Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier: +XHqvlWrq0RXJvBQKBxcdlwboQqYliiPR68zZrrsUiI=
Subject key identifier: 62:22:F8:79:77:F2:A2:86:D0:E5:6D:E4:4C:20:1F:DA:C6:E6:64:6E
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial: 019D9A3DF15A137D32F16914863FB6254997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number: 040F
Signing time: Fri 17 Apr 2026 07:00:43 +0000
Manifest this update: Fri 17 Apr 2026 07:00:43 +0000
Manifest next update: Sat 18 Apr 2026 07:00:43 +0000
Files and hashes: 1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: bNPaAIEm33SSENh3YfVu0LD0wlmsiMjzA//j2J2VI68=)
2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:f1:5a:13:7d:32:f1:69:14:86:3f:b6:25:49:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Validity
Not Before: Apr 17 07:00:43 2026 GMT
Not After : Apr 18 07:00:43 2026 GMT
Subject: CN=6222f87977f2a286d0e56de44c201fdac6e6646e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:58:a6:c3:de:1d:31:b6:be:51:ad:75:6c:
b8:94:cd:3f:0f:29:55:9e:a0:c1:54:2d:75:f7:c7:
6a:ee:88:97:81:e7:f3:91:ed:d0:a3:62:01:b7:6b:
f3:9e:3f:6a:7e:8e:dd:ac:34:6d:59:89:9c:1a:43:
ad:f7:a3:a6:15:49:14:07:68:ed:ed:19:94:52:51:
a1:0f:63:ed:ce:6c:54:b1:6a:47:b1:bd:69:cd:1d:
05:6a:6d:f8:ec:65:05:0a:78:18:37:6b:94:94:d9:
16:ad:64:02:bd:7b:76:08:9a:29:49:e4:ab:f0:85:
d1:4f:f8:7d:7a:35:0e:31:ab:08:d3:83:c0:83:d9:
f4:2c:67:cd:67:ef:64:7b:a2:98:59:d8:2f:01:f6:
6a:e7:7a:bb:7a:56:34:33:ab:52:d0:b3:80:6a:b6:
aa:b8:b9:ad:94:46:eb:30:3d:8f:11:c3:2b:91:5f:
23:d0:00:79:2a:24:1f:91:3f:56:3f:e5:13:bc:80:
d1:3e:ae:74:4f:3e:20:ad:41:5a:d6:0f:a1:81:48:
6b:0c:72:52:f5:62:52:1c:d6:ff:8e:42:0b:35:2e:
48:e3:10:88:0b:39:36:e2:5e:37:e1:0c:99:29:bd:
fd:45:0e:5c:f8:4c:42:55:50:c4:3d:d4:31:1d:b1:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:22:F8:79:77:F2:A2:86:D0:E5:6D:E4:4C:20:1F:DA:C6:E6:64:6E
X509v3 Authority Key Identifier:
keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:57:ba:ae:c1:a6:65:41:1d:e2:f4:85:46:ff:5f:71:17:08:
0a:f9:52:06:a6:73:3b:16:01:a1:d0:30:48:ad:9b:82:5d:20:
93:17:1d:96:42:d2:c2:22:f1:b5:92:ce:8e:29:1b:e0:d6:14:
fa:cf:cd:22:21:c8:8d:b9:40:55:85:e9:8d:fd:f7:ab:33:9b:
96:93:be:0c:13:ee:f4:aa:7a:52:f8:69:f3:37:b2:26:d4:2c:
0c:3e:2b:5c:18:d4:83:00:ab:ca:43:56:7a:21:10:40:b8:9d:
ba:99:54:25:8e:b3:a1:b5:0d:03:7c:d6:bf:be:64:a8:28:63:
99:a5:81:90:25:4b:ba:4f:6b:a8:d8:bf:8d:d5:0f:d9:94:10:
c4:7a:a0:37:14:76:64:68:31:e3:74:85:cf:85:ca:75:65:8f:
5f:85:3a:32:36:1e:2a:90:cc:c5:12:cb:59:2d:fb:5c:bd:53:
a1:6c:45:74:94:d1:c9:cd:a5:f4:24:2e:61:51:8b:73:fc:1a:
e5:11:d0:40:41:57:1b:7b:33:7b:06:25:31:18:b9:f6:4e:85:
cb:e1:7a:ce:79:0e:c2:ce:be:e6:dd:4b:b1:d1:c6:7a:f9:df:
dd:45:bc:dd:70:43:34:85:95:fa:66:d7:08:4e:f6:47:1f:55:
05:bb:26:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:33:21 2026 by rpki-client