Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
File: DL6R62OkTx6fGoPt0hih7HXCXpE.mft (raw, json)
Hash identifier: xyzzEc+le2n1R0xmnQL4hkz2qb9F5gT0zi4w9S8dE18=
Subject key identifier: 95:B7:FF:0A:D9:65:A4:8C:70:57:3D:D3:4B:52:02:2B:7D:26:2F:BC
Authority key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Certificate issuer: /CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Certificate serial: 01A0DCF2D80FCF8DB5609C55F19887A82177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
Manifest number: 0C37
Signing time: Sat 26 Sep 2026 09:01:37 +0000
Manifest this update: Sat 26 Sep 2026 09:01:37 +0000
Manifest next update: Sun 27 Sep 2026 09:01:37 +0000
Files and hashes: 1: DL6R62OkTx6fGoPt0hih7HXCXpE.crl (hash: 6z1AvJmPhuNS/zg2vS0/wY+7OP+M7NPha1oMSPp6kDA=)
2: ieARORdYcNY2xAIgZ2Lm5zVhBPY.roa (hash: uxcRpYQC7niWzfv+xu565cyLA8mc5ppHnKOLcM7yCCA=)
3: ma-gGSb8UcMB3jnOgxKk3Xmx_xE.roa (hash: 1fKPmYHOhzjogZRbRHvqvpPsJkR5Sk/rMa970YUSBeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:d8:0f:cf:8d:b5:60:9c:55:f1:98:87:a8:21:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Validity
Not Before: Sep 26 09:01:37 2026 GMT
Not After : Sep 27 09:01:37 2026 GMT
Subject: CN=95b7ff0ad965a48c70573dd34b52022b7d262fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:64:3c:19:ac:7b:5c:b0:58:74:6d:ef:59:
89:b5:49:ff:c8:f9:c0:ea:f7:53:1b:6b:d3:17:ec:
3c:48:67:65:e5:5b:16:73:29:2c:f7:70:1c:ba:7c:
da:3c:7b:42:02:47:4f:5f:57:44:00:71:c1:96:e9:
17:fd:d1:61:0f:4f:64:f2:bd:0a:ac:8b:2d:24:a9:
66:69:b7:fd:3b:e6:fc:ab:75:3d:b4:79:35:26:e3:
59:f7:ec:db:1f:ef:9a:d0:67:20:3f:dc:fe:84:72:
4e:fd:dc:a7:9e:ca:03:6e:7b:3d:9c:b3:7b:be:6f:
9c:fc:95:57:f6:0f:2d:83:63:6d:8b:92:65:84:db:
bb:01:81:92:b6:c8:de:db:12:32:13:ac:ce:15:22:
11:07:dc:4f:ff:22:9d:a7:30:52:f0:36:05:55:28:
77:da:9d:4e:71:e4:af:f8:74:a4:e6:c4:6c:02:f9:
36:50:4b:7d:e8:a7:3f:b3:5c:85:f8:47:54:7a:ad:
9c:d8:b4:83:df:fc:b8:3b:58:80:88:2d:56:8e:d2:
52:d6:2f:f5:bf:48:49:79:20:6c:f2:cc:8a:70:a0:
ae:2e:94:5d:fe:06:ed:1b:b3:ca:7d:ef:89:25:30:
b2:18:7d:d1:04:33:35:77:73:f6:6f:dc:2a:25:b4:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B7:FF:0A:D9:65:A4:8C:70:57:3D:D3:4B:52:02:2B:7D:26:2F:BC
X509v3 Authority Key Identifier:
keyid:0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2c:35:05:87:06:36:ee:7d:da:02:95:1e:32:8f:a6:d8:dd:
6d:3f:de:42:6c:68:dd:86:1a:c2:8a:cc:67:15:9f:84:90:cf:
bf:32:d1:8d:fa:58:32:e3:cb:ca:98:1a:97:3e:7d:5f:7c:69:
28:2d:5c:f3:ff:24:6f:98:18:eb:34:a0:82:f4:37:f2:20:67:
62:11:68:c7:df:08:75:28:fd:c1:73:8f:53:17:ba:25:27:29:
e4:e2:86:4b:f6:23:c2:a8:2d:60:bd:a5:05:7c:1d:e8:84:b3:
0c:b8:2a:df:17:c5:88:2c:78:77:11:e9:a8:6a:85:6b:7f:66:
bf:a3:6b:06:09:d2:5a:a8:84:57:36:ee:7d:ad:77:ca:a0:06:
60:4f:d2:2b:f9:6d:69:b1:a2:ee:0c:e6:b5:fe:09:ca:b5:65:
d5:68:b7:95:70:98:00:47:7c:58:f2:9c:b0:71:ec:4d:da:40:
c2:a6:21:24:b7:19:07:d1:f8:a6:1d:14:48:c6:da:b2:80:9e:
1c:d4:e5:5c:e2:eb:21:62:f7:36:34:db:69:14:cf:90:c0:28:
ea:2c:5b:65:8f:6a:9f:ca:ba:73:d7:58:2d:33:48:16:ba:a1:
b5:64:14:f0:7f:fb:03:02:f7:1a:26:4b:dc:48:e9:4b:ba:5d:
bf:d1:cf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:06:36 2026 by rpki-client