
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier: QIfb1IYl0+8DYnzjB8ofFIKGVRkgXaldhpgkIr2JG98=
Subject key identifier: CE:9F:70:E9:A6:0F:65:F4:44:8B:1D:04:7F:35:71:12:5C:5F:B0:C4
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 01A0CD481D881D08617BFE211DF28155FC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number: 0DF7
Signing time: Wed 23 Sep 2026 08:00:50 +0000
Manifest this update: Wed 23 Sep 2026 08:00:50 +0000
Manifest next update: Thu 24 Sep 2026 08:00:50 +0000
Files and hashes: 1: 0Zv7gbcee3oYhoixuKSpzeAn6hc.roa (hash: g3K2VjxQqR918zAxnhQ8qYXe0zM7/nlsaCescrnOAFg=)
2: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: ZCGx++taEZSsi9KuCmMlCUcjgijM4g5pHJLstcwLQT4=)
3: MtiFhvTFU6eR6K3JPWffFMPpWmA.roa (hash: DwTW8G9tlrgSrBgtQLqohKIvgiVA/TbEnEkmiFwX6uc=)
4: R9CKdSuhKcix03lDYUZNj_9bSZw.roa (hash: 25D9RZgSbgAoxxPe4MQJY7sqqlRu8rIg+8wl9bKE/EI=)
5: aCdtB2nYu55hGLQQzrV3-u62JS4.roa (hash: 0jBdXE3UE70+A74fzbLHoyPujmWBV5PBwxsIako4QUY=)
6: fcJRAvhE3GJ9JzGChcUs2vcrezw.roa (hash: IUgxFKpPcgKwv0m19KbyxHATCx8pJEqt3FiR48y3FC8=)
7: wYnksyA9j8IE38MK44WdI8QthwY.roa (hash: kUGjESP6hpImIv040oxFMoVXOTG5+DBRjTAXej9uu34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:1d:88:1d:08:61:7b:fe:21:1d:f2:81:55:fc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Sep 23 08:00:50 2026 GMT
Not After : Sep 24 08:00:50 2026 GMT
Subject: CN=ce9f70e9a60f65f4448b1d047f3571125c5fb0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:03:ae:dc:4f:55:3e:bf:1f:df:a5:37:13:
b6:f3:68:82:15:f0:95:3a:75:c9:ee:c7:39:b2:ce:
91:1a:1f:96:5c:64:55:2e:6a:9c:6b:16:42:d5:27:
29:41:1d:af:b7:e3:9c:31:09:fd:7a:04:1d:f9:e2:
fc:58:a6:34:bc:ba:56:c3:f2:0b:75:1a:ac:68:11:
9f:15:a9:ac:f8:29:9a:01:1a:c5:1e:4b:e8:69:80:
ab:1c:4e:f4:1b:e7:0a:30:00:f5:19:0d:7c:93:3e:
28:ea:e9:10:bf:b8:f0:1c:cc:4b:c3:94:ea:14:02:
44:84:73:63:64:05:82:f3:1f:79:b7:c0:6e:bc:64:
fb:1d:f6:21:63:5f:84:67:5d:b5:8d:7f:1e:e4:7c:
ce:cc:90:52:b6:59:ff:30:73:40:50:41:bc:b6:75:
5c:3a:5e:1b:ab:87:8b:c3:c9:05:75:99:60:23:5a:
73:38:a3:38:a2:d5:dd:f9:b4:8c:1f:ba:ec:2e:f5:
ae:21:e1:a5:6a:2e:f2:5b:a8:26:6e:03:b6:51:2a:
aa:55:7b:87:07:42:c8:f7:db:2d:38:97:6b:43:ae:
28:39:a4:90:6b:0c:e0:d3:ed:0c:ca:8b:31:f2:4f:
86:a0:61:74:04:4e:92:75:40:8d:46:c9:43:b6:95:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9F:70:E9:A6:0F:65:F4:44:8B:1D:04:7F:35:71:12:5C:5F:B0:C4
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ec:f1:8b:4c:2c:85:e2:68:3e:f0:41:78:5f:59:42:ae:09:
29:d7:a7:08:ea:7e:e0:8d:67:c7:4e:09:92:0e:50:8f:eb:be:
63:75:a8:36:39:a0:96:a8:85:29:8f:97:4c:3c:d0:5d:3a:37:
38:60:9b:2b:8a:eb:0c:1e:63:8d:04:5f:09:a6:a6:d5:1d:10:
b2:aa:cc:61:92:85:88:46:a6:cd:32:e8:6c:50:36:4c:86:b2:
74:6f:81:ed:d5:93:66:25:09:7b:88:1c:4a:0d:35:6c:88:64:
02:64:93:5d:60:ba:df:ee:0f:b8:98:ea:26:31:48:5d:bd:da:
57:2a:c5:8d:ab:10:c7:b4:62:dc:11:59:20:42:d9:0b:4a:3c:
23:b9:c1:45:08:e1:27:31:ca:46:65:5b:a4:ad:1a:11:e0:bf:
62:62:82:e7:b6:24:21:08:b7:25:ef:f0:b5:5c:70:b9:54:71:
cb:97:45:20:78:67:17:64:be:25:2b:19:83:2c:a2:e9:9f:89:
e2:9d:72:03:15:87:e5:0d:97:3b:e7:70:20:d6:85:5d:8c:4a:
2f:c4:7b:3e:6d:7e:13:e4:27:ab:5e:6e:8d:11:8c:fc:fe:69:
7b:68:ba:ea:0e:f2:64:4a:02:cc:8c:dc:f4:63:b6:aa:d9:20:
9c:53:dc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:49:28 2026 by rpki-client