Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
File: DflWa2LehAS4VsVgBMxJvmITVOg.mft (raw, json)
Hash identifier: ZrKTChBlvuLAkXJzgsL4V1osogpw/Uhlpq2DeAELLpU=
Subject key identifier: FC:66:A6:84:A0:21:F2:07:DA:E0:44:DE:64:52:FE:F6:5A:94:A5:66
Authority key identifier: 0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
Certificate issuer: /CN=0df9566b62de8404b856c56004cc49be621354e8
Certificate serial: 01A0FCB487CD88EEA1F76696832C16E085E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
Manifest number: 01DA
Signing time: Fri 02 Oct 2026 13:01:24 +0000
Manifest this update: Fri 02 Oct 2026 13:01:24 +0000
Manifest next update: Sat 03 Oct 2026 13:01:24 +0000
Files and hashes: 1: DflWa2LehAS4VsVgBMxJvmITVOg.crl (hash: rtimpkhXmmuzCdTwDyPO5Jr5NDiDTz5m7nFaboUIM4s=)
2: sxG-Ohcwvb8aZM2TpYd1NB5vOgY.asa (hash: vSd/IIQwZif93HYdwUlXhWDqa5hZsFOQGXaTzyxogbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:b4:87:cd:88:ee:a1:f7:66:96:83:2c:16:e0:85:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df9566b62de8404b856c56004cc49be621354e8
Validity
Not Before: Oct 2 13:01:24 2026 GMT
Not After : Oct 3 13:01:24 2026 GMT
Subject: CN=fc66a684a021f207dae044de6452fef65a94a566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:72:b9:48:61:96:06:b1:46:8e:80:1a:f9:eb:
cf:8a:9f:4b:48:cc:de:8f:60:39:f2:86:0a:69:1b:
53:ec:87:53:b8:08:fc:38:7e:c3:66:5d:8b:6b:d7:
c0:b6:ae:16:38:36:72:3e:33:69:f1:af:52:52:5d:
a6:4e:75:e5:f8:57:0b:0d:2b:9b:74:0e:38:88:58:
34:f6:23:af:f3:62:d8:f9:b6:fa:87:f8:28:bf:49:
10:25:92:95:c4:76:00:b6:a8:5a:59:1c:4a:36:62:
8e:80:d7:2c:66:f8:70:d4:f6:d0:28:c6:e8:60:c9:
c2:00:33:a2:8c:ac:b5:8b:08:f2:07:dd:0e:96:57:
61:e3:2a:ed:f9:ae:80:d6:14:b9:a6:b8:3b:55:3f:
55:32:19:5e:76:cc:4d:9f:c0:f0:ec:aa:dd:d9:f4:
bd:41:8c:de:d4:b5:f7:c2:19:59:bc:84:32:18:bf:
80:60:02:07:03:3b:8a:10:4c:eb:3d:37:2e:d8:8c:
e5:b4:f0:1b:30:04:98:62:31:52:5b:2b:f0:b0:f2:
e7:82:ab:be:b1:2f:12:14:fb:82:e8:e0:db:43:6c:
c5:53:1e:4d:32:f0:df:9c:b8:f5:e5:9a:fe:65:58:
e8:4f:bd:11:fb:a3:42:2c:fa:0b:14:db:d0:68:f5:
1c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:66:A6:84:A0:21:F2:07:DA:E0:44:DE:64:52:FE:F6:5A:94:A5:66
X509v3 Authority Key Identifier:
keyid:0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8e:12:b6:3b:33:20:e2:6d:e3:70:4e:9c:69:39:0a:3f:d4:
3b:5f:49:73:bc:ec:29:00:28:68:c8:29:b0:cf:df:2a:54:69:
64:19:63:2d:33:b4:9e:62:1c:4f:e6:8c:ec:29:ce:8c:1a:8c:
20:c6:24:a8:b7:40:b4:d6:3d:d8:86:71:53:d3:41:18:65:65:
cb:07:9c:06:54:33:a0:00:4a:c9:01:6a:15:ec:60:f5:0c:bc:
82:ce:b0:ec:1f:f5:4c:67:a4:3d:50:5a:ec:1f:09:b9:8f:ef:
be:0d:7a:fc:4a:b3:ee:58:f1:21:52:bf:c3:13:6d:75:9b:cf:
92:13:d3:87:7b:bc:4d:e4:0c:52:06:59:66:ff:2f:71:6b:c5:
cb:3e:6a:a6:89:aa:a8:57:e0:8f:02:b5:dc:07:b1:16:58:5a:
55:aa:bb:d5:d0:24:bb:6f:bd:7a:34:99:32:36:88:d3:be:3f:
50:d4:1d:33:64:87:d1:d3:22:fa:27:c9:32:49:73:06:4b:52:
1e:68:5d:65:34:c5:c5:f4:71:77:4a:41:5b:91:29:0e:1c:e1:
02:74:67:77:4a:65:af:a2:9b:54:c0:05:a1:ac:15:95:81:8e:
77:6b:e0:22:1a:56:ed:92:fb:d9:81:47:bc:e3:49:b7:0b:f1:
8e:91:79:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:25:44 2026 by rpki-client