Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
File: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft (raw, json)
Hash identifier: ULHzArabXWxabgTu8QXBblF7LxI7rVK1eLahw4DJOag=
Subject key identifier: AE:BA:60:CD:12:23:A7:D6:91:64:77:67:F8:D6:65:B4:3D:2B:7C:97
Authority key identifier: 0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
Certificate issuer: /CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Certificate serial: 01A11E9B373254A379837A3D7EEAC5366040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
Manifest number: 1A25
Signing time: Fri 09 Oct 2026 03:00:50 +0000
Manifest this update: Fri 09 Oct 2026 03:00:50 +0000
Manifest next update: Sat 10 Oct 2026 03:00:50 +0000
Files and hashes: 1: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl (hash: Fn7HJ3bD4Xi/xZn7X/IkZHVruwFr9wFKioW9cA2uS10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:9b:37:32:54:a3:79:83:7a:3d:7e:ea:c5:36:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Validity
Not Before: Oct 9 03:00:50 2026 GMT
Not After : Oct 10 03:00:50 2026 GMT
Subject: CN=aeba60cd1223a7d691647767f8d665b43d2b7c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:35:a0:36:4b:19:d4:31:ca:05:3b:35:e9:
b5:4f:9a:f2:8e:31:1b:74:45:e6:f2:66:e1:8b:3c:
1c:30:be:47:92:b4:eb:cc:50:06:69:93:f6:ad:38:
52:be:e0:f3:8e:e4:38:a8:04:c6:2d:4b:b0:75:1e:
98:13:fc:9a:96:92:77:0c:57:72:c5:78:8b:f2:1c:
36:71:9e:fe:ad:28:be:26:24:6f:a0:6b:97:99:d1:
5e:c9:af:7d:90:78:cb:7f:e9:69:4c:01:3e:bf:dc:
25:be:87:cc:92:7d:1d:12:59:50:9c:0e:99:57:4d:
90:90:d5:3f:fe:8e:84:26:a6:40:c4:20:42:55:c2:
8e:88:ca:21:88:43:f7:56:cf:19:d7:c0:05:ca:54:
5f:30:5e:62:88:81:20:06:b7:ca:c5:aa:29:1d:7e:
32:83:20:0f:f9:d7:e1:9a:db:26:1a:c4:d4:5c:83:
84:be:7c:78:a9:bf:eb:13:0c:b3:5a:64:db:11:da:
bd:35:bd:9c:45:59:45:9c:0b:63:ea:29:b9:3b:56:
43:15:9d:bf:b0:16:dd:07:ab:7f:2a:51:d9:80:0b:
12:84:8f:f9:16:47:a8:26:7f:6b:4c:5e:ac:e0:2a:
9d:f2:ea:05:b6:11:fa:39:f9:02:d1:11:43:aa:c4:
d4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BA:60:CD:12:23:A7:D6:91:64:77:67:F8:D6:65:B4:3D:2B:7C:97
X509v3 Authority Key Identifier:
keyid:0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:90:53:e3:47:ae:71:f0:1e:83:5e:38:6a:f2:12:ff:e9:f1:
fd:12:38:88:f5:a0:22:f5:8d:13:ac:43:84:bd:b5:39:69:6e:
45:3e:49:5d:f8:0d:b4:ad:b8:89:69:68:8e:36:6a:48:aa:0d:
ea:ba:65:07:50:52:c7:1a:91:30:f6:a7:f1:9c:97:51:f0:65:
1a:ca:74:17:7b:bc:9b:de:55:9b:5e:02:bf:b3:e2:e1:32:bd:
88:56:70:12:ad:cd:59:2a:69:4b:eb:7a:7a:8a:fa:91:f4:26:
55:52:63:ec:26:7c:33:9f:82:7f:03:a2:86:8f:8a:e6:29:58:
b6:4f:32:63:f2:1d:0e:9d:37:8d:cc:a3:21:6c:71:36:13:39:
f1:e7:d3:46:43:03:d7:97:e9:f6:1a:e1:8e:15:c9:f3:ca:6d:
41:ee:a3:35:82:02:68:16:aa:2a:7e:60:05:a0:29:71:01:3b:
03:be:d7:05:da:b7:e7:50:13:14:e0:80:28:ad:31:55:5c:f4:
bf:04:3c:2f:1c:98:93:fd:74:a9:4d:3a:50:6c:5b:1c:22:0c:
ff:fe:66:69:d5:5a:cc:40:cf:a8:78:c4:c0:2d:76:6d:d4:e1:
56:6e:e0:df:d0:a6:6e:6f:28:7c:c6:90:7d:46:31:c4:0a:44:
70:2a:6d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 06:28:39 2026 by rpki-client