Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: 35q4JsDIyaImJahE5OwTDyHRwy/c9f5LEjBP+EomsAI=
Subject key identifier: 8C:3A:30:76:B9:8C:5C:92:97:F3:93:BF:F6:A7:48:E4:A6:88:61:52
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 01A0C3D7123FD772EED2B17035326518D5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 12:00:47 +0000
Manifest this update: Mon 21 Sep 2026 12:00:47 +0000
Manifest next update: Tue 22 Sep 2026 12:00:47 +0000
Files and hashes: 1: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: YRQcjrL/GlMFBvW4QAnONNhMf1+vr9EA7pNhe39slY0=)
2: LINYNse5gTnQTaGpDC4P2orwLNw.roa (hash: jwdJGzlRoAppijnlgLmKSEl5CMBxNzYsYm+HHhXiWR0=)
3: Wu-LPUMqwocBNlt5ypkyRQ-BcG8.roa (hash: udr6u/rjNC9kwCUZ4fpiUpE5gr+CoJtYznz4JyS606g=)
4: dpzibW71BafVtewDmI9jnKwB0PE.roa (hash: Lb6hcW86Ys7t4OSo9igJpzp6AC9QU/RfmTo/e1nf/rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:12:3f:d7:72:ee:d2:b1:70:35:32:65:18:d5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Sep 21 12:00:47 2026 GMT
Not After : Sep 22 12:00:47 2026 GMT
Subject: CN=8c3a3076b98c5c9297f393bff6a748e4a6886152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3e:a3:a1:ed:aa:da:fa:23:97:f1:c8:92:87:
93:8f:b0:1d:98:81:77:3e:96:34:49:e2:3c:5b:92:
f4:f3:81:f3:ee:a7:92:fc:c8:36:b5:56:2f:3e:ed:
1b:41:68:5d:96:6a:63:f1:47:68:3c:21:47:29:e1:
b3:ac:0d:96:b2:2e:98:6f:b2:1d:06:fa:51:5e:6d:
d8:44:55:99:f5:c4:9d:ad:63:a5:bb:dd:26:c9:aa:
5e:23:ef:4a:ae:eb:21:92:e2:fe:64:5e:c8:25:f6:
67:75:33:72:02:bb:c9:d3:1e:3c:88:3a:9f:63:35:
ca:54:46:9c:eb:5f:60:af:da:19:11:3c:17:43:26:
be:82:99:89:c5:45:78:e6:2c:78:90:b8:19:0f:68:
12:74:b9:51:b9:64:07:48:15:5e:ed:2c:ef:8f:f6:
b8:d1:e4:b2:6c:d2:1b:2b:a8:ad:34:bc:a6:38:bf:
10:d6:90:17:71:67:5f:a1:fb:f3:9d:20:58:54:3a:
fd:97:7d:df:4f:04:55:ba:27:00:87:4b:54:9e:61:
a6:d7:6b:f7:12:11:49:eb:12:4c:85:03:79:f9:b6:
d1:6c:a7:0d:7c:6d:3a:05:2b:d7:2d:4b:e6:46:d4:
e7:97:1c:af:83:8a:9d:5e:84:db:89:57:1e:ef:8f:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3A:30:76:B9:8C:5C:92:97:F3:93:BF:F6:A7:48:E4:A6:88:61:52
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fe:50:f4:85:09:b9:e1:2c:13:68:82:ac:d5:c5:53:c4:b0:
a0:d8:95:2b:ec:f1:3c:38:1d:88:95:0c:b7:d5:83:52:cc:09:
14:02:51:c0:32:c8:32:59:49:84:e5:44:81:6d:fc:e1:a5:28:
b4:72:f5:ac:0d:8b:51:72:56:7b:e6:3e:02:c2:50:05:b9:51:
b6:0b:43:6f:8c:cd:20:0c:d3:7e:9d:a4:0e:22:ab:55:d5:b0:
32:95:45:eb:1a:57:ca:5b:38:c7:1b:09:2a:c3:18:a5:ec:ce:
15:b8:21:ae:19:a5:7f:c5:31:1a:97:df:4d:27:5d:bd:64:8b:
34:65:c3:04:19:e8:64:59:8f:18:e0:ad:23:13:aa:b1:d8:8d:
63:c2:62:80:91:03:c8:36:0d:93:58:f3:06:89:54:0c:98:98:
63:a8:01:21:6e:fc:8f:99:ff:c8:5e:e5:2c:3d:d8:70:f2:44:
85:fe:4f:48:8b:a0:d6:45:ba:40:a6:47:93:25:07:fc:41:57:
36:62:09:72:c2:b4:c2:4b:84:1a:5d:3e:4f:31:b4:d0:95:24:
8c:58:75:e9:9b:f4:44:84:cf:ff:0d:89:8c:75:1e:ef:b5:c6:
09:e5:7f:8e:63:ce:92:3b:05:62:7c:dd:52:30:09:45:bb:e4:
25:1a:8d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:48:43 2026 by rpki-client