Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier: IpoYKArFEH40lhnVwH+2lgBuAPTnUZT0cb/jcWKrxps=
Subject key identifier: 48:43:64:3E:62:C0:C8:E8:1D:D2:FC:DD:C5:4D:93:FE:08:89:60:5A
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 01A000CABD3F55EECDF164741A3CA8707DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 15:01:21 +0000
Manifest this update: Fri 14 Aug 2026 15:01:21 +0000
Manifest next update: Sat 15 Aug 2026 15:01:21 +0000
Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: JNq3ElMLXt+iGotjTTV3e/8QWsdk2m7OxjaeiKpIU5U=)
2: KAtyNFRu0nGkFIQ31UZVhuZVup8.roa (hash: YYWx9qqk5yZ7cfiJEDfLmx13WTy9RC2Y4Yty+5dwt2A=)
3: Mx6UIzbNO3Bm-ZPN13wn4uov6Qg.roa (hash: KtCxVhRpFwySEkS5UZDhWr1MQTEnHKhuscd/bkCMZDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:bd:3f:55:ee:cd:f1:64:74:1a:3c:a8:70:7d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Aug 14 15:01:21 2026 GMT
Not After : Aug 15 15:01:21 2026 GMT
Subject: CN=4843643e62c0c8e81dd2fcddc54d93fe0889605a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:be:93:a0:98:ac:be:da:e0:89:d6:a6:7c:
f5:ff:16:18:00:9e:32:8b:e3:da:56:c5:bc:b0:c5:
00:fb:70:12:71:d0:e6:3d:f8:26:65:93:0d:00:02:
32:54:20:df:54:b1:89:5b:4a:96:b7:d4:36:12:df:
1b:67:4c:8e:1d:00:36:70:5c:14:e4:d7:7f:36:88:
d8:9f:b2:c7:f9:a1:61:80:06:ed:88:04:55:7d:77:
ad:77:8a:09:72:99:5a:7c:07:04:28:ea:fa:ad:c7:
0f:e5:3c:83:f4:4c:ff:f3:3e:04:bb:a8:0d:dc:53:
f4:6a:10:57:7c:73:86:49:dd:50:2b:6d:35:02:03:
e1:45:9b:60:04:71:a5:cc:0e:5b:6c:ed:d6:7d:1b:
f3:02:cc:46:02:54:f0:b1:06:77:8d:cb:7a:92:a4:
e5:d9:10:d7:80:ab:90:25:35:ff:3f:a6:e1:46:37:
51:6d:74:cd:e2:1f:e0:82:69:6c:61:65:87:60:1f:
5b:8d:81:d4:49:be:f6:ff:da:72:28:95:37:95:cf:
d6:4b:12:97:c1:29:16:6a:a6:15:fd:ca:bc:f0:20:
10:e2:41:54:5c:96:c7:3a:37:e3:82:42:f9:06:ad:
a7:da:74:58:6b:0e:06:36:ec:3c:3a:a5:40:79:c1:
b8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:43:64:3E:62:C0:C8:E8:1D:D2:FC:DD:C5:4D:93:FE:08:89:60:5A
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:18:3c:5d:22:e5:64:43:14:8f:cd:cf:d3:1d:70:de:39:f0:
d9:52:5d:bc:06:47:f0:b0:13:15:d3:4f:83:c0:a1:02:a3:b5:
af:fb:5c:7b:13:3b:06:39:03:bb:72:b7:bc:da:49:03:0b:2e:
04:a5:b1:37:cd:a7:b3:a8:06:6e:26:8e:57:9e:2b:f7:24:c9:
93:67:de:54:6b:2d:22:c4:7a:cd:29:00:91:98:1f:8e:e6:e8:
b3:34:c1:b4:25:a5:2a:a8:92:56:d9:d0:cd:b7:cc:a3:1b:cc:
30:85:84:b6:f4:d3:1c:c1:a0:5c:9b:82:77:41:d6:6b:ec:6c:
91:af:44:4d:7d:aa:3a:75:56:5a:04:35:6f:38:04:30:57:a4:
c1:71:65:04:96:57:5f:10:2b:8a:ac:7c:40:27:88:f3:0b:e3:
6a:48:b2:f4:35:3c:61:9d:70:1c:45:f1:94:cd:6a:43:fd:46:
27:e0:a1:58:b6:ee:1b:d7:67:25:29:cb:52:5f:c7:69:2f:fd:
b3:be:ba:64:a3:da:1a:13:10:d0:a2:67:0d:3a:00:23:6f:ea:
ed:cf:b5:a7:77:e8:fd:e7:08:eb:0e:6e:85:67:1f:ad:90:23:
d5:cb:80:cd:b0:0a:bd:eb:e8:14:65:c7:31:1b:46:ea:7f:9c:
29:11:6b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:12:35 2026 by rpki-client