Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
File: DL6R62OkTx6fGoPt0hih7HXCXpE.mft (raw, json)
Hash identifier: /wZqPab2FCpsI37zlm7wJfavyGovWP/RgG5SjH4mpmQ=
Subject key identifier: 5A:36:F7:C0:8F:89:45:4F:81:2B:C5:F3:AD:94:C7:A6:E2:41:7F:E6
Authority key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Certificate issuer: /CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Certificate serial: 019D9AABDEEEE8674E5D798B5AE0CA1BB75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
Manifest number: 0A87
Signing time: Fri 17 Apr 2026 09:00:48 +0000
Manifest this update: Fri 17 Apr 2026 09:00:48 +0000
Manifest next update: Sat 18 Apr 2026 09:00:48 +0000
Files and hashes: 1: DL6R62OkTx6fGoPt0hih7HXCXpE.crl (hash: SRdp7999xr758Mv7HU8cjlqtp1Mg586tHn6QTKcim7o=)
2: ieARORdYcNY2xAIgZ2Lm5zVhBPY.roa (hash: uxcRpYQC7niWzfv+xu565cyLA8mc5ppHnKOLcM7yCCA=)
3: ma-gGSb8UcMB3jnOgxKk3Xmx_xE.roa (hash: 1fKPmYHOhzjogZRbRHvqvpPsJkR5Sk/rMa970YUSBeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:de:ee:e8:67:4e:5d:79:8b:5a:e0:ca:1b:b7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Validity
Not Before: Apr 17 09:00:48 2026 GMT
Not After : Apr 18 09:00:48 2026 GMT
Subject: CN=5a36f7c08f89454f812bc5f3ad94c7a6e2417fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:92:77:1b:46:be:4f:fe:8c:8c:4b:86:b6:82:
53:89:7e:e2:fe:b1:22:ed:66:9e:ff:72:50:85:26:
a7:9c:d9:1d:ce:e4:f0:a5:07:40:8f:05:41:cf:44:
d9:48:56:28:47:15:b3:ad:05:9a:b5:9a:4b:94:fe:
b1:2c:35:28:b6:8c:9c:ef:31:ec:a7:0b:57:fe:78:
0e:88:5f:2c:de:67:e1:ab:56:71:48:4a:d2:92:1d:
73:b3:14:de:23:8b:61:04:e5:68:16:8f:4d:1f:48:
02:65:b9:f1:44:ab:bb:89:5f:c0:bd:5f:d0:1b:b9:
a1:a9:31:c2:da:e8:83:3e:bb:77:7e:75:9a:11:28:
bb:0a:c7:75:8f:21:00:14:df:93:da:e1:3f:7e:d0:
d5:c3:7a:8d:c6:2d:f0:9a:6d:fe:c7:4f:41:18:e7:
f5:77:b8:46:a8:4a:0f:29:b0:02:b9:24:ec:47:9d:
12:06:68:30:fd:63:73:13:e0:02:ad:6b:d0:94:a3:
2d:a6:56:4c:3e:7b:60:95:bb:12:3e:87:b9:8a:7d:
38:b0:47:b8:db:a8:ba:79:a2:8e:35:38:50:12:66:
53:3d:a5:f8:63:d8:d7:f1:b7:d1:91:e6:6d:43:ac:
7e:48:bd:3b:60:05:55:8f:96:88:f9:c1:6d:0c:17:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:36:F7:C0:8F:89:45:4F:81:2B:C5:F3:AD:94:C7:A6:E2:41:7F:E6
X509v3 Authority Key Identifier:
keyid:0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:69:bf:c9:ff:0d:8d:36:67:1c:2d:f0:51:68:54:2f:82:72:
fc:3a:db:fa:a1:b5:a1:6e:12:30:f0:7b:05:18:4b:60:5e:67:
60:ad:76:47:62:52:fa:0f:01:be:eb:d4:d0:71:b0:43:9f:43:
8e:25:a9:c9:8b:18:2f:15:21:22:35:64:35:8e:bb:db:49:a2:
42:87:11:00:f5:4c:7b:b9:f9:85:dd:a6:69:9f:63:80:ad:dc:
05:3f:93:9b:2e:dd:21:50:23:27:15:6a:4f:a2:5b:9f:e9:ba:
1c:2f:b5:7f:05:0d:b9:29:08:20:43:04:24:1b:a2:da:c2:b3:
1c:32:a1:ef:45:a4:79:d5:4f:5b:44:c7:11:35:b1:b3:a3:d0:
0e:df:5d:de:b4:87:6e:11:22:1b:8b:25:fa:ab:ea:b3:be:7e:
20:02:78:d2:94:ef:e8:42:00:f6:87:a5:59:40:4b:5f:9c:78:
fb:18:ef:5a:94:e7:2d:a3:97:38:ef:46:8d:14:20:1f:b1:b6:
c5:94:08:a9:c6:0b:40:c4:93:5b:02:85:9c:c4:fa:46:a1:7f:
d9:9c:cc:28:6d:f6:38:fe:92:8a:2d:cd:d6:39:f1:e4:27:5c:
d2:b1:c8:82:77:13:38:5a:68:c4:55:21:79:30:20:65:9b:ce:
0e:07:f9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:06:00 2026 by rpki-client