Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: wsg8V1mSbWE4KZgFLATLWjMHxrCum/vjkTr+2jE/6EU=
Subject key identifier: D0:E0:F0:CC:9A:4C:E4:F3:7D:73:B0:DB:42:C1:8B:59:F4:04:7C:21
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 019CAB34567C0F676C0F7D7BA9D96C4F4A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:59 +0000
Manifest this update: Sun 01 Mar 2026 21:00:59 +0000
Manifest next update: Mon 02 Mar 2026 21:00:59 +0000
Files and hashes: 1: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: cfGeCsC7MNCPgrJBJO4RiPmzoR9kmoTGhfFfVAP04Os=)
2: LINYNse5gTnQTaGpDC4P2orwLNw.roa (hash: jwdJGzlRoAppijnlgLmKSEl5CMBxNzYsYm+HHhXiWR0=)
3: Wu-LPUMqwocBNlt5ypkyRQ-BcG8.roa (hash: udr6u/rjNC9kwCUZ4fpiUpE5gr+CoJtYznz4JyS606g=)
4: dpzibW71BafVtewDmI9jnKwB0PE.roa (hash: Lb6hcW86Ys7t4OSo9igJpzp6AC9QU/RfmTo/e1nf/rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:56:7c:0f:67:6c:0f:7d:7b:a9:d9:6c:4f:4a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Mar 1 21:00:59 2026 GMT
Not After : Mar 2 21:00:59 2026 GMT
Subject: CN=d0e0f0cc9a4ce4f37d73b0db42c18b59f4047c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:ab:19:12:f0:ea:ee:26:eb:26:cf:fb:ad:
0d:17:e7:43:92:56:e8:47:27:f8:25:f6:1f:80:96:
30:7f:3c:23:41:ed:e6:84:f1:7d:31:95:86:87:d3:
2d:88:2c:4a:f6:69:f1:9e:79:5b:82:75:1c:19:b0:
ad:93:82:ed:2a:9e:ef:f4:e7:db:9d:3c:07:97:95:
dc:a0:eb:29:fe:15:18:9f:3d:94:f5:84:af:5e:c4:
89:f4:b3:26:08:84:bf:fa:7d:2a:8e:0d:7d:9b:fb:
6e:0a:01:7a:f6:46:2d:9e:3d:4e:29:ad:b5:83:1d:
eb:f3:f7:50:e1:ba:ec:ab:f5:59:ba:83:86:ac:f2:
15:dc:20:4d:35:2e:2f:3e:63:9e:78:cd:fa:0f:5f:
b1:06:07:b8:42:8e:75:bd:4f:c0:7f:7d:26:24:7d:
c7:c2:06:87:e4:0d:2e:e5:e3:4b:9b:cd:d8:e0:fb:
26:de:84:9d:13:15:19:73:2b:0e:d3:25:dc:44:82:
03:93:49:98:79:be:50:c9:c5:7f:05:1d:f3:fc:b9:
42:a2:e1:e8:ce:0a:82:3d:f5:a7:80:4c:b2:89:29:
31:46:00:0d:7e:14:e4:1b:b3:38:03:fe:a5:ea:03:
38:91:ee:89:b1:b9:1b:09:f7:57:a6:3c:27:37:89:
2f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E0:F0:CC:9A:4C:E4:F3:7D:73:B0:DB:42:C1:8B:59:F4:04:7C:21
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:16:0a:23:3f:38:64:d9:b5:d2:c9:00:6b:0a:e8:56:e6:7d:
77:04:61:24:8e:05:c0:87:8d:a0:28:3e:9e:83:5c:09:50:9d:
a7:00:eb:7d:c3:8a:ed:77:08:c1:e8:90:d3:8c:0a:f9:27:cb:
98:78:37:aa:5e:27:76:94:56:d7:4a:86:e5:61:a8:6a:85:40:
50:89:ce:c9:a2:96:39:86:61:e4:9e:3e:57:aa:1d:7b:0e:6c:
16:a5:01:1b:87:a5:b7:81:4c:93:8f:2b:12:7c:03:23:aa:1f:
f4:ec:98:89:85:e9:91:00:bc:8f:c7:f9:0c:9b:e7:fb:1a:84:
72:84:9d:18:93:26:87:d0:f6:a7:ed:ed:b7:f3:bd:d7:f4:01:
db:cc:20:e5:21:ec:58:9d:2c:4c:69:e4:1f:78:12:52:9a:94:
b3:55:89:20:21:d4:ae:dd:11:41:e3:ea:ae:86:13:b4:05:d6:
6c:d5:a8:ba:d1:a7:67:e2:eb:d4:2f:19:5b:6a:2c:81:46:7c:
a2:76:f6:9a:c0:9a:d0:85:48:55:fa:4d:94:86:49:59:fb:c9:
86:6b:ff:d4:ff:18:84:5c:4e:07:30:02:54:35:e7:79:4a:78:
c3:5d:97:4a:e1:4e:cd:1c:f1:53:19:82:ae:e9:da:75:33:99:
6a:bb:da:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:13 2026 by rpki-client