e:ba:f4:bd:b4:6a:0a:93:5e:
2e:51:c9:ba:6f:8a:20:ac:a7:af:28:38:51:af:1a:
b7:26:d3:55:17:6f:bd:33:4f:90:54:49:4b:8f:9c:
ca:90:99:5f:a2:b7:11:b0:fe:71:e6:fc:c3:75:b4:
62:ff:67:1c:ac:7d:7f:61:58:f6:fd:d8:ed:b5:a4:
0e:e7:9c:6b:a3:3d:57:fe:30:7a:df:24:42:4d:b1:
f1:77:8b:a5:7f:69:02:55:0d:ce:af:d5:dc:4e:05:
62:48:3a:b1:e3:fd:fe:15:c0:4b:37:81:8e:86:88:
78:04:7b:c6:47:dd:0d:95:f5:21:f6:04:a8:c6:53:
6b:b1:61:54:54:a2:90:4e:c1:0b:d1:64:53:e3:e8:
1f:21:61:40:fa:4f:53:18:2d:d5:37:4d:a4:a8:9b:
3e:66:a1:6f:39:a2:e8:8d:99:74:c5:1a:5f:0e:21:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:83:E6:EE:AC:6D:27:B2:99:B5:FE:04:4E:15:11:99:82:0E:93:C8
X509v3 Authority Key Identifier:
keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:80:b4:8a:28:99:30:fc:43:ff:c6:46:d1:c4:0b:96:38:9e:
37:38:cb:e8:b2:c0:f0:a5:2b:f3:3b:a0:3c:15:d3:e1:ca:61:
dc:d6:24:b1:6f:08:94:1e:82:92:3d:71:35:3e:7c:2d:db:ba:
67:a1:2e:72:ef:f2:d1:c5:32:41:f1:9d:97:d2:35:04:9d:ea:
01:af:92:05:24:d4:3e:03:cf:c0:bf:95:23:ed:49:d3:ca:d0:
05:67:16:06:b1:ac:56:b1:18:be:35:37:38:ef:be:cd:4a:67:
53:11:5b:89:84:85:45:33:c1:9c:62:1f:2f:2e:73:d9:75:a0:
a8:dd:42:26:71:08:f5:88:12:fb:5e:e0:a3:9c:2f:b8:73:41:
2c:3c:e5:96:96:41:26:86:92:19:50:bd:20:7b:66:ba:83:c6:
32:d1:71:37:9c:49:58:35:5b:f8:64:8f:14:d7:f9:61:db:8a:
8b:a7:7a:1f:44:8a:75:d9:6d:54:99:ac:84:9c:64:16:97:e5:
85:f2:f0:6f:77:8d:1c:1c:f1:a0:0d:ea:86:25:1f:fb:c6:07:
34:94:a7:84:be:37:a7:cf:ab:c4:ee:22:e4:0a:79:43:ad:df:
39:d6:85:20:82:54:43:32:24:ce:ee:01:1a:d2:ab:81:47:2a:
4b:72:3f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:26:55 2026 by rpki-client