Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
File: DlNS2UQbZcIBbtjrfi8jWVRDT10.mft (raw, json)
Hash identifier: HuiIr1VpJ+d8BN3IdFk0n5ruSwUm096wFpPFTJ0kUIM=
Subject key identifier: 5A:ED:BA:E4:16:C0:FB:39:0F:E6:0A:36:EA:D4:CC:FB:FD:53:47:63
Authority key identifier: 0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
Certificate issuer: /CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Certificate serial: 01A10C5E1746EDF71233D5A8D87F6E0C6C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
Manifest number: 0632
Signing time: Mon 05 Oct 2026 14:00:55 +0000
Manifest this update: Mon 05 Oct 2026 14:00:55 +0000
Manifest next update: Tue 06 Oct 2026 14:00:55 +0000
Files and hashes: 1: 7HIHyHGDiVhFywfB2aUFsNjko-M.roa (hash: Iv4sArJJwlkOrpiX31eTz3pS1dqhRbw3dXCKTSlvosg=)
2: DlNS2UQbZcIBbtjrfi8jWVRDT10.crl (hash: r3uiS3eI7xQ0NDVLnNuWq6PznmjH/2DCwRcydYvZy7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:5e:17:46:ed:f7:12:33:d5:a8:d8:7f:6e:0c:6c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Validity
Not Before: Oct 5 14:00:55 2026 GMT
Not After : Oct 6 14:00:55 2026 GMT
Subject: CN=5aedbae416c0fb390fe60a36ead4ccfbfd534763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:bb:41:34:fd:be:45:ef:23:07:03:e9:8c:
f7:e5:b1:1c:f9:3a:dd:bc:c8:cf:ab:27:f4:ae:4a:
62:05:0d:b6:64:66:16:3d:b5:87:e0:cc:60:2f:36:
84:76:1d:94:84:aa:91:6b:de:64:b8:00:9c:f7:98:
7f:9a:86:0a:27:88:a2:8e:60:22:c0:dd:61:4b:5a:
da:9a:f6:89:cd:94:a5:e4:94:e4:d7:65:d6:f5:9b:
5b:e9:45:6f:09:e1:94:ce:80:6c:92:c7:f8:db:f8:
3c:30:a1:b8:a7:4c:bd:47:54:5c:85:68:8b:20:0b:
f6:a4:55:65:25:26:bf:24:37:5a:e5:c1:ae:e7:45:
fe:48:06:99:b9:58:c6:5e:8a:db:32:be:26:c4:58:
80:91:9c:f1:57:04:7b:3e:0d:4a:28:61:75:22:81:
45:07:5a:52:bf:0f:32:76:d6:58:f8:d0:c1:cd:4c:
5b:08:9a:bb:34:39:4e:5e:63:f3:3b:93:77:66:b9:
a3:32:e0:3b:07:ad:6e:f5:4c:3a:b0:87:0e:a1:4c:
b6:cc:53:13:a4:b9:cd:2b:c3:0f:c8:e9:8d:a5:b4:
9b:06:11:75:0c:ea:3f:c7:40:2f:8a:cc:5f:e3:27:
37:24:35:39:64:16:06:d1:2c:ed:ed:3e:3e:4e:1e:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:ED:BA:E4:16:C0:FB:39:0F:E6:0A:36:EA:D4:CC:FB:FD:53:47:63
X509v3 Authority Key Identifier:
keyid:0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f7:55:95:f4:22:c1:0f:c6:09:45:09:a3:49:23:d2:46:02:
13:55:8e:19:a8:79:55:73:de:cf:18:f8:e2:4e:9c:94:25:38:
28:60:58:5e:ff:cc:a9:b9:aa:e7:ff:e9:81:1e:cc:01:9a:37:
20:c4:ad:05:ee:da:3f:3a:1c:38:88:99:3e:62:3f:03:e7:97:
c5:e2:c7:8a:bd:35:04:1b:d0:4f:a8:53:df:fe:d8:8d:6d:dd:
fd:ba:9e:72:b7:d7:4c:4b:1e:1d:f2:48:eb:6b:93:4f:b6:b0:
61:30:13:8a:4d:03:82:b6:f5:22:bf:0b:6c:4c:1e:ee:6a:f4:
e8:c7:a4:1e:c0:53:4b:ae:39:08:df:aa:31:1c:8b:4a:e2:5e:
41:19:d1:78:ee:4f:6c:3f:d7:b2:22:03:93:0a:cd:ca:ee:90:
a6:0f:8b:bd:16:f6:23:9c:22:ae:62:d9:a1:a3:1e:50:52:8d:
30:f4:c9:8f:df:e8:26:1e:a9:29:36:3e:14:2a:dd:b5:87:e3:
32:d3:c3:d9:2d:bc:74:9b:67:b7:cc:15:69:8f:43:9b:f8:5a:
71:dd:9f:72:30:98:05:87:a7:29:ce:36:34:19:0d:9a:2b:df:
9c:f0:47:14:55:32:d4:1b:02:9d:85:38:8c:47:16:46:51:49:
6c:29:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 19:00:15 2026 by rpki-client