Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
File: DL6R62OkTx6fGoPt0hih7HXCXpE.mft (raw, json)
Hash identifier: QozxVt5WO+JD32JAKFOSM1njOhsv1MLAEKoGzvMjpFs=
Subject key identifier: 22:16:34:87:6A:33:E6:85:14:EE:BA:C1:A2:FF:30:9C:91:73:29:FE
Authority key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Certificate issuer: /CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Certificate serial: 019CAB34843D40DDE4A59FBAB41543531CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
Manifest number: 0A0B
Signing time: Sun 01 Mar 2026 21:01:11 +0000
Manifest this update: Sun 01 Mar 2026 21:01:11 +0000
Manifest next update: Mon 02 Mar 2026 21:01:11 +0000
Files and hashes: 1: DL6R62OkTx6fGoPt0hih7HXCXpE.crl (hash: FI85lA9lljLVGzYAGSwySzCpmy5CPimUprxvBtQwD0Q=)
2: ieARORdYcNY2xAIgZ2Lm5zVhBPY.roa (hash: uxcRpYQC7niWzfv+xu565cyLA8mc5ppHnKOLcM7yCCA=)
3: ma-gGSb8UcMB3jnOgxKk3Xmx_xE.roa (hash: 1fKPmYHOhzjogZRbRHvqvpPsJkR5Sk/rMa970YUSBeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:84:3d:40:dd:e4:a5:9f:ba:b4:15:43:53:1c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Validity
Not Before: Mar 1 21:01:11 2026 GMT
Not After : Mar 2 21:01:11 2026 GMT
Subject: CN=221634876a33e68514eebac1a2ff309c917329fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:cf:9e:cc:9c:52:ea:f1:2d:38:e4:61:67:
d7:24:7d:e1:f7:a9:5b:a5:7a:fe:d5:44:69:21:78:
0e:c2:0f:ce:55:d2:ad:67:be:6d:c8:78:d5:d7:a2:
7d:72:3d:c5:2e:71:08:43:72:6b:91:11:8a:e6:67:
22:cb:6b:95:78:89:21:88:81:a0:ea:8e:a6:5e:d2:
c8:44:7e:df:87:4e:3a:99:97:cc:71:6d:ff:18:90:
9c:ee:2d:48:c7:6d:a9:25:95:76:13:49:df:13:20:
1b:72:df:00:77:b2:b8:7d:4e:53:15:3b:4f:5f:e9:
c5:99:64:2b:eb:39:ad:a6:97:68:2e:3d:f3:43:52:
ba:8d:b0:8b:45:de:07:e6:d4:43:9f:8e:0d:51:e2:
d8:36:54:74:da:15:3f:db:d8:8d:4a:fd:ad:68:5e:
31:08:45:c2:12:a1:e3:96:8b:1d:b7:33:50:8b:9e:
1c:01:1b:07:bb:d2:50:87:42:50:6b:ae:39:c0:f3:
d9:16:50:96:08:6c:3c:8c:33:0f:d3:40:38:03:58:
d6:88:45:92:5d:17:81:af:09:ef:78:50:99:fd:f2:
4a:bd:87:19:ba:34:cf:6b:33:d0:b4:58:53:d3:b7:
a7:13:a1:5f:3c:e1:cc:7f:8a:9e:51:de:21:c3:54:
31:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:16:34:87:6A:33:E6:85:14:EE:BA:C1:A2:FF:30:9C:91:73:29:FE
X509v3 Authority Key Identifier:
keyid:0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:aa:35:01:02:07:63:e0:58:2e:0f:ed:c1:a6:04:ec:3c:af:
4e:4a:3f:04:61:f0:6d:d3:38:04:44:b8:7d:81:ea:ba:c7:e4:
3f:cf:38:40:e9:f7:e2:52:5f:e0:03:ff:08:fb:c3:c1:0a:19:
7e:25:c4:3f:2a:28:e8:81:d0:14:89:aa:b7:42:42:1f:5d:a4:
1c:93:8d:1e:7a:c7:5f:5d:2a:c2:bf:97:90:ef:59:09:0e:55:
72:eb:d4:a7:8f:40:53:06:04:79:e4:56:50:90:f6:cf:fe:ef:
16:28:df:6c:89:e7:d4:a2:47:66:d7:ed:1f:ad:78:31:49:a4:
dd:aa:15:27:1f:2c:55:32:5d:d0:e6:89:95:2b:49:f4:7b:78:
2d:9e:9c:06:4a:d9:88:42:c1:24:39:eb:ac:8e:4d:7d:14:e0:
0b:8b:67:04:e1:68:21:9b:a0:42:8e:2e:bd:4a:09:05:08:c0:
6e:ef:fa:7d:e4:bb:c2:8f:d9:10:78:3a:89:18:7f:0d:d6:07:
4e:d1:90:bb:3a:26:6a:4b:a4:79:6f:14:74:0a:75:4b:e8:cb:
1f:cf:7f:4b:04:51:28:14:7f:14:71:50:95:eb:57:ef:24:61:
64:b8:da:9f:6d:fc:23:07:af:33:70:71:98:66:9c:1c:cf:0c:
24:99:2f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:24:59 2026 by rpki-client