Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier: 9qb7dMbMri3D/I6PPwKoZad9cU+Tgn29w1WpgXZePH0=
Subject key identifier: A1:51:15:20:89:D8:58:EC:07:59:A0:36:0C:4D:A3:2D:74:1F:A9:A2
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 01A126551BE69585C1C8E7631AA48D5F88E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number: 1A9B
Signing time: Sat 10 Oct 2026 15:01:14 +0000
Manifest this update: Sat 10 Oct 2026 15:01:14 +0000
Manifest next update: Sun 11 Oct 2026 15:01:14 +0000
Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: uW0sgdYy2PuL2uor/13WsWyhXFkoR/uqHGxnwWrEO94=)
2: KAtyNFRu0nGkFIQ31UZVhuZVup8.roa (hash: YYWx9qqk5yZ7cfiJEDfLmx13WTy9RC2Y4Yty+5dwt2A=)
3: Mx6UIzbNO3Bm-ZPN13wn4uov6Qg.roa (hash: KtCxVhRpFwySEkS5UZDhWr1MQTEnHKhuscd/bkCMZDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:55:1b:e6:95:85:c1:c8:e7:63:1a:a4:8d:5f:88:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Oct 10 15:01:14 2026 GMT
Not After : Oct 11 15:01:14 2026 GMT
Subject: CN=a151152089d858ec0759a0360c4da32d741fa9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:61:66:89:60:3f:a8:70:79:8f:d5:7c:45:47:
b8:ac:c2:c2:62:3e:55:f1:83:2a:e9:02:fc:42:95:
2e:97:b6:fb:04:f4:b7:e6:8c:c1:8e:6f:33:0d:fe:
84:8d:2e:0f:08:a9:11:08:f9:9c:9a:64:7b:a9:53:
a3:da:1a:43:28:96:e4:a5:e5:3d:6e:f4:67:82:b9:
fc:f8:5f:31:8b:5a:dd:79:37:f8:4e:8e:ec:7a:de:
8e:ba:7d:f2:d6:82:c8:18:78:e9:5d:61:3d:73:ee:
5b:de:cc:d6:69:cf:b2:9a:51:42:d0:b9:b4:d4:fc:
a2:ab:f1:8f:ff:be:6b:58:ce:06:36:08:a6:f1:ba:
3a:84:7a:cd:ba:90:46:b2:6b:c8:18:51:33:fb:a4:
c2:11:1e:d2:7b:fa:4c:4b:11:6d:f3:48:28:88:db:
09:e5:e2:a8:df:1a:ed:57:99:18:ed:4d:49:98:d1:
fe:db:93:54:6b:53:59:df:2e:c9:39:3d:29:c3:19:
1b:a5:49:b5:6a:7d:c0:91:43:cc:c1:85:65:36:d0:
72:8b:4f:8d:da:88:d7:f0:38:f9:e9:eb:5d:ff:cc:
00:0f:d0:f2:70:76:7e:ee:c0:bc:83:c7:6c:99:fc:
bf:2f:31:c1:55:d6:a0:5d:4d:19:5a:46:f9:32:31:
d8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:51:15:20:89:D8:58:EC:07:59:A0:36:0C:4D:A3:2D:74:1F:A9:A2
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a2:ab:99:5c:6e:84:29:dd:b5:f0:28:22:aa:89:80:e5:de:
a1:6d:ed:58:70:bf:56:48:d2:49:a2:d7:0d:46:55:a5:2d:96:
12:a6:42:e1:ff:a5:4f:59:a0:df:05:4a:39:6c:34:78:07:6f:
6a:ff:87:e6:e4:58:ee:13:5a:32:13:31:24:1a:04:6d:6c:a5:
c1:12:9d:f8:77:2a:12:e2:38:5d:43:da:ca:1a:d9:c0:26:cb:
33:bd:d9:17:a7:f3:98:6a:35:15:8b:66:15:11:64:ec:62:ea:
5a:78:68:e4:ad:66:27:9e:a6:7c:b1:c6:31:36:ee:6e:2f:27:
17:5f:86:fb:3c:e4:37:85:cd:fa:a0:18:eb:02:6c:d5:be:28:
c6:d2:b3:f2:6b:09:be:a0:ad:30:78:46:a4:30:91:d0:5d:b8:
1b:e9:d2:c0:a3:3d:1d:64:04:b1:60:ad:58:83:11:67:ec:22:
84:f1:34:2d:1b:17:33:5e:48:33:12:80:81:f0:01:75:0c:94:
2b:98:d4:a7:bd:49:ce:75:36:d6:1f:15:ca:e0:da:df:27:30:
fa:c6:96:c6:24:79:21:ca:7c:a1:57:fd:cc:f4:2e:2c:ae:f0:
d5:a8:10:3d:a9:a2:63:a5:73:9d:d5:7b:0e:4a:31:49:a3:20:
e8:bf:92:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 20:11:56 2026 by rpki-client