Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json)
Hash identifier: NDYNlYu6uWjS9gaZCxV94oveC6VW9z4DnTZboxNhrgw=
Subject key identifier: 61:65:BC:71:81:C5:FF:FE:16:08:66:8C:3F:E2:F0:82:4E:C5:75:67
Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865
Certificate serial: 01A0CA47652007789AA83004D79053DB3C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
Manifest number: 171F
Signing time: Tue 22 Sep 2026 18:01:11 +0000
Manifest this update: Tue 22 Sep 2026 18:01:11 +0000
Manifest next update: Wed 23 Sep 2026 18:01:11 +0000
Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: XAH7ZpmYe0N+wKU5w5ILUh60AjgUE37KN5DSjv/uQH4=)
2: 3AB4ABWLvkMBLhXbVPQ47Et_IPE.roa (hash: 7TTeY9RzcNuOB9ePCi+NTRAM5DwBMiMi62WzvEoHHl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:65:20:07:78:9a:a8:30:04:d7:90:53:db:3c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d031655023bd141731d56fb8453ff0514f728865
Validity
Not Before: Sep 22 18:01:11 2026 GMT
Not After : Sep 23 18:01:11 2026 GMT
Subject: CN=6165bc7181c5fffe1608668c3fe2f0824ec57567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4b:df:7d:ea:52:e0:7e:af:fd:d5:fb:fe:fd:
87:91:cf:7e:6b:93:3b:6f:bb:de:0e:6e:9c:b8:01:
6a:5e:0c:e5:72:33:3e:d0:ff:b2:1d:59:0a:a4:f4:
8e:64:6e:d2:a5:c5:4e:08:d0:39:d7:c8:05:31:f5:
e0:f8:3e:35:ec:38:08:a3:f2:b3:23:d1:5a:a7:b3:
1d:de:2e:2d:16:6c:6f:16:f0:8f:d7:6c:27:5e:34:
fa:7a:9d:02:c6:70:d6:4a:e0:13:d2:c2:ff:fc:77:
c6:6e:58:8a:38:04:0a:84:11:bc:75:45:96:d6:78:
43:5c:15:a6:08:9e:55:96:22:a2:2d:95:73:7c:0a:
34:e6:1a:8e:d5:f6:e2:5f:6b:f3:8c:02:09:2f:00:
1e:d0:93:23:f7:f0:a7:1c:bf:32:1d:c3:df:f7:42:
62:dd:57:54:98:eb:18:cd:a3:5a:df:06:5f:5e:5e:
66:0a:d7:d0:29:35:3f:e4:54:5b:40:92:32:a9:da:
2d:bc:1b:42:e9:82:06:17:4b:c6:87:f7:88:b5:c9:
a0:13:fb:a6:03:91:db:99:eb:6e:63:92:29:48:26:
b6:c7:8c:0f:45:d9:f8:aa:dd:e5:96:df:2c:6b:02:
1d:3e:ab:1e:01:b2:26:07:08:c0:f7:8a:3c:f7:51:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:65:BC:71:81:C5:FF:FE:16:08:66:8C:3F:E2:F0:82:4E:C5:75:67
X509v3 Authority Key Identifier:
keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a2:8f:c2:20:45:96:c4:e7:7c:7a:29:28:df:4f:29:4c:23:
91:3a:4e:4c:ed:e0:15:7c:0b:4a:a9:3b:83:91:46:65:92:f5:
70:c9:15:19:82:09:bf:b9:34:97:f3:d0:ee:ac:25:19:24:0d:
e3:5a:a9:f7:60:3d:bc:76:57:74:8e:57:33:aa:ba:41:24:31:
af:69:91:d2:f7:5c:5a:ba:a2:08:43:38:9c:7e:71:1d:e8:9f:
d8:a6:ef:4e:82:24:92:0a:49:2d:e2:ea:6f:5b:35:86:fc:b1:
91:23:be:a3:96:96:14:e4:07:9b:c8:14:f7:0b:c2:b7:ef:3a:
46:27:3b:da:dc:c6:3c:2c:9d:51:6d:2d:12:16:f5:ca:64:6b:
1a:8c:a0:4e:66:dd:61:d2:f7:67:43:6a:37:18:f7:6d:6c:32:
fa:f9:d2:80:2d:7e:2c:4e:8d:22:4e:0a:09:34:8b:82:93:1e:
3d:8a:a9:39:01:38:99:4e:b0:fd:47:3c:9b:56:8f:11:59:46:
c2:c6:32:f9:71:1a:d1:50:ad:f8:e5:eb:21:2d:ec:fe:bc:ff:
9b:16:c3:ca:59:b4:84:22:31:d3:a9:b0:af:ee:b3:ef:c8:15:
1b:4d:8e:ca:da:f4:fa:1f:10:34:b1:ea:d4:b5:00:2d:dc:08:
d6:a5:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:23:05 2026 by rpki-client