Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: Ss1KuemPWsA6wKGbzl5nY0Un5/U1/kb81R1U1RR20Vw=
Subject key identifier: 03:74:98:31:33:FA:9D:C4:11:12:D2:63:18:28:2C:8E:A3:25:37:21
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 019D284D826B31338F695747966E6E2331EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 03D4
Signing time: Thu 26 Mar 2026 04:01:01 +0000
Manifest this update: Thu 26 Mar 2026 04:01:01 +0000
Manifest next update: Fri 27 Mar 2026 04:01:01 +0000
Files and hashes: 1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: 0JUPoqIR0/EDVYYTKeL96/1MSvsMTX6axSOwNcvo3rk=)
2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:82:6b:31:33:8f:69:57:47:96:6e:6e:23:31:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Mar 26 04:01:01 2026 GMT
Not After : Mar 27 04:01:01 2026 GMT
Subject: CN=0374983133fa9dc41112d26318282c8ea3253721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:f5:18:2c:ff:84:a6:fb:3c:53:c4:ef:21:
c4:7b:7b:7e:b8:ed:7d:de:06:9d:76:f2:49:cc:cb:
1d:44:40:46:8a:ca:16:41:c3:4c:55:24:2f:89:fa:
9c:bb:10:a1:fd:40:53:69:1e:de:cd:53:04:00:ea:
fb:04:18:f2:28:93:e5:a7:c1:da:d8:9a:df:cf:0b:
1a:6c:a7:23:63:4e:62:ce:e7:c9:6c:49:2c:3f:63:
b1:73:d2:f2:ee:3e:38:d4:b7:35:f6:f4:b7:e5:78:
2c:ab:7b:b3:8c:e3:1a:d8:6e:7b:27:85:3d:67:38:
3e:57:17:ea:28:ef:ae:90:9f:1d:17:21:3d:84:13:
08:82:b8:c3:77:e3:81:0e:d9:40:02:69:f6:2a:79:
7f:eb:9f:6d:97:38:c3:53:97:09:9c:b3:88:94:55:
b7:b9:b5:b1:f5:d3:82:80:a0:6a:7d:8f:93:68:32:
87:73:b5:a8:f5:42:d3:28:55:c0:f0:de:87:99:d1:
dc:c6:1c:b8:67:30:5f:bd:6e:70:33:4e:31:73:92:
da:d9:32:fa:6b:e3:7e:06:e6:b3:c5:c6:c9:69:85:
26:d8:16:45:d7:1b:86:cf:21:cd:99:98:a2:a1:22:
8d:d9:0c:f2:cb:71:bc:92:85:fe:da:ae:dd:fb:9b:
af:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:74:98:31:33:FA:9D:C4:11:12:D2:63:18:28:2C:8E:A3:25:37:21
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d5:fe:46:dd:eb:db:1b:c4:39:3c:b4:1b:da:af:4a:92:e4:
05:8a:bc:a3:8e:95:c5:26:8f:3e:4e:ed:38:c3:47:80:00:67:
b1:b0:60:e3:3f:a3:3f:13:1c:0b:5e:e8:a2:f7:62:5f:d3:bc:
aa:f9:8b:e1:c2:5b:ae:4f:39:3d:05:e7:d9:6b:51:9a:f3:e6:
76:c6:7e:b4:1d:df:e2:89:b7:43:15:b9:02:1d:bf:d8:10:a6:
2e:5f:ab:c6:96:8b:a1:9e:e8:48:47:80:85:8f:70:93:27:89:
46:78:1d:2d:96:26:9b:58:a1:01:75:8d:98:49:ff:61:54:71:
74:49:30:13:7d:36:1a:b7:f7:c1:5c:6a:06:89:9c:72:c3:68:
9c:fa:39:07:49:5a:d9:b9:a4:dd:ca:4c:07:d3:2d:1d:92:81:
22:f3:ff:df:1a:10:c6:27:66:3e:de:af:3b:c9:8a:5d:64:29:
40:57:0f:25:1c:aa:48:80:01:a3:0b:d0:12:06:66:b6:8a:08:
9e:2e:56:cb:cb:a0:f2:ab:ab:37:8e:07:af:9e:01:8a:ea:67:
f6:9e:5a:d3:db:ee:c0:9b:06:52:61:47:52:72:07:48:1e:eb:
90:ad:ff:17:c0:8b:cb:26:84:7b:cc:92:98:87:fa:af:96:dc:
8d:10:f3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:09 2026 by rpki-client