Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
File: DfDWLe46FKBuUrfveggwM42dd1E.mft (raw, json)
Hash identifier: TJPzOXo98mZdRGeT1CaBksN2zRJWFl93xHndMR0k8CE=
Subject key identifier: 92:B8:BA:70:BD:33:13:6A:82:47:6E:5C:B2:42:D5:26:73:B7:59:7E
Authority key identifier: 0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
Certificate issuer: /CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Certificate serial: 019CBC5EC62A0727322D064FD4AAE96ED52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
Manifest number: 87
Signing time: Thu 05 Mar 2026 05:00:53 +0000
Manifest this update: Thu 05 Mar 2026 05:00:53 +0000
Manifest next update: Fri 06 Mar 2026 05:00:53 +0000
Files and hashes: 1: DfDWLe46FKBuUrfveggwM42dd1E.crl (hash: mR+B2XiOS4CCr0Hfvqu1EFftcvIAuLsAgvJpMuTjtjU=)
2: ukKanfspjPtogwslBOvKVuFlnzU.roa (hash: VJCtLd80BTyZ1jJxvamfRrMpjXu4ufEwo/wpl1CsYuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bc:5e:c6:2a:07:27:32:2d:06:4f:d4:aa:e9:6e:d5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Validity
Not Before: Mar 5 05:00:53 2026 GMT
Not After : Mar 6 05:00:53 2026 GMT
Subject: CN=92b8ba70bd33136a82476e5cb242d52673b7597e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:79:f5:0c:5d:6c:bc:ce:63:20:30:09:8b:
70:c0:ed:dd:f6:b3:d3:63:12:a0:7b:c5:54:13:e3:
de:29:26:96:de:8a:c8:35:93:27:fb:99:bd:ef:35:
82:f4:b5:eb:70:01:59:cb:02:66:10:d2:a3:9b:2a:
47:38:91:48:ae:63:29:43:5f:09:25:c6:a2:2b:68:
07:d3:2c:87:ac:a0:84:50:ea:76:a7:d7:5a:48:3c:
91:fe:13:52:2e:43:a3:66:b2:a1:d9:7c:e6:ed:ef:
bf:56:5a:d3:5e:29:41:8d:ac:81:7d:57:d7:39:e1:
33:36:7e:f3:8d:d5:d6:6d:cd:76:4a:72:a6:c8:4c:
f2:f8:36:e1:f2:fd:c5:7a:77:4e:80:c5:2d:ec:02:
c4:b9:94:b5:99:4b:d4:a9:a0:be:d4:30:7f:3a:c2:
6e:8a:75:c5:38:6c:3f:bd:f5:e0:a9:c4:52:6b:da:
58:96:cd:27:a9:8a:55:83:f0:2d:e5:0f:9b:dd:b6:
51:b8:39:f3:1f:1a:3e:50:ee:b8:6f:58:f9:c1:7a:
35:84:c1:25:78:4d:1e:67:2c:43:b7:d4:89:35:3d:
a5:86:1e:60:7e:ac:8b:82:84:80:b5:25:88:ca:92:
d2:d0:ce:a9:5b:e1:99:58:b9:ce:c7:ce:ff:ae:1a:
b8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B8:BA:70:BD:33:13:6A:82:47:6E:5C:B2:42:D5:26:73:B7:59:7E
X509v3 Authority Key Identifier:
keyid:0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a2:8e:2c:f0:af:04:ab:c3:40:e5:9c:3b:78:a0:29:f0:d5:
4d:b3:05:5c:74:b7:c6:fd:ec:4b:6e:d5:e8:f4:04:98:5f:22:
b7:5b:93:6b:29:9e:48:1b:c0:95:ce:b6:21:4c:28:f4:79:e8:
ba:1b:46:d6:08:7f:7f:6d:c5:e7:f0:e4:73:51:d3:9b:79:f8:
e4:01:a6:5d:09:45:a6:51:32:d8:24:d4:19:01:39:31:a4:51:
ee:ae:8c:2d:05:c6:05:08:52:8c:1e:c0:91:be:83:a6:60:f7:
2d:6c:77:7a:be:17:a8:b4:a3:3f:d2:9d:8f:f1:f3:56:85:1a:
f3:91:1a:2a:4a:17:64:16:7c:3f:e3:d2:48:d9:0b:2c:57:bd:
00:36:0a:e1:7d:09:9b:74:4b:9c:64:88:4b:7a:2a:87:10:80:
da:f4:73:5d:d5:15:ca:12:41:d8:d8:d5:0d:d4:58:a2:cd:8e:
d4:05:6e:b0:9b:a5:be:a9:84:ad:2f:8a:0f:b4:f0:32:9b:2a:
01:24:7e:80:e0:95:41:0b:33:66:c2:5c:86:c1:5e:7a:09:e5:
13:e5:0b:da:46:0e:de:15:4c:d4:4a:c2:93:36:9f:fd:64:d0:
c9:53:3b:92:f8:a4:86:b6:94:c6:02:af:81:2b:bf:ec:2b:f9:
fa:ac:4d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 09:34:46 2026 by rpki-client