Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier: ms7xTtUZVdzMarRwrhFr1C3EoQzyrlxs1DO3aavsXlU=
Subject key identifier: CD:C7:EC:D5:85:D0:21:98:A6:A8:CB:92:BA:26:68:8D:FD:F4:81:C6
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 01A1246683B84D289BCC406BC946AB0AA8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number: 1A9A
Signing time: Sat 10 Oct 2026 06:01:00 +0000
Manifest this update: Sat 10 Oct 2026 06:01:00 +0000
Manifest next update: Sun 11 Oct 2026 06:01:00 +0000
Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: Zl9cT/VXgAxQexetG383cye1agpMAruK8CrdPBRLHRs=)
2: KAtyNFRu0nGkFIQ31UZVhuZVup8.roa (hash: YYWx9qqk5yZ7cfiJEDfLmx13WTy9RC2Y4Yty+5dwt2A=)
3: Mx6UIzbNO3Bm-ZPN13wn4uov6Qg.roa (hash: KtCxVhRpFwySEkS5UZDhWr1MQTEnHKhuscd/bkCMZDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:66:83:b8:4d:28:9b:cc:40:6b:c9:46:ab:0a:a8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Oct 10 06:01:00 2026 GMT
Not After : Oct 11 06:01:00 2026 GMT
Subject: CN=cdc7ecd585d02198a6a8cb92ba26688dfdf481c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:23:f5:73:b8:73:1f:e7:cd:2a:21:ea:61:
d1:73:d1:15:3d:f3:dd:4b:60:ba:ac:46:42:b5:52:
43:56:8c:d0:3c:09:4f:01:10:36:f0:d0:eb:83:a0:
4f:5b:05:92:7c:94:93:2c:19:48:14:ac:89:e6:8c:
97:28:10:3f:87:6a:93:53:23:c4:3e:5d:53:a3:79:
48:e7:4a:71:15:0e:3b:37:8f:1c:e2:d5:ac:42:31:
ce:e7:e4:ba:c9:fe:fd:a6:5b:9e:5f:72:c9:da:26:
b7:9b:93:d2:ff:18:64:6a:ae:19:57:b2:cb:7b:8e:
42:55:17:a9:e4:b9:dd:cc:e7:11:58:9f:80:3b:5c:
d4:f7:f6:33:ff:03:81:e3:54:7a:fa:4a:8a:f3:ed:
ed:59:71:b7:0b:04:f6:68:8a:6f:21:c2:b2:b7:dd:
d7:f1:5e:9e:cc:1b:84:29:14:92:ef:28:eb:4a:37:
49:4e:30:7b:90:72:da:e2:b2:16:e5:32:81:72:db:
55:60:16:56:39:3f:15:7b:3c:ef:b0:86:a2:d0:b4:
26:0f:3e:e2:94:99:96:79:11:49:ad:18:a6:e1:42:
d7:97:2c:cf:87:96:d4:6d:96:5a:d4:22:8c:b7:06:
d6:96:da:e5:4b:a8:79:e3:2b:d5:db:49:64:a0:f9:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C7:EC:D5:85:D0:21:98:A6:A8:CB:92:BA:26:68:8D:FD:F4:81:C6
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b2:68:c4:ef:20:45:f8:19:06:10:e5:02:de:4c:20:8e:0e:
d0:c0:95:d2:07:40:2d:55:ab:29:d5:2d:5c:7e:e7:b7:39:cc:
e8:8d:ac:21:91:33:19:e8:14:ca:87:3c:ff:09:bd:80:ec:21:
10:73:ba:83:22:a2:96:f1:07:5f:53:eb:4c:7c:13:b8:dc:9c:
4e:69:a6:25:34:33:52:c2:21:d5:8e:ad:db:3b:b7:bc:f8:35:
f6:21:41:89:73:7f:66:4d:68:0e:c2:5c:82:8c:77:68:98:c6:
f5:d4:13:9d:75:3f:73:ed:af:3a:9d:ea:bd:00:99:7e:06:b5:
2b:32:29:a9:97:49:0b:af:d6:69:4c:7d:8a:71:82:62:d5:03:
8c:42:5a:cb:e6:45:5d:e9:fd:2d:1a:f9:e1:f7:39:30:35:4a:
4d:76:b4:8f:31:41:48:22:03:28:86:d1:cb:5f:af:42:70:92:
89:be:4e:ca:e0:5d:ef:98:92:e7:88:f4:48:9f:ce:77:8e:23:
81:2a:f6:2b:ce:aa:74:ba:8c:9f:81:74:46:d4:a8:f9:6e:a6:
fa:c4:21:8b:c7:b9:d1:e9:ad:4e:9e:d9:42:c0:a8:60:27:03:
ab:65:db:02:9b:96:b8:22:8f:31:32:f9:2d:a6:17:52:98:57:
80:a9:5c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:10:12 2026 by rpki-client