Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: Y1p7rx/NDTqQK6fNsjOXJ+Er34//4a4urRL+PpSrUpQ=
Subject key identifier: 7A:FD:57:8E:99:7B:40:5E:DE:3F:DA:63:9F:1A:78:A3:F6:0B:54:18
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 01A0D2DEF031F82220969C8C4A60C68F2523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 05BA
Signing time: Thu 24 Sep 2026 10:03:40 +0000
Manifest this update: Thu 24 Sep 2026 10:03:40 +0000
Manifest next update: Fri 25 Sep 2026 10:03:40 +0000
Files and hashes: 1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: iZ7ge2FcHl0xHaQfBqOn+n+MWxa9XXK8eyRAMXadlPo=)
2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:f0:31:f8:22:20:96:9c:8c:4a:60:c6:8f:25:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Sep 24 10:03:40 2026 GMT
Not After : Sep 25 10:03:40 2026 GMT
Subject: CN=7afd578e997b405ede3fda639f1a78a3f60b5418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:be:e7:28:07:fd:40:da:80:e0:f5:86:7d:
8a:2b:09:15:0b:0d:32:3a:59:fe:b2:ca:64:52:2d:
b1:0a:21:88:1d:e7:35:e0:35:8d:58:c1:b1:7b:40:
8c:0d:02:6c:69:42:2d:e5:ca:2f:4c:94:93:d1:07:
d9:28:7b:36:bd:da:f2:c1:ff:85:0f:e8:ca:23:31:
08:0c:10:69:a5:b6:2f:b5:0d:aa:d5:f9:95:b4:54:
72:d6:80:dc:be:0c:83:63:44:b3:c3:49:f5:0d:e6:
47:2c:a8:57:94:be:45:99:67:63:9a:5b:b0:90:37:
f8:8f:c2:01:0a:ad:52:41:49:a2:17:82:f6:f2:c8:
d6:75:9f:5c:68:0e:99:6f:8c:5c:ef:cf:db:02:b9:
f9:7d:0f:8e:65:28:e3:26:7f:3d:d6:cc:6b:c8:dd:
5d:31:2e:7c:8d:e1:0a:ec:92:14:79:38:b5:14:39:
04:98:70:eb:d7:7c:0a:53:8e:9e:a9:d1:1e:67:bc:
84:21:d7:dc:28:10:95:8e:ce:ef:cc:3f:72:24:17:
9a:53:88:ee:6e:07:f6:29:b4:e8:d8:ac:62:b0:c1:
b0:e4:59:fb:07:79:88:2c:0e:4c:94:a6:72:b8:8f:
69:10:d2:af:c3:29:25:b8:1e:e4:17:70:b8:72:b5:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FD:57:8E:99:7B:40:5E:DE:3F:DA:63:9F:1A:78:A3:F6:0B:54:18
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d2:a5:08:e8:1b:f2:23:a7:15:f1:f4:cf:79:0c:cb:2a:82:
62:e8:7b:50:8c:5d:4c:11:6f:7c:cd:1b:05:f9:b2:5e:5b:74:
59:11:72:64:3a:09:b7:de:3e:b8:32:58:8e:01:a2:47:f2:da:
84:51:19:ab:34:c8:2f:3c:6a:fe:89:42:68:13:c5:ef:a3:e3:
77:5a:42:40:cd:af:7a:5f:39:fb:19:c4:88:28:09:95:da:1c:
ec:46:c9:77:10:5b:61:26:16:47:2c:e5:0a:d7:e1:bd:41:c8:
16:ec:df:aa:f2:d2:00:ec:e9:35:2f:b5:fd:a9:7e:67:e4:50:
51:08:4d:aa:2b:92:54:97:ac:43:ee:eb:62:a9:1d:1c:54:83:
6c:04:7c:37:8d:97:07:d9:be:fe:6a:0b:d6:b1:1d:dc:5c:78:
af:ec:82:4a:20:50:00:0f:66:84:d2:96:7d:f5:2d:8b:a7:af:
fe:83:d5:67:60:7e:98:27:f7:9e:e4:b6:bd:8b:86:12:52:e9:
73:a9:b2:4e:87:b5:e1:ec:f7:2c:5c:50:0c:fd:a6:6e:13:b0:
c4:34:2f:c2:41:5f:b5:82:72:3f:42:78:cb:7e:f6:a9:64:ab:
18:ad:f5:24:c7:04:64:8a:f5:3a:f5:b5:7a:0e:35:d5:bc:9d:
5f:e7:a5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:50:41 2026 by rpki-client