Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: EdeMionGPBEBh9LgSo9whQPW5RahFOOXdr+ZNCz59HI=
Subject key identifier: EB:60:99:B8:8A:46:10:CE:4E:C1:DA:CD:C9:2D:42:29:4B:44:70:72
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 019F9248256ACD512DB35A4CF5ED9DD3CC56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 0514
Signing time: Fri 24 Jul 2026 04:00:29 +0000
Manifest this update: Fri 24 Jul 2026 04:00:29 +0000
Manifest next update: Sat 25 Jul 2026 04:00:29 +0000
Files and hashes: 1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: uu9NMiA5ayye9XjfysZ4IY3BT3QbWA0gZ7x1xe1jMnQ=)
2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:25:6a:cd:51:2d:b3:5a:4c:f5:ed:9d:d3:cc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Jul 24 04:00:29 2026 GMT
Not After : Jul 25 04:00:29 2026 GMT
Subject: CN=eb6099b88a4610ce4ec1dacdc92d42294b447072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:d2:3f:38:26:d7:be:7a:7c:a8:e4:06:d0:
87:3b:99:2a:ed:b7:68:65:87:85:ce:60:aa:18:a2:
95:ff:df:5e:63:73:53:df:55:27:07:c1:62:2e:0b:
3d:db:c5:bb:55:5e:21:3b:74:6a:9b:28:eb:28:8a:
be:d4:bb:ba:7a:0b:19:4f:44:18:ea:9c:6c:e9:71:
48:89:f2:25:57:91:08:4f:41:d8:46:dc:db:48:db:
1d:e1:7b:6a:9c:a2:0c:1d:08:3a:4b:05:1b:ab:7d:
65:c9:30:55:56:2e:a1:16:f1:2e:b7:26:b3:55:09:
c5:15:6d:a3:b5:04:99:51:4a:e8:ad:94:02:15:da:
74:dd:ef:a9:85:46:f9:96:69:2a:29:bb:18:5c:4f:
b3:4b:db:3e:84:c9:f9:ce:50:74:2b:e4:ed:0c:7e:
4b:09:23:e2:2f:47:66:83:7c:4e:2b:0d:7f:98:be:
b4:8c:35:8d:a5:7c:c2:ec:c0:c1:e7:d4:44:ec:32:
e5:0a:e0:2c:5a:d5:27:7a:e8:d4:de:3a:c3:1f:5f:
0d:5e:1d:52:ba:85:29:86:9e:cc:5a:25:e6:07:ca:
eb:6d:b5:4d:a0:64:7f:41:e7:fa:37:12:5c:14:df:
bd:6a:bf:40:fd:e9:1b:1a:82:41:b3:4d:b3:1a:50:
df:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:60:99:B8:8A:46:10:CE:4E:C1:DA:CD:C9:2D:42:29:4B:44:70:72
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4c:e3:e4:ab:c8:53:a2:93:eb:a4:94:e8:3c:92:9d:6a:78:
00:0d:52:f9:77:0c:ce:99:53:f2:ff:af:35:cd:8c:23:61:f1:
53:fc:b6:75:28:0e:d3:08:f1:27:54:c6:6a:e9:a2:f0:9a:dc:
7d:8c:3e:ef:7d:bd:08:5d:6f:6d:ba:e2:96:e3:6a:db:6a:ea:
39:77:bf:e5:97:74:9f:d2:36:b2:9c:bc:f3:7e:8b:b8:37:9e:
33:b1:7a:06:74:0d:02:f3:50:22:9c:ba:8b:08:6f:f6:b8:00:
32:01:d3:a6:fb:54:df:d6:4d:a7:57:5c:8c:fb:9a:a4:8c:19:
c3:e6:d6:d8:66:77:bd:22:52:e7:e5:ef:ef:b5:95:08:15:e8:
da:c6:d8:55:4d:60:50:7a:9f:32:a9:eb:f3:a6:c9:6a:64:52:
aa:61:0b:19:0b:a5:0f:95:b8:92:5e:11:22:15:e5:f8:e4:eb:
b7:0e:31:b8:44:d3:2b:9d:90:7d:00:72:23:15:86:16:ac:5d:
72:a7:79:30:4d:04:71:2e:6a:23:e6:31:96:ee:4c:d6:5d:f1:
5e:4c:07:ab:31:23:fd:76:4e:5e:60:2b:2a:00:fc:58:fb:d6:
ad:7b:3a:55:32:3d:0f:67:00:fb:fe:12:ad:80:d8:75:9b:fa:
c1:82:72:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:45:39 2026 by rpki-client