
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: eShoqeDI6C/AXKHsx4308ehGJ9yqq6SBHlBtMKfcVos=
Subject key identifier: AA:1D:DD:43:16:5D:AB:44:C6:67:90:DD:0C:FB:85:1A:B2:F0:F9:A1
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 019EBE47B30C271536747772991CADB5DD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 00:00:30 +0000
Manifest this update: Sat 13 Jun 2026 00:00:30 +0000
Manifest next update: Sun 14 Jun 2026 00:00:30 +0000
Files and hashes: 1: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: DCgx91AOjzWobz+mr+qOxIvykLXIs3Lp1dqgqkdUjV4=)
2: LINYNse5gTnQTaGpDC4P2orwLNw.roa (hash: jwdJGzlRoAppijnlgLmKSEl5CMBxNzYsYm+HHhXiWR0=)
3: Wu-LPUMqwocBNlt5ypkyRQ-BcG8.roa (hash: udr6u/rjNC9kwCUZ4fpiUpE5gr+CoJtYznz4JyS606g=)
4: dpzibW71BafVtewDmI9jnKwB0PE.roa (hash: Lb6hcW86Ys7t4OSo9igJpzp6AC9QU/RfmTo/e1nf/rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:b3:0c:27:15:36:74:77:72:99:1c:ad:b5:dd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Jun 13 00:00:30 2026 GMT
Not After : Jun 14 00:00:30 2026 GMT
Subject: CN=aa1ddd43165dab44c66790dd0cfb851ab2f0f9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:b4:88:67:ff:11:c9:ff:89:20:93:e8:6c:
66:b4:17:9e:b8:06:31:1c:1f:f7:54:42:c2:07:14:
c1:df:58:16:9f:2b:76:10:ba:dd:f8:12:fb:09:58:
12:dc:1f:72:86:a6:c5:5a:24:78:f4:6f:8d:78:67:
b9:b0:e1:41:64:7a:a1:82:4b:95:71:1b:ae:63:b9:
e2:52:2f:eb:38:58:df:93:f2:23:84:7d:11:29:b0:
55:33:56:56:ae:a7:16:26:8e:ed:19:ae:ee:23:72:
71:01:d6:bf:fe:46:58:19:a1:d2:94:85:3e:10:f1:
42:75:71:37:84:37:fb:d0:fe:6e:5c:75:80:cb:01:
05:4c:a5:1a:0a:2e:05:80:d9:28:b9:1c:c6:90:89:
9a:d4:f9:60:12:2e:64:b2:51:44:68:96:a5:f0:83:
29:6a:58:85:ef:05:8f:4b:e1:c1:cb:c2:f5:6e:0d:
5a:d7:3e:f0:66:53:a9:c0:c3:75:5c:23:be:94:79:
30:71:06:71:ed:f8:f9:3b:84:35:7c:c4:65:05:03:
76:1c:fb:9d:b1:26:0a:ad:6d:ed:e7:4c:ec:38:b2:
4d:09:cd:31:fa:01:02:b5:ed:1b:07:11:40:72:8d:
39:8f:80:c2:71:0f:6f:e5:43:c8:c1:0d:fe:91:69:
25:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1D:DD:43:16:5D:AB:44:C6:67:90:DD:0C:FB:85:1A:B2:F0:F9:A1
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8a:90:ce:64:4f:78:7b:1e:1a:a8:26:32:f1:8a:75:1d:50:
c6:0e:31:45:3a:bd:a9:8d:20:ce:d8:33:11:df:c4:24:f5:ea:
49:f3:db:6f:33:6d:1c:d8:91:23:36:10:14:d2:48:e5:28:a2:
1e:aa:43:eb:db:7c:30:87:fd:43:a9:71:3f:f0:b4:f0:83:bc:
e1:c4:c5:6a:75:21:88:8d:7b:2a:9e:a6:c6:5b:f1:de:92:12:
23:6b:5b:2c:73:3d:43:b3:0d:a0:90:36:87:c2:1f:c1:34:e6:
9b:c6:2f:b8:e8:a7:40:a5:15:0c:36:bd:0e:18:fd:bf:b5:ff:
94:17:6a:0c:ed:b5:9b:df:cd:5c:32:12:04:31:87:75:a1:47:
76:61:6c:64:7b:6c:5a:f8:75:0e:df:5d:86:44:3b:db:29:18:
13:6b:08:1c:70:f0:2b:70:fa:9a:6e:7c:6c:e2:f4:ca:2a:9e:
d3:1a:3f:c1:c7:37:9b:2a:d4:c2:be:2c:68:da:ea:3d:9c:55:
06:ed:f8:fc:e6:e9:81:81:78:55:dc:63:3d:65:d8:14:00:79:
a7:50:ef:77:b9:e1:a6:1d:50:93:53:8c:df:4b:36:15:13:b7:
b9:13:03:d3:05:5a:79:e4:b5:db:23:16:33:cc:42:9a:c5:a3:
17:56:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:05:17 2026 by rpki-client