Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
File: DfDWLe46FKBuUrfveggwM42dd1E.mft (raw, json)
Hash identifier: f/kPuaZ5BLTIkD7rrRsSrk+e2ic0d/epaurYx/Vpv0s=
Subject key identifier: 46:C9:2D:9C:79:FC:2E:58:0C:AB:DF:2B:B0:B1:1E:5E:49:39:D2:00
Authority key identifier: 0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
Certificate issuer: /CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Certificate serial: 01A0DCBB469CD3071005B001381E3C1C6580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
Manifest number: 02AA
Signing time: Sat 26 Sep 2026 08:00:55 +0000
Manifest this update: Sat 26 Sep 2026 08:00:55 +0000
Manifest next update: Sun 27 Sep 2026 08:00:55 +0000
Files and hashes: 1: DfDWLe46FKBuUrfveggwM42dd1E.crl (hash: tG6s+uFK4WShgiVRiZYJH6YMHe6T/cjFo9E/UX5VRbA=)
2: ukKanfspjPtogwslBOvKVuFlnzU.roa (hash: VJCtLd80BTyZ1jJxvamfRrMpjXu4ufEwo/wpl1CsYuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:46:9c:d3:07:10:05:b0:01:38:1e:3c:1c:65:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Validity
Not Before: Sep 26 08:00:55 2026 GMT
Not After : Sep 27 08:00:55 2026 GMT
Subject: CN=46c92d9c79fc2e580cabdf2bb0b11e5e4939d200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:a3:49:bc:ad:4b:41:d6:e3:82:f9:b7:fe:
cf:71:dd:95:06:fc:50:49:27:73:a3:4c:13:eb:dd:
ad:66:b4:57:86:21:a1:22:73:2f:5e:9e:72:c4:91:
50:88:24:16:97:5f:c1:87:d5:cf:e9:96:bb:0d:c0:
fe:df:7b:44:62:d6:cf:b7:57:32:34:94:b4:10:1f:
71:7b:ac:ac:99:96:0b:9c:f9:8a:5d:50:9b:de:17:
06:f1:78:54:1b:44:b0:50:0b:33:ba:6f:f9:b9:8f:
0d:c3:3c:b5:db:2d:71:c9:3c:cd:bf:26:66:10:92:
43:6f:59:63:65:c2:0c:44:1c:f1:b3:79:9f:25:80:
ce:68:58:6b:ed:27:a1:42:b5:30:e3:73:79:79:bc:
49:20:e8:37:51:8a:b3:67:59:e2:07:c4:5f:ad:1b:
82:43:d1:16:9b:4d:bd:0d:fc:1f:89:cd:a8:83:f0:
c2:e6:a0:9f:0f:a9:79:5d:1a:17:25:e3:bf:5f:7b:
9f:3f:11:31:40:f4:23:e2:eb:ee:fd:f9:4d:19:cc:
a3:72:da:ab:cb:2e:d9:f8:5c:08:23:d4:bd:ca:07:
3f:18:73:db:d4:64:c1:27:b6:b7:35:d4:27:d4:dd:
ea:b2:29:34:2c:cc:0d:49:6d:56:1a:66:03:cd:a8:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C9:2D:9C:79:FC:2E:58:0C:AB:DF:2B:B0:B1:1E:5E:49:39:D2:00
X509v3 Authority Key Identifier:
keyid:0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b6:65:21:3e:89:74:b0:d1:87:66:fb:4f:bd:d2:59:2e:a3:
34:c5:3b:5a:0f:36:8d:cf:6a:2f:91:43:9f:81:9d:19:d7:d6:
2a:54:ea:78:cd:73:85:ac:c2:05:95:17:3e:6b:f6:bb:ff:0a:
f6:3d:0e:22:a1:48:d0:6e:4b:88:16:c0:c5:f3:bc:ab:c2:cc:
bb:66:92:ea:c8:b1:91:b9:20:38:00:3d:a7:f0:26:85:a7:4e:
b7:d2:fc:64:3c:91:d3:0f:db:d9:97:58:97:94:e4:a9:c5:b2:
b1:b7:32:0d:aa:89:72:bd:54:66:8d:a1:4d:59:79:02:9d:fd:
2f:3a:cc:63:7e:59:89:38:b4:5c:3a:7f:b8:11:0e:f5:fa:3e:
93:a1:f4:3a:6a:cc:57:44:d5:88:d0:0b:f4:31:39:47:da:f3:
3f:71:df:8b:c1:5a:af:ca:79:11:b1:d3:9a:88:60:99:42:bf:
f6:e0:e1:dd:35:b1:18:8a:29:4a:44:a6:88:19:b7:40:73:66:
75:04:44:7f:38:f5:a5:d5:97:c5:9d:23:2a:42:c7:3f:5f:a1:
3d:32:d0:41:67:c7:77:6e:03:ce:65:56:60:d0:57:e9:42:5a:
01:31:cf:48:73:34:78:76:4a:76:8a:c5:3d:b2:6c:81:0f:91:
c1:dc:30:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:49:39 2026 by rpki-client