Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
File: DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json)
Hash identifier: gpiseHn3nvccIL7W4BmuEEm4NDcxWmhzH/OEuMqJSZ8=
Subject key identifier: 99:0A:FA:7A:06:D3:EB:7C:44:D7:F3:C8:D3:7E:A1:35:7D:1F:2B:19
Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Certificate issuer: /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Certificate serial: 01A0C5FC96C30EDD8F71345766C65F8A48BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 22:01:00 +0000
Manifest this update: Mon 21 Sep 2026 22:01:00 +0000
Manifest next update: Tue 22 Sep 2026 22:01:00 +0000
Files and hashes: 1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: qVxR2ZHw5aIqdK47KZA6sgu/MLmg/MOjQZiBPyAG3pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:96:c3:0e:dd:8f:71:34:57:66:c6:5f:8a:48:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Validity
Not Before: Sep 21 22:01:00 2026 GMT
Not After : Sep 22 22:01:00 2026 GMT
Subject: CN=990afa7a06d3eb7c44d7f3c8d37ea1357d1f2b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:0e:5a:2a:4b:62:af:2a:1c:02:a9:ff:a9:
86:8a:be:ee:b7:21:aa:bb:84:8b:83:fd:6e:b0:8f:
1d:07:17:50:23:ca:53:b1:97:0a:88:39:c2:db:1e:
26:c7:56:38:8c:50:78:2f:d9:f9:7f:8f:78:a8:19:
08:b9:0c:d1:4d:a5:b9:f2:e5:01:f4:90:7d:ca:ca:
b2:61:25:02:2d:2b:2c:9c:1d:94:34:14:91:4e:30:
83:40:51:13:14:cb:ea:da:ba:bb:d5:8b:95:b2:25:
f2:99:94:fe:a6:cb:66:7a:de:a0:9d:32:b0:7e:08:
1a:52:88:28:24:9e:c4:c0:90:a3:34:ca:49:9f:36:
c7:91:47:9e:86:ae:4b:44:a7:63:27:79:bf:28:63:
80:03:27:c6:67:b6:cb:52:66:a4:e4:48:9a:0b:62:
3d:2b:29:ae:2f:50:4b:b1:54:d5:1b:76:09:ca:49:
b8:e3:ea:90:90:be:5c:b4:e6:45:b8:85:13:01:29:
6d:4a:7d:a6:4f:ba:35:01:57:01:41:71:a4:d6:7b:
d3:62:81:e7:dd:06:ee:00:29:0d:d0:81:80:01:88:
b8:36:31:2b:ad:ab:e4:41:3e:2f:b0:cf:d8:86:5a:
33:36:30:7b:43:a5:fe:b9:aa:61:29:51:d5:f7:31:
bb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0A:FA:7A:06:D3:EB:7C:44:D7:F3:C8:D3:7E:A1:35:7D:1F:2B:19
X509v3 Authority Key Identifier:
keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2c:d5:34:17:d5:0a:ee:fc:69:ee:bd:44:55:68:98:1b:b3:
05:e7:db:10:ab:8f:16:1c:2d:c1:be:84:e1:ba:6b:a5:2a:7f:
85:32:89:8a:34:86:ed:51:05:f5:d5:f5:8f:a7:1d:02:60:53:
2d:a0:50:17:c8:df:57:7e:01:b8:23:d4:a5:c7:e2:d4:1b:26:
19:aa:b4:fa:30:ae:c0:bb:1a:66:bc:f7:f2:3e:a5:b8:23:3f:
4e:ef:e3:bb:b2:b2:69:6f:3a:ff:4f:50:99:ab:85:b4:e2:24:
20:e6:bb:cc:20:22:74:19:01:4f:2e:b0:1e:77:a0:99:24:0e:
34:35:15:5c:fd:75:20:e0:3a:07:54:23:23:c9:0e:71:85:ec:
63:9c:49:f9:ca:47:7d:81:7b:81:76:80:ca:69:73:5c:6f:56:
aa:49:f8:36:f5:f3:87:fc:9c:62:60:12:11:9c:6e:49:fe:8b:
4c:7d:85:be:83:de:fd:a4:43:a0:c3:ce:b8:5f:b2:f9:6c:90:
4e:1a:ca:d6:0d:4c:f2:fe:76:ec:de:f0:36:e7:c2:58:26:ce:
bc:b3:79:b7:77:f7:69:f2:4c:3c:49:cc:60:40:95:41:22:86:
a6:fc:a4:cb:9e:a2:93:02:89:0b:0a:fd:54:7c:97:6c:1f:89:
8d:f4:15:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:40:46 2026 by rpki-client