Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
File: DL6R62OkTx6fGoPt0hih7HXCXpE.mft (raw, json)
Hash identifier: FykZg6z0jXQqu8Qw3jyY6jK/w6eVYKBzrZ29+UTf9Jc=
Subject key identifier: 30:92:89:BB:BD:00:CB:7A:03:38:F2:14:54:BB:56:C6:AF:52:77:C4
Authority key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Certificate issuer: /CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Certificate serial: 019FA7F421EA7825D4C6506C5F47C447A97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
Manifest number: 0B97
Signing time: Tue 28 Jul 2026 09:00:22 +0000
Manifest this update: Tue 28 Jul 2026 09:00:22 +0000
Manifest next update: Wed 29 Jul 2026 09:00:22 +0000
Files and hashes: 1: DL6R62OkTx6fGoPt0hih7HXCXpE.crl (hash: ldJwm8z5nqswjb791w79sLks7VVa/xho+JNyuN7R3v0=)
2: ieARORdYcNY2xAIgZ2Lm5zVhBPY.roa (hash: uxcRpYQC7niWzfv+xu565cyLA8mc5ppHnKOLcM7yCCA=)
3: ma-gGSb8UcMB3jnOgxKk3Xmx_xE.roa (hash: 1fKPmYHOhzjogZRbRHvqvpPsJkR5Sk/rMa970YUSBeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:21:ea:78:25:d4:c6:50:6c:5f:47:c4:47:a9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Validity
Not Before: Jul 28 09:00:22 2026 GMT
Not After : Jul 29 09:00:22 2026 GMT
Subject: CN=309289bbbd00cb7a0338f21454bb56c6af5277c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:0c:a8:62:c2:a6:37:a1:b4:3d:d3:d6:82:
59:fa:54:2e:e9:40:d5:9a:97:8a:fe:fb:eb:b0:19:
fb:01:81:57:4a:27:2b:bf:de:79:a2:93:bb:5b:57:
a3:88:91:de:0e:0c:51:dd:c7:b4:cc:e5:c7:41:db:
12:ea:e8:23:49:0e:1d:82:14:0b:d7:07:b0:97:48:
9d:59:fa:fc:f4:93:f0:55:2f:6b:3c:b0:66:ef:a0:
ff:2b:ea:7f:c4:17:fb:59:3b:a3:16:e6:8e:e6:a1:
54:1f:82:47:de:e3:7f:a0:42:ca:b4:79:bc:d7:75:
0e:ba:51:16:d9:bd:f4:69:08:4a:81:f4:29:dd:44:
ce:73:bf:e5:37:19:39:18:41:1c:1b:3c:72:ed:6b:
96:dd:ca:ec:ef:33:76:f0:21:77:75:0c:ae:70:e7:
ed:93:07:6d:7b:73:55:e4:b1:19:7a:b5:99:ce:59:
02:13:61:c5:7a:b2:a8:17:b4:78:48:de:cf:02:88:
12:ce:d9:2d:2a:e8:29:e9:37:ac:5b:c8:7b:f6:65:
50:a7:45:a2:43:9f:7e:e3:ff:84:ff:0f:9d:d8:4b:
aa:fc:dc:80:84:0c:38:6e:58:ec:fa:07:ca:ba:d9:
fa:fa:77:76:8f:2c:bd:ba:85:1b:22:8b:1b:ac:0c:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:92:89:BB:BD:00:CB:7A:03:38:F2:14:54:BB:56:C6:AF:52:77:C4
X509v3 Authority Key Identifier:
keyid:0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:76:13:18:39:a8:fb:3f:55:05:48:94:7c:af:a9:2f:92:86:
ac:8d:8f:5c:3e:7a:4f:80:4d:29:1e:ca:d4:b8:78:79:b7:c7:
66:e6:16:c1:bd:6d:52:79:95:54:dc:ac:60:ee:6e:33:ab:a6:
7b:fe:3f:2d:15:9e:eb:04:27:56:09:82:03:3a:8d:1f:56:f4:
85:a7:31:31:1b:0f:4c:0b:3d:17:55:06:a8:19:7a:c6:ed:21:
94:79:00:91:24:2f:19:a7:76:e9:10:17:3b:4a:52:7f:38:7e:
58:e4:8a:ac:4b:19:c3:14:7e:ea:88:cd:c3:2a:f6:e5:4a:14:
c9:8e:dc:da:0f:50:86:4a:52:a8:db:c4:cc:fc:2a:c6:66:84:
46:1f:10:ae:78:9c:84:d7:c3:b8:4c:c9:5a:85:2b:7e:49:44:
7a:ec:54:69:38:e3:0d:0f:47:ea:f2:16:c7:c2:0c:0b:41:6e:
02:a7:6c:48:b2:72:ce:fb:cb:dc:c6:df:3d:81:18:5c:bb:46:
73:28:ae:0a:4c:f3:31:a5:41:ba:3a:8c:3c:ba:b8:37:c2:5e:
35:4b:8b:9f:4e:89:54:f0:3e:a3:90:80:5b:58:c6:51:4b:7f:
9b:ae:63:5e:0e:6a:c2:33:d3:dd:4b:20:05:4d:9a:66:97:76:
bc:d8:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:15:16 2026 by rpki-client