Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
File: DfDWLe46FKBuUrfveggwM42dd1E.mft (raw, json)
Hash identifier: tBoQhRZJZVAZ/gPNzSGJSE2mQKDodhy2QOq5YhVtSOI=
Subject key identifier: FA:F1:9D:AD:84:1D:5F:D2:0E:52:76:38:53:7F:9B:F1:92:2C:44:2A
Authority key identifier: 0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
Certificate issuer: /CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Certificate serial: 01A0EA40C00F69AD7B31588F559C20F16E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
Manifest number: 02B1
Signing time: Mon 28 Sep 2026 23:01:46 +0000
Manifest this update: Mon 28 Sep 2026 23:01:46 +0000
Manifest next update: Tue 29 Sep 2026 23:01:46 +0000
Files and hashes: 1: DfDWLe46FKBuUrfveggwM42dd1E.crl (hash: WO+Xg3gWDhWHIP5FGjXfDHdtjFrszc6tn8C/+/MIUQk=)
2: ukKanfspjPtogwslBOvKVuFlnzU.roa (hash: VJCtLd80BTyZ1jJxvamfRrMpjXu4ufEwo/wpl1CsYuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:c0:0f:69:ad:7b:31:58:8f:55:9c:20:f1:6e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df0d62dee3a14a06e52b7ef7a0830338d9d7751
Validity
Not Before: Sep 28 23:01:46 2026 GMT
Not After : Sep 29 23:01:46 2026 GMT
Subject: CN=faf19dad841d5fd20e527638537f9bf1922c442a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c6:54:fe:a6:c3:0a:26:df:f0:ad:de:14:5f:
d6:50:a6:f2:29:5e:5c:35:96:4b:ab:ae:db:ba:25:
e5:c2:6a:10:2d:c0:3d:6e:c7:9f:40:1a:21:89:bf:
25:c9:db:3d:34:71:fb:08:06:df:ef:60:e0:b8:00:
0b:6a:c7:5d:5b:bd:f5:13:da:87:39:c4:5b:aa:aa:
20:a3:cd:d1:a0:c4:07:e7:23:52:21:0b:d8:4f:2a:
d8:24:6a:14:9d:51:31:3b:18:97:d3:d5:ce:d5:2f:
b8:18:e7:ba:dc:15:25:bc:14:83:f6:9b:44:f3:37:
90:e5:02:3f:77:6c:ab:e7:fa:7b:96:dc:b9:4b:45:
a1:08:35:39:2a:ef:76:c0:d0:3a:f2:18:61:84:0a:
84:c5:99:17:68:aa:49:05:5f:dc:dc:15:8a:97:67:
85:66:37:a1:a1:c2:1b:82:6b:6f:30:71:75:ef:fb:
ef:af:39:ff:88:53:6c:59:52:c8:9b:c6:fc:42:a2:
35:88:5d:80:5d:7f:ca:37:0c:94:3c:ae:f8:a3:64:
d6:f9:5d:ed:df:66:fa:36:6f:55:5f:81:23:20:d8:
e6:c2:41:7f:6a:bc:42:3c:5c:48:f8:b6:3b:be:26:
31:a3:c3:b9:22:95:80:08:de:b2:d7:07:a2:cc:85:
87:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F1:9D:AD:84:1D:5F:D2:0E:52:76:38:53:7F:9B:F1:92:2C:44:2A
X509v3 Authority Key Identifier:
keyid:0D:F0:D6:2D:EE:3A:14:A0:6E:52:B7:EF:7A:08:30:33:8D:9D:77:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfDWLe46FKBuUrfveggwM42dd1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/10dac9-27e8-4a3b-b41c-5184cd6fc213/1/DfDWLe46FKBuUrfveggwM42dd1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c5:ac:4c:d6:c9:3c:67:94:18:6b:64:a2:98:a2:1a:9e:f3:
6e:5c:8e:0f:45:eb:30:ff:5a:68:42:5d:cf:03:fd:22:c9:6b:
20:0b:13:44:98:06:d9:4f:7f:53:0c:3d:0d:54:04:fd:81:d4:
3e:bc:30:8a:5f:a2:fe:76:81:26:4a:77:5c:06:4d:86:77:43:
9e:ce:09:56:ce:45:94:4e:4d:0a:b9:ad:41:30:30:e6:40:8a:
18:f5:10:91:e5:fb:fd:6d:83:f8:68:38:f8:8d:3c:8e:86:6c:
ac:94:e4:27:f4:f9:31:58:95:97:de:d4:1a:df:20:59:4a:dc:
c4:a3:0c:6c:c1:70:de:de:24:b7:8f:a6:6f:47:b7:ec:57:1b:
64:4b:db:ab:8d:ad:44:c6:7e:f3:8e:4a:a1:4d:8c:5e:ef:ee:
81:5b:3f:b4:55:99:ca:ba:68:97:e8:9d:14:f4:14:f0:5a:da:
ee:8e:fb:82:5a:bd:41:c9:88:4b:ef:04:be:e7:4f:e7:16:5e:
6a:1f:3f:e1:d8:9d:3d:63:cf:73:ab:b8:96:3c:3a:cb:cc:d0:
e3:18:28:2e:56:0b:7d:a0:6b:ad:b0:7f:b4:e2:ca:82:88:f1:
86:df:7b:42:e3:0f:28:a4:69:cb:cb:15:77:08:6d:89:3d:0b:
bd:9c:5d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:51:06 2026 by rpki-client