Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: Oi/+31uHGNLdFsGJ82fwV0Tr4DjriwH9HEVPc8pYCFU=
Subject key identifier: F4:40:EC:8C:BF:89:10:EF:14:64:67:11:9A:80:23:68:98:C7:A8:78
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 01A1DF4C85F142893499D6D93C832F4CFABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 0645
Signing time: Sun 15 Nov 2026 13:01:36 +0000
Manifest this update: Sun 15 Nov 2026 13:01:36 +0000
Manifest next update: Mon 16 Nov 2026 13:01:36 +0000
Files and hashes: 1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: EWVSx2oKmGF275p9c0cSfdiuBXtGhxLAjYyKmSVSp4I=)
2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:85:f1:42:89:34:99:d6:d9:3c:83:2f:4c:fa:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Nov 15 13:01:36 2026 GMT
Not After : Nov 16 13:01:36 2026 GMT
Subject: CN=f440ec8cbf8910ef146467119a80236898c7a878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:21:c0:5f:b8:2e:3c:3e:00:b2:ee:c5:7c:5e:
06:19:a3:8d:b8:3c:dd:7e:cf:d7:b0:06:10:ec:2d:
8c:92:0f:c4:8e:96:e9:43:f7:b6:0d:e6:22:e0:f2:
08:0e:b7:d4:d1:25:19:63:4e:c1:76:a1:78:0e:6b:
98:e8:ad:73:ad:d4:e8:ab:98:6f:0a:78:89:d0:b4:
f7:cd:80:69:28:bc:5b:97:73:2f:20:4b:a5:86:1d:
4d:a9:df:dd:43:62:3b:78:f4:7b:e8:e5:ff:2a:27:
f7:09:a2:23:64:58:bc:a4:ac:4d:a5:2a:be:dd:69:
34:57:d5:f7:52:25:6a:97:b3:ad:b3:f0:de:aa:55:
61:10:e3:f3:06:f9:cc:32:0c:7f:a7:53:60:58:77:
ca:2d:f0:a8:f2:13:69:c5:71:40:5e:a8:bc:7b:1a:
7f:4c:52:4d:23:cc:fb:19:ba:3c:48:b0:41:35:ed:
70:67:e3:f8:5d:2d:d0:51:42:94:39:85:4f:3d:7b:
74:47:c5:e7:c1:ec:df:ed:9e:83:64:77:a3:5c:a3:
e9:64:d5:25:33:fb:c6:da:82:d8:81:c4:31:26:2e:
33:b2:7f:ad:95:2c:99:1f:97:29:8d:cb:c7:f4:95:
6a:a3:c7:cd:61:73:fc:3c:dd:1d:85:e1:cb:a4:ee:
95:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:40:EC:8C:BF:89:10:EF:14:64:67:11:9A:80:23:68:98:C7:A8:78
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f1:d6:68:10:84:77:ea:5e:2a:91:a1:f8:34:5a:b9:2a:04:
5d:b2:2f:5c:45:0f:43:20:39:51:7b:15:34:51:fc:ae:90:54:
e5:07:cf:45:e5:5c:e4:aa:54:f9:bf:5e:ab:c7:8a:cd:e8:da:
94:fd:b4:49:21:b2:e1:13:fe:db:ba:ba:8d:8e:f8:10:b7:09:
0e:ef:71:1c:82:38:11:4a:e3:cb:f7:48:e8:a5:40:74:ac:b8:
dc:e3:50:26:dc:fc:47:76:e7:87:f3:be:82:20:9f:93:5e:14:
bb:57:22:ab:68:26:ae:3e:f4:f1:19:50:68:44:0d:8b:3b:d7:
56:c9:5b:39:49:bc:d8:28:14:8b:c0:a2:24:bc:cf:75:f7:f3:
a1:63:fb:50:4a:cd:1e:9e:f7:d2:de:1d:4f:01:85:3d:c4:9f:
d3:50:4e:bb:a7:3f:c4:62:a0:cd:94:91:cd:86:8b:a1:3b:19:
50:da:5f:81:b4:21:4c:61:d2:08:5a:37:17:f7:99:d0:49:eb:
56:af:0c:b7:72:ce:9f:fb:57:12:36:79:19:77:90:d6:12:f5:
ff:32:7d:66:0a:28:4b:b3:f6:88:98:bf:04:fb:38:8a:a3:35:
ae:7e:62:b6:52:b0:fe:eb:3d:b3:6f:ff:4b:58:f5:fb:eb:54:
d7:4d:3d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:15:56 2026 by rpki-client