Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
File: DfDWLe46FKBuUrfveggwM42dd1E.mft (raw, json)
Hash identifier: CwID0Z32J3+Di75RECU+E86L0B2JHH3rfpXyVW+Ye10=
Subject key identifier: D8:C2:02:51:8B:9C:72:60:20:FC:96:7B:02:36:E6:BF:F4:44:70:C2
Authority key identifier: 0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
Certificate issuer: /CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Certificate serial: 019D2695ED9B9967A1737A9BC3AB21A71C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
Manifest number: BE
Signing time: Wed 25 Mar 2026 20:00:52 +0000
Manifest this update: Wed 25 Mar 2026 20:00:52 +0000
Manifest next update: Thu 26 Mar 2026 20:00:52 +0000
Files and hashes: 1: DfDWLe46FKBuUrfveggwM42dd1E.crl (hash: fQHcyBkDmqf1VnOwNBLlRVNqQ/5Px0FQraHIwD7wmaI=)
2: ukKanfspjPtogwslBOvKVuFlnzU.roa (hash: VJCtLd80BTyZ1jJxvamfRrMpjXu4ufEwo/wpl1CsYuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ed:9b:99:67:a1:73:7a:9b:c3:ab:21:a7:1c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Validity
Not Before: Mar 25 20:00:52 2026 GMT
Not After : Mar 26 20:00:52 2026 GMT
Subject: CN=d8c202518b9c726020fc967b0236e6bff44470c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:4f:5d:ee:59:47:c6:22:05:81:a5:77:f3:
fa:bd:92:86:f7:ef:3e:76:7e:02:7c:2a:60:91:59:
f9:12:48:4b:21:fb:7d:d4:35:17:2c:13:20:ea:ca:
b7:39:fe:d8:5c:8c:bd:51:cc:a6:86:08:0d:62:7a:
9c:c1:9a:f3:08:0b:d6:37:63:fe:de:16:91:cb:4d:
ec:5b:8c:4a:25:bf:a0:22:5f:6c:8c:26:ce:af:92:
df:62:a2:3c:98:aa:4c:e2:dd:80:e0:79:72:a7:8e:
7e:d9:91:66:29:d4:86:71:0e:21:9f:e6:e9:2a:cb:
99:12:44:e0:0a:de:5b:2b:af:85:2b:5c:a2:f3:59:
99:00:e6:a8:e0:b2:d1:29:01:3a:1b:c5:02:01:ed:
5b:e0:60:b4:42:25:b8:49:07:0e:6e:b7:bd:f8:00:
7a:b8:96:8c:3c:3a:83:06:63:ad:8e:a6:2d:19:a9:
1d:3e:df:7d:5d:86:19:a2:51:16:e0:20:02:c3:ad:
a0:98:61:6c:e0:16:26:23:ec:e5:8f:62:d7:85:e5:
b5:4c:f4:18:b8:28:0b:4b:54:8a:c7:ff:28:4c:12:
01:90:bb:29:74:de:3a:8a:c6:c9:27:49:7b:f1:46:
cd:a1:e4:e1:93:ad:23:9b:34:32:76:9e:db:6b:5b:
0e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C2:02:51:8B:9C:72:60:20:FC:96:7B:02:36:E6:BF:F4:44:70:C2
X509v3 Authority Key Identifier:
keyid:0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:80:8d:af:76:d9:0a:e2:09:53:c3:05:eb:4a:e4:e9:f2:4b:
7a:28:f9:7c:ec:d5:e1:8b:99:e6:0d:7e:4c:a3:39:70:8c:de:
97:e9:33:62:76:07:d8:05:79:4f:86:00:4c:28:b0:1e:8f:d9:
54:e6:37:74:e8:fd:8a:27:6f:f6:56:79:22:71:65:1f:96:82:
aa:27:07:13:4f:24:6c:94:db:94:49:77:f6:cd:39:64:71:90:
be:86:ac:b8:56:b4:91:d7:ae:b8:b6:8a:eb:bd:0c:ee:c8:c6:
3e:16:17:bf:81:ea:b1:76:c5:b3:ca:65:f1:68:e5:94:5d:bb:
cc:1e:58:32:94:a0:ad:3d:1d:50:41:ac:15:bb:9a:48:36:c8:
f3:95:7c:54:9d:9e:f0:63:d7:5a:0e:86:73:c4:29:6e:1c:93:
14:7e:33:41:7d:56:54:a5:04:86:19:5f:b4:cd:55:29:55:3a:
b2:42:0c:c0:68:a7:db:01:35:91:3b:07:67:db:ba:28:f9:85:
a9:80:06:a2:74:df:7e:5e:89:b9:a9:61:4d:3f:ef:63:0b:32:
1f:cb:7c:e4:2c:7c:77:4e:6e:67:35:10:1d:d8:d2:5e:5d:33:
ab:04:56:19:db:98:b6:36:44:6b:af:e0:f7:1f:6d:d6:13:62:
de:45:71:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:33 2026 by rpki-client