Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: +4QKX9CB7iDRqt+XCT4trTJsIAKutgKo9k7Hu2UhDb0=
Subject key identifier: 28:9B:7B:EA:6E:B7:69:F2:46:F7:9F:15:8D:77:1C:DC:43:D7:D3:F3
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 01A1DD5E026FE3247ABA4A5F60E8D088CF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 0644
Signing time: Sun 15 Nov 2026 04:01:28 +0000
Manifest this update: Sun 15 Nov 2026 04:01:28 +0000
Manifest next update: Mon 16 Nov 2026 04:01:28 +0000
Files and hashes: 1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: 9z21h/uR7PdS6/RsqYvnhRhs2Chec/fbT8GFDDQlNCk=)
2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:02:6f:e3:24:7a:ba:4a:5f:60:e8:d0:88:cf:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Nov 15 04:01:28 2026 GMT
Not After : Nov 16 04:01:28 2026 GMT
Subject: CN=289b7bea6eb769f246f79f158d771cdc43d7d3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:e5:95:61:08:c9:87:7e:82:e4:f9:1e:67:
75:3b:43:e3:9e:34:6e:81:5e:98:b7:31:0f:d5:38:
35:9c:62:e3:2f:24:6d:e8:5e:59:bf:9f:58:d7:7e:
8f:38:83:06:a1:0a:cd:dd:3c:bd:ea:c2:b3:06:5b:
c8:1b:a0:b6:49:04:49:ba:e7:56:53:21:52:4e:b0:
6c:b4:28:46:72:e6:79:df:97:9b:cf:86:fa:e4:ea:
76:04:64:32:68:d1:f2:28:67:af:10:d6:e3:1e:18:
30:af:cd:4a:3c:39:a2:c9:6d:8c:e8:7a:01:51:08:
a6:20:c7:f8:81:b8:b3:74:17:a9:ac:fb:6c:ea:7a:
4a:63:aa:00:04:4b:30:25:dd:e4:5a:a4:66:b3:da:
05:19:e2:e7:fe:67:9f:e3:69:b8:41:dc:b4:1d:aa:
47:37:10:95:e7:c7:46:8e:58:b4:35:3e:0a:b3:0c:
48:07:9d:5a:2d:bb:a8:f1:ea:a7:49:72:89:32:a4:
e0:d0:30:07:cc:33:9b:11:1c:04:1a:53:2a:3e:fb:
7f:2c:80:c3:d8:b0:fa:ea:1b:b6:d7:5a:0a:b7:f7:
49:d8:92:aa:41:fa:f0:d9:0e:6b:7c:a2:d9:7e:b6:
18:a5:8a:88:d3:8d:92:c9:7d:51:a4:6d:17:13:6a:
48:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9B:7B:EA:6E:B7:69:F2:46:F7:9F:15:8D:77:1C:DC:43:D7:D3:F3
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cd:72:5b:d3:ba:e6:9e:51:ff:20:0b:eb:e8:1b:2d:64:31:
cd:4d:af:80:e9:84:e4:fe:76:40:aa:bd:0b:97:1d:98:59:8b:
6f:3d:72:c9:d4:1c:f0:74:ef:6b:f9:6d:0f:c5:9e:55:bb:90:
d5:a5:e3:5d:11:31:a3:fe:ff:a4:46:2e:6b:a7:72:40:04:d7:
35:4a:50:a6:78:8e:a5:4b:31:b3:26:41:5c:88:f0:db:35:cd:
1e:63:9b:e8:27:4b:c1:54:5b:91:79:89:83:0a:92:37:f9:a2:
f2:c5:08:f9:57:cb:4b:a1:90:01:de:16:e2:69:93:d5:0a:8e:
50:f3:57:a2:ec:da:c7:d9:f7:3f:e7:31:8f:a8:ae:e9:0d:83:
a8:41:e5:c5:7d:1e:b9:dc:fc:64:a1:8b:6b:26:0d:c0:17:6d:
4c:be:63:b6:4d:82:74:3e:5f:bd:11:20:43:f6:d7:3e:92:c8:
3e:75:e8:b0:77:ed:ac:cd:a8:46:14:df:2b:9e:7e:b6:45:35:
d6:24:0f:cb:c7:8d:dd:43:64:32:6c:c1:e0:16:d2:1e:01:65:
e7:74:90:58:d5:15:44:7e:ec:58:8b:0c:da:91:a1:e8:f7:70:
a4:f6:cb:4c:7d:11:8f:30:d6:f5:06:8e:64:e8:55:8c:a1:53:
98:84:ad:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:09:21 2026 by rpki-client