Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
File: DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft (raw, json)
Hash identifier: gKLkWDv00jGFx5NG8cjWLFVV/1BiEljKsKFqg+aQLdk=
Subject key identifier: BC:46:6A:21:8C:A7:C3:FA:EC:BC:50:1F:DA:F3:9E:36:2E:92:CD:53
Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
Certificate issuer: /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Certificate serial: 019D2A3C0C99F9B590C1BC94EF04620329E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
Manifest number: 0AAF
Signing time: Thu 26 Mar 2026 13:01:11 +0000
Manifest this update: Thu 26 Mar 2026 13:01:11 +0000
Manifest next update: Fri 27 Mar 2026 13:01:11 +0000
Files and hashes: 1: DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl (hash: HvSEbkVEr7/cVSHnj8y1UT8sNVKYh28CWL1BJO5tWhc=)
2: n3TEcj2cHwyJM-ltU6Fz4mQkgOk.roa (hash: qzbLDwyzPoZSNZu2f+YOUcC/z1BsSoehvOpIyMT5K6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:0c:99:f9:b5:90:c1:bc:94:ef:04:62:03:29:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Validity
Not Before: Mar 26 13:01:11 2026 GMT
Not After : Mar 27 13:01:11 2026 GMT
Subject: CN=bc466a218ca7c3faecbc501fdaf39e362e92cd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:5f:6c:d8:a1:fc:d3:ae:69:9f:ca:be:0d:
0e:8a:d1:45:b9:de:ab:8c:7e:37:46:7f:07:5e:a9:
dd:92:ab:2a:30:0b:72:4b:3a:9c:9b:21:85:15:29:
73:c8:10:2d:98:bc:da:e5:1a:0d:66:94:24:54:d6:
65:f4:ab:88:fb:4e:17:2f:3c:32:89:8a:e6:53:1d:
00:b6:3b:13:4c:4e:97:fe:cf:4b:10:33:f2:cc:57:
fa:12:e8:b4:dd:9a:4b:d6:89:93:59:09:cc:75:05:
8c:5b:aa:fb:65:0a:0d:fe:f7:57:92:04:60:80:05:
ff:f9:cd:9e:50:e3:d1:3f:2c:d6:67:ea:26:42:08:
b7:75:23:36:73:ea:5a:72:6c:1b:32:8e:02:4b:91:
a6:6d:47:2a:95:0c:a8:d8:66:d9:42:6c:b3:23:74:
75:4c:33:ef:0b:12:f2:ea:c7:d4:c0:6f:84:6e:37:
2d:92:97:3c:57:7e:5a:67:db:63:1b:bb:d0:89:9a:
14:28:d1:5d:5f:80:ae:c4:06:f4:f9:d5:d0:0b:32:
6d:c5:a0:29:45:f6:e9:fe:c5:da:b7:70:12:5a:af:
19:73:7b:ef:f0:b0:e4:40:58:a6:53:a1:da:b3:e4:
80:09:19:ca:47:91:a2:9b:bf:90:6d:83:40:3f:fd:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:46:6A:21:8C:A7:C3:FA:EC:BC:50:1F:DA:F3:9E:36:2E:92:CD:53
X509v3 Authority Key Identifier:
keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8a:ee:68:30:de:05:d5:67:5b:82:9c:6c:79:f9:ff:61:1a:
0b:34:e8:fd:8c:82:b2:2c:57:ab:0a:0f:aa:06:75:4b:5d:0e:
75:a0:06:ef:cb:a3:c4:84:8c:44:08:72:99:33:4d:fc:72:6f:
ce:df:e2:dc:af:e9:fd:09:5e:a5:05:f4:47:04:0e:5d:21:5a:
43:90:7d:d9:f3:2a:83:2a:f3:32:32:9b:d5:27:e5:d4:a0:f8:
a5:8b:47:df:f6:14:57:0b:79:f1:ae:fc:24:3c:41:dc:0d:fe:
b2:1c:11:bb:bc:ae:40:bc:ce:80:a1:c6:99:37:05:0a:5e:f2:
9c:73:1f:01:84:41:e0:a4:e3:df:5d:41:83:c2:82:e6:80:3f:
c4:6b:8f:42:db:18:08:fe:1d:78:f9:a6:4a:31:be:2f:ca:b8:
e3:81:52:0b:3c:de:21:82:c8:5a:03:94:86:c2:0a:8e:3f:06:
86:00:27:20:7b:3d:57:d0:08:01:61:5e:f5:c1:c1:04:42:a2:
75:40:dc:9f:8d:79:6a:48:d3:57:de:cf:15:63:ed:be:60:92:
d5:95:ee:5e:18:8c:68:a5:1c:ef:47:81:d8:40:90:5e:d1:dd:
a7:f8:9c:e7:02:10:97:30:ff:4d:0a:88:d4:cc:27:db:0c:0c:
73:c6:77:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:32:19 2026 by rpki-client