
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
File: DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json)
Hash identifier: 2gQXxUyhA39q/8rpohLdF3rlxKaTOgvu4FDbpmG3gmw=
Subject key identifier: 77:C5:04:BB:EF:4C:39:A0:06:47:10:C5:77:CC:8B:8D:0A:5E:21:8E
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial: 01A13E94D97F3E583A4B272D541358E16843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
Manifest number: 118A
Signing time: Thu 15 Oct 2026 08:01:44 +0000
Manifest this update: Thu 15 Oct 2026 08:01:44 +0000
Manifest next update: Fri 16 Oct 2026 08:01:44 +0000
Files and hashes: 1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: Id0+403xfQ/30jn3Xuy1BhT8mKewOfOxCTZfIsCqcAU=)
2: pEi1sXolFr3_KzzGy9GgxCb35YI.roa (hash: 0hWxK4UVYjDavdDARBqtyWujMUcunhSXg8YFegPVy8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:d9:7f:3e:58:3a:4b:27:2d:54:13:58:e1:68:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Validity
Not Before: Oct 15 08:01:44 2026 GMT
Not After : Oct 16 08:01:44 2026 GMT
Subject: CN=77c504bbef4c39a0064710c577cc8b8d0a5e218e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:a1:4a:78:72:44:01:9c:2d:5f:52:4c:fb:
8f:38:33:2d:8c:37:7b:97:99:5f:1c:42:d6:0b:ee:
7e:83:bd:29:4a:5e:cc:58:fb:99:44:53:df:b1:af:
36:1d:73:68:e7:58:23:b9:f4:65:39:45:24:f3:be:
56:98:f6:89:99:fe:b3:bd:ec:5d:ae:e2:14:aa:8e:
b0:18:ed:c2:ef:da:3f:a8:a3:d1:7a:83:d7:c0:71:
3b:88:d8:16:b1:62:d7:6b:ea:7d:fe:86:e3:e4:99:
03:34:75:ab:bb:40:8c:2e:f2:ae:c3:29:12:bc:44:
2e:81:8d:7e:b9:b0:8f:b6:96:2d:f2:b9:d6:b8:8d:
78:b8:3a:fa:43:0a:ba:07:d9:ca:df:ae:24:3b:a6:
e2:e0:3f:36:6c:28:ac:1c:7a:dc:f4:60:89:eb:42:
a0:25:f9:fd:53:8f:ea:15:04:8f:2f:e9:f7:60:e7:
e6:40:03:9b:a7:49:a1:5c:5f:11:45:bf:c3:80:aa:
4d:b1:f7:46:de:b1:c9:6b:8c:f5:67:ae:4d:65:68:
f7:e0:ec:0a:d6:52:f8:4e:68:be:e9:a3:39:70:14:
3d:b5:d6:58:0d:b0:68:7d:cd:c4:6a:ca:88:6d:5d:
fc:62:84:31:a7:08:66:d1:dc:8f:0e:01:34:3a:9d:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C5:04:BB:EF:4C:39:A0:06:47:10:C5:77:CC:8B:8D:0A:5E:21:8E
X509v3 Authority Key Identifier:
keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a7:dd:12:38:05:03:fb:44:f4:5c:c0:50:2c:6f:00:b5:2d:
52:dd:05:18:27:32:df:89:f2:a6:73:fd:72:4b:f3:68:56:0d:
c3:de:b4:cc:0a:72:0e:c0:ed:20:75:65:74:5a:95:34:32:35:
a5:88:ec:f8:17:90:87:33:2c:ec:47:96:39:66:dc:94:ad:57:
e4:5f:93:dc:18:11:d9:56:e5:ad:75:62:64:28:8d:b0:20:24:
36:29:dc:e7:63:fd:38:37:1e:5d:4a:a5:2d:5c:28:b8:d4:ae:
4b:47:fb:e4:55:2f:07:a0:a6:96:b4:f4:46:fa:13:d3:5c:e3:
2d:4e:fa:38:76:d8:e5:0c:10:aa:ae:5f:4a:52:81:76:66:b0:
de:5f:b1:3d:07:73:c5:75:a3:ae:d6:21:c1:83:66:a2:eb:8d:
44:70:6f:f9:05:59:09:ed:a4:1c:ab:f4:a0:69:93:c4:48:4d:
71:40:65:65:94:fb:26:ae:7e:f9:5d:57:43:0e:e8:98:4c:01:
9c:38:65:84:22:8a:4b:36:af:42:63:e1:a3:a7:79:56:01:fd:
dd:d2:7f:a0:72:dd:1e:2c:12:0a:ca:37:cf:b3:2b:74:ac:2b:
3c:27:d3:d8:5a:6a:2b:15:9b:9c:af:06:f4:40:ef:b6:78:35:
bf:6d:34:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:54 2026 by rpki-client