Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
File: DL6R62OkTx6fGoPt0hih7HXCXpE.mft (raw, json)
Hash identifier: 0qzjuEsreTGQzVWmHRBqBhXcYSDTjbsdY5XAT5lMlhw=
Subject key identifier: FB:CF:8D:CE:F9:6A:A6:80:85:CD:87:0B:2A:A9:6A:BE:C7:7B:EA:80
Authority key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Certificate issuer: /CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Certificate serial: 019CA9462073B8C417DC4DE7C615E25A75CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
Manifest number: 0A0A
Signing time: Sun 01 Mar 2026 12:01:10 +0000
Manifest this update: Sun 01 Mar 2026 12:01:10 +0000
Manifest next update: Mon 02 Mar 2026 12:01:10 +0000
Files and hashes: 1: DL6R62OkTx6fGoPt0hih7HXCXpE.crl (hash: Kj9Yl0FXgNO8RG9q/EDYrGfDyxwxAUxwfrq7PeNI5k0=)
2: ieARORdYcNY2xAIgZ2Lm5zVhBPY.roa (hash: uxcRpYQC7niWzfv+xu565cyLA8mc5ppHnKOLcM7yCCA=)
3: ma-gGSb8UcMB3jnOgxKk3Xmx_xE.roa (hash: 1fKPmYHOhzjogZRbRHvqvpPsJkR5Sk/rMa970YUSBeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:20:73:b8:c4:17:dc:4d:e7:c6:15:e2:5a:75:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Validity
Not Before: Mar 1 12:01:10 2026 GMT
Not After : Mar 2 12:01:10 2026 GMT
Subject: CN=fbcf8dcef96aa68085cd870b2aa96abec77bea80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:57:1c:da:9a:69:17:cd:a0:be:7a:5e:97:
56:7d:fd:3e:b6:73:15:6e:ef:7f:c2:b6:ba:45:1e:
2d:87:7c:bc:91:fe:a0:2f:4a:b3:24:07:08:57:4a:
20:c5:5b:68:ee:46:07:31:e6:a7:d3:3a:cd:7a:69:
0a:66:b1:a7:3b:b0:c4:f8:b9:4a:0f:75:eb:75:26:
c5:52:5d:95:cf:82:05:ff:3e:5e:f7:03:67:ad:ec:
9b:be:7e:a2:ed:04:69:9f:78:e4:e5:9d:d4:85:b5:
da:5d:76:b8:f0:bd:3d:47:6a:26:65:e8:cb:74:8b:
70:aa:2e:10:71:5a:42:87:93:74:6c:4f:9f:d3:dd:
e1:b6:fc:e3:16:f9:7e:42:da:0c:dc:d5:ce:3c:ad:
8c:61:e5:bf:ca:98:2a:0f:22:bb:4a:a0:ad:9b:88:
f3:86:00:53:08:28:b5:01:37:6c:73:fe:44:c2:94:
de:1c:af:d9:94:d3:f8:52:df:8a:0f:3e:22:92:4a:
30:0b:2c:20:8d:fe:23:85:6f:5e:64:be:3a:57:17:
95:c7:65:73:5b:c7:ad:96:f6:fe:29:44:8b:16:6a:
11:c6:e0:d8:a4:c9:f1:fc:29:88:f2:23:c1:b8:83:
d5:b3:c6:44:18:32:4d:84:31:d0:77:55:28:fc:eb:
19:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CF:8D:CE:F9:6A:A6:80:85:CD:87:0B:2A:A9:6A:BE:C7:7B:EA:80
X509v3 Authority Key Identifier:
keyid:0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e7:fb:33:44:94:9c:52:34:9f:85:71:2a:13:b5:9f:ee:68:
8d:b1:c9:a4:2d:35:08:5e:e5:b4:97:8f:23:5e:6c:85:a8:61:
51:14:32:d2:ca:db:53:36:cc:fd:78:dd:5f:cc:b6:ba:8e:71:
45:e5:8a:12:b4:11:c2:1c:2c:99:15:9a:c2:af:d0:15:b3:0d:
d1:6a:26:94:40:6a:fc:12:4f:f5:a6:e0:ee:f9:92:bb:86:92:
47:6d:23:08:e6:f0:e2:20:c3:d8:3d:84:3a:2a:a7:88:74:3f:
f8:a3:11:2d:dd:3e:c4:90:b6:4e:66:8f:03:20:4f:3d:a0:96:
d7:af:69:4d:05:d1:a6:c5:c6:d2:56:f7:d1:6f:90:67:bd:3d:
10:b3:2a:55:32:d1:b0:cc:86:02:1d:22:f3:18:c2:af:18:df:
16:27:64:36:00:e6:fe:ff:4c:86:1f:82:e6:e4:d1:26:ac:1a:
e5:66:0e:66:14:5f:92:ac:63:02:97:8a:bf:df:f1:89:54:44:
51:3c:3f:1b:e5:b8:37:e7:bd:1e:40:ed:c4:a7:97:85:dd:6c:
46:64:8f:a6:2b:07:25:42:b6:0e:ab:1c:10:f7:fb:66:b2:84:
43:17:15:b9:66:dc:5d:d9:3b:ec:99:e8:b1:b2:0e:80:16:0c:
d6:eb:c2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:47 2026 by rpki-client