Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier: 1i2VEb6qLs8bLXc5DWjPOwfDUCYmviqniTry5OCSjM8=
Subject key identifier: C4:06:51:2E:20:A3:C3:E1:75:EC:EE:92:CF:74:52:B1:CC:BB:99:D9
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 01A13F39AC4DF67AE2A2F2C650C2B8B87AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number: 1143
Signing time: Thu 15 Oct 2026 11:01:46 +0000
Manifest this update: Thu 15 Oct 2026 11:01:46 +0000
Manifest next update: Fri 16 Oct 2026 11:01:46 +0000
Files and hashes: 1: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: sAfoQ7H7rq3IFLhGTlut7pdFB5IpXllEdbG/YrxyHZE=)
2: PT0Hh_zA6DA7Ygm3lsv3kQf_fks.roa (hash: FxFcWo8Y6GRlCILxAgJ+3ut0eY9so1Z8V3wHguGCZXE=)
3: Ua52IPMh7tUk8OiJNRdVKabymgI.roa (hash: Ig2jLrSQbVFfXELVpcCRVjOIIU8fStnsUhfT16Zx690=)
4: bteUfMNGCw4iekhcsm-TC--JQrY.roa (hash: 0mwVlH5pQckOHYni1LukazfItUgOS1Qd+GhZIFEebJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:ac:4d:f6:7a:e2:a2:f2:c6:50:c2:b8:b8:7a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: Oct 15 11:01:46 2026 GMT
Not After : Oct 16 11:01:46 2026 GMT
Subject: CN=c406512e20a3c3e175ecee92cf7452b1ccbb99d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:44:07:43:73:35:8d:1b:b8:87:1d:11:8e:
ee:30:85:4e:7b:34:c8:f4:fe:f4:5c:fe:81:d2:8a:
79:28:77:d9:83:7f:28:12:60:17:26:a1:5a:70:32:
d4:c4:49:a6:e6:c8:3f:03:3f:40:c4:4b:d4:ae:4e:
34:20:43:df:4a:9e:f7:47:92:85:1a:4e:40:40:97:
f0:bd:a7:d1:c0:2c:c4:c8:e8:06:62:3a:7e:fb:61:
6e:fb:c3:cc:69:9e:5b:02:bb:77:8a:11:87:3d:b7:
48:0e:3c:49:2b:7f:c3:58:0c:1e:8f:3a:87:1b:56:
a9:46:84:3e:8a:3f:2e:17:5d:78:a3:a0:0f:80:f7:
0c:2a:8e:eb:28:59:5a:45:02:35:23:e7:89:5f:1b:
e9:f7:24:34:0e:22:ed:7f:4a:40:95:91:7a:c6:c6:
19:f5:a0:0d:64:7e:e9:b8:3a:32:67:ea:38:1d:a7:
76:80:84:27:5b:38:6c:c2:9d:fa:60:a4:7f:ea:b1:
61:bd:43:56:38:1a:8b:c0:cb:fe:5f:dd:84:70:1b:
a6:a9:d6:00:cc:66:e9:be:1d:2e:01:4d:be:cc:d7:
90:23:2e:fc:c6:bf:62:55:a8:f7:21:90:6e:08:e2:
ad:27:d1:ee:bf:a3:9a:9e:d8:05:fa:cc:a2:53:56:
80:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:06:51:2E:20:A3:C3:E1:75:EC:EE:92:CF:74:52:B1:CC:BB:99:D9
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:85:13:86:7c:5f:59:63:6f:10:eb:93:68:c5:32:ce:a6:b2:
14:60:15:9b:8f:ca:d5:a7:d4:10:fc:92:46:19:e8:72:fa:dc:
14:d4:41:a0:05:dd:17:e6:f2:d8:5c:d6:35:1b:da:76:57:d0:
c7:6a:63:27:2f:5e:85:66:ec:3a:3d:8b:39:dc:5f:d5:60:9a:
b8:1b:5e:ea:ed:bf:c1:68:b3:9d:46:cf:e2:57:ab:02:ba:a3:
89:87:f5:0d:f1:12:db:aa:1a:4e:1e:43:61:71:4c:75:cc:c8:
37:be:47:3a:35:7d:03:48:e1:ed:9b:2f:34:19:d2:17:36:eb:
bd:82:eb:ba:de:0e:6d:12:a4:bc:cf:c4:ff:9c:17:87:17:ad:
5d:38:92:c6:ec:a3:41:86:24:1c:d1:55:4e:d4:e3:4c:b6:87:
90:1e:f6:ca:88:e2:75:ca:34:20:cc:23:df:f6:b5:8e:39:0d:
b7:70:12:dd:35:2b:92:3d:f3:c9:a6:51:b7:3c:d2:94:61:b3:
00:44:1c:06:dd:69:4a:fa:cf:11:a4:58:fe:15:21:a2:fa:74:
ed:9c:68:13:23:d9:b3:30:db:53:c2:66:9e:39:72:84:60:31:
94:d4:ba:51:1d:9d:e7:37:3b:71:fa:f8:57:7f:e5:8e:ca:aa:
fd:01:9a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:11 2026 by rpki-client