Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
File: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json)
Hash identifier: 50Un7KtSZOwKrjiMmV5uvxvCPFfp46NJQ4el1eN2sfc=
Subject key identifier: BF:41:69:8F:55:E7:15:3F:73:F4:98:74:F1:F1:66:D5:F4:07:C1:0E
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Certificate issuer: /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial: 01A12FC64E3128275BD010DC2A265EB6BB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
Manifest number: 0EDC
Signing time: Mon 12 Oct 2026 11:01:27 +0000
Manifest this update: Mon 12 Oct 2026 11:01:27 +0000
Manifest next update: Tue 13 Oct 2026 11:01:27 +0000
Files and hashes: 1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: gUqW7P4Nx+9kU/3nnU+EV/HpvTUQjHPqgUlT3c/q63o=)
2: DxAIf_G4bsCHSuF3mUqxe5pwn4w.roa (hash: QSb3YvRlfaog1Dj3+gzS3BBfYETY8z0tkMgWbxsJbyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c6:4e:31:28:27:5b:d0:10:dc:2a:26:5e:b6:bb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Validity
Not Before: Oct 12 11:01:27 2026 GMT
Not After : Oct 13 11:01:27 2026 GMT
Subject: CN=bf41698f55e7153f73f49874f1f166d5f407c10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dc:45:cc:92:2f:66:45:b1:0a:3e:0d:25:94:
e7:c3:36:5f:48:6f:48:0a:d2:83:91:34:f9:80:9b:
9c:80:e1:eb:a6:41:d1:11:bb:3e:7b:1d:da:f2:6d:
a8:82:77:85:ea:a9:02:55:9f:2c:6a:20:74:98:bb:
46:42:ca:db:f3:89:dd:59:71:a5:ba:1c:81:09:cf:
79:a1:9d:7f:d7:3c:ec:73:6d:d7:26:43:24:03:ed:
b7:5b:d3:96:6d:76:ab:bc:52:08:4b:2f:26:ce:23:
18:cb:a9:93:23:4a:c5:fb:53:0a:04:54:67:a3:51:
ee:cf:23:f8:b2:c5:c3:82:20:0a:60:ca:37:14:54:
8e:7b:85:f3:c8:3b:5c:fb:c0:d1:e1:36:25:b6:47:
b2:be:f8:32:7c:8a:f0:d4:91:db:10:69:e1:91:84:
e4:1b:e4:fa:b9:89:50:c9:9e:e5:99:a2:1f:f4:1c:
19:f5:8e:d6:37:e7:8b:10:54:b7:72:c8:aa:a7:14:
78:69:a1:f0:54:5c:78:d6:e3:a7:44:d3:6e:99:19:
17:45:2b:41:d1:53:c6:d0:14:3d:50:e3:7a:4f:6f:
ad:d1:91:63:94:b3:32:2d:09:a9:21:ae:42:0c:15:
37:46:60:11:d0:c2:2a:0f:f3:92:eb:3e:31:93:c6:
4b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:41:69:8F:55:E7:15:3F:73:F4:98:74:F1:F1:66:D5:F4:07:C1:0E
X509v3 Authority Key Identifier:
keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:28:a7:93:47:c2:c4:0e:75:91:c0:bd:d3:8c:ed:d2:70:b9:
52:7b:99:8e:52:df:c7:3d:c3:6e:6f:ca:78:aa:a3:c1:3b:0f:
02:1a:62:2d:c4:5b:76:34:27:1b:58:69:ba:09:0d:08:af:f8:
fc:f3:99:6a:0f:0c:26:dd:61:9b:f7:9a:82:bb:ea:9b:4e:69:
ac:5d:64:82:71:7d:f1:ea:0c:fd:21:e7:60:a3:36:59:9d:a8:
a3:f0:1c:ef:da:23:bc:24:6f:31:96:5b:d1:3d:e8:5f:47:d8:
67:ea:91:58:93:60:1b:f6:fe:1e:57:aa:23:6b:7c:f0:0a:f8:
2c:1c:a0:25:19:90:53:93:0d:0a:00:39:ad:01:20:fb:a6:8b:
af:91:cb:8c:68:a1:b5:05:47:09:84:17:da:08:99:96:5b:81:
1d:96:a1:cb:c2:79:fb:55:d5:79:49:bc:91:87:2f:58:d9:f8:
83:29:6e:4e:72:f1:74:48:67:b9:1a:47:85:64:bc:24:0a:d5:
f4:50:be:d4:18:8e:68:5b:74:3d:fc:0c:0c:48:a5:89:52:f8:
65:c5:dd:87:71:2e:28:b7:3a:75:24:67:cc:af:85:39:a0:a7:
f1:c9:8b:a4:40:b5:b6:51:19:a1:53:f7:3d:5b:f0:70:f6:fd:
37:3c:aa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:37:51 2026 by rpki-client