
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: DPI24syMlQMcY7VAZbZyZTEIhQ3tC3W5lCX6p0+U4E4=
Subject key identifier: 49:D5:9E:5B:7B:32:C3:75:C1:AA:1F:D2:45:1D:93:BB:21:0D:F4:FF
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 019E1D91119321726B595E74F4F974DA1556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 0453
Signing time: Tue 12 May 2026 19:01:46 +0000
Manifest this update: Tue 12 May 2026 19:01:46 +0000
Manifest next update: Wed 13 May 2026 19:01:46 +0000
Files and hashes: 1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: o5Omm7rTTQkDzkbadrGx90fHFV2i3il1QiyFP/W5nOA=)
2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:11:93:21:72:6b:59:5e:74:f4:f9:74:da:15:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: May 12 19:01:46 2026 GMT
Not After : May 13 19:01:46 2026 GMT
Subject: CN=49d59e5b7b32c375c1aa1fd2451d93bb210df4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:d5:96:f9:a6:2e:05:e6:65:e6:27:ab:73:
98:43:be:98:d6:38:19:47:9b:39:5c:0e:b5:6d:74:
ac:20:bd:b8:39:17:08:56:6e:17:bf:58:e5:45:c5:
cf:45:2e:0c:36:d1:6e:6e:e0:34:14:80:e5:ec:99:
54:4c:7d:22:0f:eb:ba:91:ec:7f:3b:a4:fa:03:ac:
b3:3b:7f:1f:0e:c3:72:9c:8c:20:c2:b0:09:28:da:
48:b9:ca:79:31:7e:b6:b4:3f:a7:e6:2b:42:5a:08:
eb:7f:e8:22:d7:5c:ae:9b:37:68:7a:e6:ba:18:21:
bd:7e:29:d9:1f:b8:ee:0b:28:61:57:69:d4:b2:5b:
0f:19:fd:74:8d:eb:9a:aa:08:f5:a0:aa:ff:85:2f:
1d:eb:53:05:43:00:6e:d4:61:78:c3:58:6f:9e:64:
15:fa:45:be:dd:25:7a:9c:a4:04:70:39:a9:a7:1d:
6b:f6:43:92:b9:62:10:ec:60:ba:e7:9c:45:a4:37:
b6:70:11:cf:5d:9f:d2:1f:66:23:60:80:91:39:38:
1c:b4:b4:0a:ed:80:a7:7e:7e:37:38:c4:b2:fe:6e:
7b:d2:90:9a:42:30:9c:64:df:59:8b:26:6d:af:d8:
69:35:0d:84:48:06:88:37:d2:46:b1:df:8b:e2:31:
f6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D5:9E:5B:7B:32:C3:75:C1:AA:1F:D2:45:1D:93:BB:21:0D:F4:FF
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b0:3e:12:ab:aa:fc:e6:5b:dd:cc:4b:6e:69:7e:64:71:c0:
20:79:03:9f:ab:12:aa:57:04:80:66:9b:10:d7:36:06:77:6f:
83:02:42:64:6d:73:96:d0:1a:a4:15:dc:8f:3d:63:90:b0:b9:
05:ef:b4:ef:c2:7e:b0:ff:61:6e:45:36:d1:d6:bb:c8:6c:e5:
44:4c:65:f6:fd:7d:53:d3:c9:32:23:86:20:ad:fe:85:e5:3e:
70:eb:ee:e6:65:1f:61:42:97:1a:33:c0:e7:4d:d1:33:84:4c:
f7:b7:63:03:d3:6a:e8:ea:bd:e0:6c:cc:a5:cc:e8:02:7e:82:
83:d9:d0:54:b7:7c:b3:20:ab:13:21:5f:a2:9f:86:12:a0:05:
0e:5b:84:32:00:26:7d:97:15:5e:ba:c4:ec:97:a8:81:08:08:
f6:f3:ee:13:2b:41:ad:77:5e:64:bb:87:b0:73:a7:36:e9:db:
a7:70:c3:76:b0:2e:42:8f:e7:f4:ab:1f:98:e1:52:52:8a:a6:
28:ff:a6:3c:a5:0a:de:6e:9b:e2:3c:26:60:73:5f:fe:5f:62:
8d:77:23:f3:97:a3:3a:46:e3:4d:68:07:bd:b0:97:f6:fc:0c:
6b:1f:f9:35:aa:65:b8:fa:f0:fd:89:58:68:71:27:59:d0:bf:
40:97:2b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:31:00 2026 by rpki-client