Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
File: DlNS2UQbZcIBbtjrfi8jWVRDT10.mft (raw, json)
Hash identifier: PdDGdcFOMiR4y7Uau5MKGR54fshjwUryzf96kKNnzmk=
Subject key identifier: 22:1B:E5:17:DB:33:05:E2:92:20:66:A9:26:18:46:4A:9B:EF:D7:78
Authority key identifier: 0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
Certificate issuer: /CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Certificate serial: 01A13CA5B7495B558BFEB92E323E6E3E8585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
Manifest number: 064B
Signing time: Wed 14 Oct 2026 23:00:55 +0000
Manifest this update: Wed 14 Oct 2026 23:00:55 +0000
Manifest next update: Thu 15 Oct 2026 23:00:55 +0000
Files and hashes: 1: 7HIHyHGDiVhFywfB2aUFsNjko-M.roa (hash: Iv4sArJJwlkOrpiX31eTz3pS1dqhRbw3dXCKTSlvosg=)
2: DlNS2UQbZcIBbtjrfi8jWVRDT10.crl (hash: T1WBnmvAKW33AlPYmGFYMbPjDuupBlitJUNPqTEl5kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:b7:49:5b:55:8b:fe:b9:2e:32:3e:6e:3e:85:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Validity
Not Before: Oct 14 23:00:55 2026 GMT
Not After : Oct 15 23:00:55 2026 GMT
Subject: CN=221be517db3305e2922066a92618464a9befd778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:bb:20:06:ae:52:d4:a6:7c:fc:38:25:d5:
fd:af:f1:57:6b:ea:6a:c7:c9:bb:c4:17:9c:35:3f:
dd:2e:07:69:0c:c5:58:7a:44:af:42:d7:1f:29:08:
c6:96:a4:6b:2d:9b:10:fc:d4:47:a8:df:73:51:0d:
38:3d:4f:ba:2e:d7:61:cd:dd:08:9e:d9:a2:c6:ff:
32:ac:8c:cb:89:7c:84:5b:4d:67:9d:90:90:bd:ca:
bf:0e:09:92:c2:5b:80:d3:54:a3:a1:d1:e9:96:51:
d6:eb:52:6e:fa:06:ee:a0:64:6c:26:5f:97:ca:0b:
c3:1c:ff:4c:05:8d:78:c0:4b:90:5e:82:f4:76:c6:
3b:16:11:09:7e:26:e1:b2:f0:2d:72:d7:7a:db:5d:
a2:85:2d:bb:be:38:aa:a5:55:66:88:2f:6d:07:c2:
7d:27:3a:ca:be:b1:19:53:b1:5f:c7:dd:eb:a4:cd:
75:d0:94:2c:06:2e:0e:26:d0:88:16:84:de:aa:bb:
b3:08:b8:01:1b:26:dd:8f:ea:f4:71:c3:f7:5e:d1:
d3:4a:70:e3:aa:79:77:32:d7:c3:4f:6b:22:2e:8e:
8e:91:83:d0:fb:d7:5d:7b:fb:e8:97:1a:4f:23:1a:
ae:f1:cf:ba:c0:9a:64:e3:66:c9:7f:ba:3d:60:41:
0c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1B:E5:17:DB:33:05:E2:92:20:66:A9:26:18:46:4A:9B:EF:D7:78
X509v3 Authority Key Identifier:
keyid:0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8b:6c:93:e7:e5:96:02:8e:3d:81:56:e8:aa:45:80:9c:22:
f2:cd:94:cf:e9:32:e6:df:7a:71:8b:64:5f:e0:26:5b:03:eb:
ef:4c:2b:fb:41:62:ce:c1:ce:55:5b:1c:be:fe:6c:f5:f6:d8:
5e:3e:95:72:8a:20:94:b4:98:a6:5a:6c:0c:99:44:7d:3d:b1:
ee:34:28:55:bc:d0:21:51:4f:45:f3:a2:1b:1d:d3:6e:82:ca:
b9:ee:15:f9:8e:34:ef:1a:f2:b3:b2:a4:e4:e6:6a:a4:bc:e5:
26:1c:c0:39:44:64:f4:d7:4e:54:27:f2:ab:8e:3d:dc:13:d0:
c4:17:65:52:61:68:ae:a4:54:bb:6b:13:da:c8:37:ac:0d:d4:
0b:41:37:a1:86:23:ff:6c:99:99:ca:8b:07:bd:e0:47:90:75:
6b:c8:78:25:4c:89:9a:2c:31:e6:bb:3f:e4:fa:69:0f:e9:5f:
2a:eb:73:c7:8c:44:35:83:3f:79:0c:12:23:44:ee:0b:ca:6b:
5b:f5:eb:90:81:c9:a3:6f:73:ca:28:c0:e3:94:9a:8e:b1:66:
72:77:6f:06:78:de:eb:ba:8d:b2:99:77:9b:53:4a:f3:3f:26:
93:e9:96:44:96:ca:61:8f:79:2c:ec:fe:85:06:18:c2:a2:04:
c8:c8:6b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:18:23 2026 by rpki-client