Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: zXc2DwAol5U73SVvhVnvCn2XEoRr6UEwes0qyaeATqk=
Subject key identifier: F2:FF:20:8E:E4:53:C9:53:49:53:32:A7:15:D8:3E:22:30:6C:D9:A9
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 01A0C40D8502DAEE94C9FAC79DBA1C4AA006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 13:00:15 +0000
Manifest this update: Mon 21 Sep 2026 13:00:15 +0000
Manifest next update: Tue 22 Sep 2026 13:00:15 +0000
Files and hashes: 1: 1TwtEwBMlCxF8zqgEDzuBJ_MkQk.roa (hash: TD25ePA+FEqAqKpKYIGbiC60SkZANZcldOpqjTjdHRs=)
2: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: Bo3LUzKbc2kMCGhj087E89qPoiU7voP0LZSYL3jyHsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:85:02:da:ee:94:c9:fa:c7:9d:ba:1c:4a:a0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Sep 21 13:00:15 2026 GMT
Not After : Sep 22 13:00:15 2026 GMT
Subject: CN=f2ff208ee453c953495332a715d83e22306cd9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:85:e9:7d:7d:52:b3:9a:ee:10:b3:57:2b:
8a:60:ee:65:37:09:77:5d:9b:96:fe:23:39:38:94:
1b:09:2e:c6:3f:47:a6:04:71:92:34:0c:f4:50:40:
48:c2:bb:12:8a:e6:97:cb:c0:ce:3e:82:ee:68:1a:
7a:43:f7:ef:1c:30:15:88:24:5c:c6:4c:e0:fd:00:
28:ff:31:b3:a1:a4:22:1e:6a:8e:ef:bf:d3:1d:11:
e5:a1:92:67:26:e5:71:82:e1:87:fe:66:e5:79:5c:
fe:08:79:53:ff:31:5b:80:be:67:69:b5:46:7f:c4:
bc:ba:06:1f:4f:e2:dd:7f:84:c0:86:78:ef:85:9b:
72:3b:50:62:82:ee:6e:60:43:de:c9:55:4c:ed:2a:
5a:54:4a:ea:83:56:fe:d5:e1:fc:ba:a5:bc:11:c3:
d5:75:a4:a6:48:97:3b:d3:55:d2:ef:e9:2d:7c:72:
24:a4:60:2d:65:47:57:02:11:88:15:c5:06:d0:c8:
f7:2b:b2:59:f7:dd:5e:91:db:c0:bf:b5:02:b4:8d:
b3:21:1c:30:5f:f8:c4:59:dd:cb:dd:17:e9:6a:b5:
92:97:ef:7f:77:a4:71:36:00:ce:80:62:27:a2:3f:
4c:6a:b8:82:86:e8:49:b4:b1:ca:db:38:64:14:b9:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FF:20:8E:E4:53:C9:53:49:53:32:A7:15:D8:3E:22:30:6C:D9:A9
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9b:d1:b8:39:9a:8c:17:b6:1f:35:44:93:3e:11:c9:fb:a5:
ae:39:51:9c:5b:e2:ab:42:91:d9:19:a6:90:10:0e:41:5a:8f:
8a:b4:97:b1:32:db:9f:c8:16:12:6b:a0:90:58:ff:0e:c6:b7:
90:67:99:81:fb:ea:80:91:18:14:94:ec:c5:80:80:86:8e:50:
14:c4:cd:23:c7:62:09:24:33:b9:40:72:d4:f5:f5:c1:4a:d5:
0c:26:5c:d1:b4:06:34:ea:ca:af:bb:82:bf:c9:45:d5:b1:f1:
d4:eb:bf:3b:0c:b3:c7:66:c9:8a:0e:b6:69:5e:f7:41:2e:c4:
cf:c1:6b:b9:69:90:47:51:f2:da:de:86:c5:6d:1b:e9:21:7d:
6a:74:6f:17:d6:b7:2f:9f:c4:09:b8:f3:6d:8a:98:ae:8d:20:
76:1d:8c:4d:3b:03:af:0b:5d:b5:20:39:1d:3b:eb:c4:50:bf:
06:42:ec:35:0e:34:e6:56:d2:3a:28:71:f5:44:ba:30:76:42:
29:30:47:47:a3:81:90:50:48:56:ba:a7:c5:90:4e:52:39:a7:
6b:d2:05:48:6d:e4:f9:10:9c:92:9c:23:ce:fe:ae:5a:e1:f9:
b7:f1:09:13:7c:aa:48:fa:5c:28:b2:36:0c:60:15:81:93:80:
80:f9:4a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:17:41 2026 by rpki-client