Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File: DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier: SiNAgx/7xu6TbVeOWKVrMrFsFXFyum3neIDivQtXTmQ=
Subject key identifier: 07:11:95:5C:65:AF:D6:96:D5:14:D1:C8:0B:0E:0D:5F:87:E9:AB:CE
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer: /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial: 01A13DB83FC46969DD1431072E9DFBECFDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 04:00:47 +0000
Manifest this update: Thu 15 Oct 2026 04:00:47 +0000
Manifest next update: Fri 16 Oct 2026 04:00:47 +0000
Files and hashes: 1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: kY3EZg/lIfrtfMk2XbmmRVCNfHB+VhdFSq71nRTZUmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:3f:c4:69:69:dd:14:31:07:2e:9d:fb:ec:fd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Validity
Not Before: Oct 15 04:00:47 2026 GMT
Not After : Oct 16 04:00:47 2026 GMT
Subject: CN=0711955c65afd696d514d1c80b0e0d5f87e9abce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:33:4f:5d:7b:e3:19:b1:ac:3c:b7:f4:7e:
23:67:e4:3a:df:f0:51:f4:d0:94:ad:5a:f8:8d:56:
8e:df:2f:4c:bd:61:19:f8:2b:4b:0e:65:d2:16:70:
2d:bc:ef:33:b3:bb:c1:2c:a5:6e:24:f7:cb:b9:76:
c2:70:ab:2a:84:06:fe:83:e7:f4:36:98:b2:f4:be:
c6:a9:f5:30:1d:51:ca:cd:0c:2a:c3:8e:61:57:c4:
c2:5f:9d:a2:b1:92:18:37:75:cc:7f:f3:67:79:1c:
ae:68:02:f0:68:56:b5:1b:0d:d2:f9:c8:4b:2e:8d:
b3:32:11:fa:60:2f:ec:e5:4c:05:c6:e4:ee:dc:a2:
c5:8b:eb:df:06:df:9f:09:92:d9:89:d9:1b:80:12:
ec:06:65:9c:22:5f:d2:92:44:61:3a:c4:e1:bd:1b:
f6:5b:5a:4f:f0:f2:0c:c2:ce:a7:a4:bb:fe:99:e2:
67:41:a4:bc:dd:d9:83:5e:a5:a6:18:39:b3:92:2f:
df:8f:8d:51:01:4d:43:58:f4:3b:96:68:60:04:7b:
75:ac:c6:c7:66:e2:44:0f:c0:e4:bb:3b:46:e1:00:
e3:e6:8f:4c:ba:c1:61:10:48:7e:7b:bf:8a:ef:79:
b9:0d:3a:a8:29:43:9e:51:df:ed:df:8d:7c:1e:6d:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:11:95:5C:65:AF:D6:96:D5:14:D1:C8:0B:0E:0D:5F:87:E9:AB:CE
X509v3 Authority Key Identifier:
keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:af:bb:1d:b1:ce:7e:a6:f1:5a:81:52:93:95:4c:23:2d:70:
c7:55:58:06:7a:2e:0b:e3:5a:91:d3:fb:69:02:8e:05:06:fa:
1e:8d:ac:75:19:bb:54:66:6f:eb:f7:2c:5b:17:8b:d3:5a:62:
97:e2:0d:27:dd:14:c7:83:61:bd:89:05:89:01:93:84:9b:9b:
bb:a3:59:3f:28:c3:f4:7b:84:3b:e8:63:8f:37:69:b2:78:12:
d5:63:de:9b:33:52:bf:99:c4:91:a1:c7:ae:1d:07:fa:bb:af:
25:2e:f2:93:21:37:ba:ae:67:8c:5c:ef:95:db:5d:b0:cc:59:
90:ec:a4:47:3a:e8:84:8e:f4:a0:87:5e:7d:68:53:97:8b:01:
6b:f8:04:ea:aa:d7:e8:df:3b:b1:55:82:3e:a2:84:d2:ba:28:
90:95:39:52:56:5e:b0:82:9c:f1:2d:c6:e6:6c:5e:f3:86:cd:
7b:e8:fa:64:12:3f:6c:0c:c0:02:1c:0d:ee:d9:a0:86:5d:97:
e3:42:34:8b:67:e1:43:0c:27:11:57:ee:c4:af:ff:8a:04:43:
0b:9c:6f:a7:de:5a:75:32:66:af:4b:41:38:87:93:69:00:56:
d1:1f:a3:6a:bf:67:ad:03:91:eb:e2:5c:3d:e2:46:9f:30:2a:
d5:9d:62:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:55 2026 by rpki-client