Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: 80B06OUv30Dn/nf30ucshg3rY2Kvy3L13xWCr7Lc6GU=
Subject key identifier: 05:2F:7C:B4:5D:D4:DE:F8:0B:0D:24:2D:26:20:9E:A6:26:1B:C7:84
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 019CAEA31D7E7A6A7A3BDFA5E640AEF071E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 0395
Signing time: Mon 02 Mar 2026 13:00:51 +0000
Manifest this update: Mon 02 Mar 2026 13:00:51 +0000
Manifest next update: Tue 03 Mar 2026 13:00:51 +0000
Files and hashes: 1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: iUvEzfrnz3sHxNMdNKgwbTxDB0R0BaQuFwbE5SGknYc=)
2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:1d:7e:7a:6a:7a:3b:df:a5:e6:40:ae:f0:71:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Mar 2 13:00:51 2026 GMT
Not After : Mar 3 13:00:51 2026 GMT
Subject: CN=052f7cb45dd4def80b0d242d26209ea6261bc784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:da:d7:00:f5:ee:fe:91:5d:c3:1e:38:9f:
6b:8b:7b:2e:73:06:96:a9:80:4a:3d:2c:88:94:ec:
e3:fa:41:5b:2e:d7:56:c3:4c:fe:97:21:9a:d8:00:
0d:f6:cc:97:c4:58:97:ff:0d:a1:2a:43:00:1f:f9:
00:46:85:08:6a:d4:ee:8e:ad:7a:5b:a4:a6:af:35:
b8:37:71:f2:cc:da:2e:c4:e1:35:06:e2:8d:c6:56:
18:a3:68:e4:65:4b:66:c4:2b:9b:19:34:9f:96:9b:
e1:86:f0:18:3d:29:8e:9e:0e:fb:d0:04:13:91:a0:
65:20:39:23:f5:21:c2:59:71:45:86:ca:05:5a:3c:
91:48:e5:b5:a2:00:e3:db:cd:c1:30:b0:53:de:d8:
3c:5a:e2:7a:2e:35:62:9c:e0:11:38:7d:08:93:75:
46:53:3b:08:e0:3f:59:13:98:d9:69:04:6a:e3:47:
80:17:d3:45:90:bd:c4:cb:f0:6f:cb:f6:d3:0c:3e:
4d:cb:67:28:28:dc:c5:16:5f:3f:df:68:68:a2:3c:
b0:c5:e5:e9:6a:f8:f3:32:0b:2e:c5:1e:d0:be:33:
5e:2b:d5:07:06:60:85:8e:41:e6:fb:56:af:14:7a:
13:87:86:c9:50:32:d7:61:95:02:58:cc:00:80:81:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2F:7C:B4:5D:D4:DE:F8:0B:0D:24:2D:26:20:9E:A6:26:1B:C7:84
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ec:fb:93:c1:34:fc:f0:1b:e8:46:aa:03:cc:ba:77:d9:4b:
f5:37:31:be:a7:ab:5c:2a:4d:92:07:43:47:3e:5e:11:7a:a4:
2e:b9:53:0b:2c:89:03:67:fb:5d:b6:23:52:92:f5:af:05:0f:
20:ab:71:4a:1d:1c:72:69:7c:71:6c:6c:03:cd:bf:e6:35:89:
61:79:fc:49:0f:fd:88:80:1c:e4:99:4b:e0:e2:e7:af:72:05:
9c:99:24:20:1b:d2:63:7d:88:95:f5:0d:97:34:58:0d:08:68:
3e:d7:56:71:28:28:3f:be:c0:3a:ae:f8:64:b7:42:56:f2:3b:
b3:ce:8c:14:51:c0:70:10:0d:cd:f5:80:ac:bc:de:c7:e1:83:
e3:6d:aa:0b:c5:c3:95:11:83:7e:7a:80:2b:00:79:fd:6a:2a:
71:4f:c0:c8:6a:9b:3e:56:0a:ff:cd:ae:86:f9:3e:6d:e4:63:
e4:b4:58:3c:86:a1:79:52:c3:c0:01:21:2a:5f:6e:90:16:37:
b3:64:a7:79:da:df:08:b4:2a:e3:99:de:99:05:fa:f2:ac:51:
42:81:4f:f3:1d:8b:8c:75:30:7d:2f:78:85:03:01:3b:04:2e:
6f:72:94:63:0c:b4:5c:74:50:dc:9d:84:c1:8c:20:e9:42:62:
43:4c:85:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:47 2026 by rpki-client