Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
File: DflWa2LehAS4VsVgBMxJvmITVOg.mft (raw, json)
Hash identifier: gQ9P3x0WOM/2z91XrVirOFNzemeI9k2yhbC0obiFmo4=
Subject key identifier: 09:61:BD:06:99:97:F6:F1:72:81:55:0E:65:CF:11:47:8C:F5:9C:D7
Authority key identifier: 0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
Certificate issuer: /CN=0df9566b62de8404b856c56004cc49be621354e8
Certificate serial: 01A0EF2FB8F06F188EF58D2C93B2E455BC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
Manifest number: 01D3
Signing time: Tue 29 Sep 2026 22:01:17 +0000
Manifest this update: Tue 29 Sep 2026 22:01:17 +0000
Manifest next update: Wed 30 Sep 2026 22:01:17 +0000
Files and hashes: 1: DflWa2LehAS4VsVgBMxJvmITVOg.crl (hash: X7SeQjh3U7DbsW8YuwPYCrHbvCZ8dnxE/ae37UF/Bds=)
2: sxG-Ohcwvb8aZM2TpYd1NB5vOgY.asa (hash: vSd/IIQwZif93HYdwUlXhWDqa5hZsFOQGXaTzyxogbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:2f:b8:f0:6f:18:8e:f5:8d:2c:93:b2:e4:55:bc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df9566b62de8404b856c56004cc49be621354e8
Validity
Not Before: Sep 29 22:01:17 2026 GMT
Not After : Sep 30 22:01:17 2026 GMT
Subject: CN=0961bd069997f6f17281550e65cf11478cf59cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:77:8c:33:21:a6:72:95:ec:f3:43:2d:99:64:
ed:05:8b:19:31:43:6c:84:bf:80:07:ab:51:7d:23:
ad:90:50:5e:da:34:61:df:ba:0f:b1:8d:20:77:5d:
5b:c7:ee:0c:6f:98:27:64:2a:50:91:0a:c9:4c:65:
a8:34:30:0b:33:2e:d3:a4:7b:33:a2:6b:1a:8c:00:
09:67:22:27:38:b9:48:6e:c2:84:2f:0d:bf:30:32:
54:46:60:d0:ff:f3:16:33:44:1d:50:10:fe:fe:ca:
0d:64:51:b3:29:0d:6d:e9:d8:37:e1:ca:88:0e:ac:
ee:46:16:8d:41:98:79:62:13:f9:86:a3:e6:14:6d:
b2:79:d5:8f:72:dd:63:5e:69:cc:e1:9a:8a:2d:2d:
0c:a5:d2:3c:83:19:8b:ed:5f:50:47:a9:c2:44:e5:
c8:84:cd:ea:40:3d:b2:23:b5:b8:c9:38:87:16:66:
43:92:e0:6c:3c:fb:3b:56:5f:34:d0:7d:08:43:d3:
2a:d4:f0:33:0f:2d:61:04:bd:1d:b4:c0:50:56:1c:
cd:d4:24:67:b7:da:b5:17:5b:52:8c:70:15:dc:1c:
98:99:99:a5:a4:4c:86:e7:fa:2b:1c:e8:b3:ff:87:
fd:31:a7:bd:9e:95:47:db:63:a5:83:42:e3:44:f6:
45:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:61:BD:06:99:97:F6:F1:72:81:55:0E:65:CF:11:47:8C:F5:9C:D7
X509v3 Authority Key Identifier:
keyid:0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d7:ab:4e:0c:01:fe:b4:27:40:c2:08:32:9c:6b:b0:3a:c1:
8c:0c:4d:76:63:e1:cc:19:26:5a:69:71:ed:b9:8c:e6:de:5e:
78:4f:bf:32:0e:b5:8c:6b:47:a8:c1:f5:78:ce:49:a8:1f:bf:
10:95:ef:7a:08:2e:26:b4:2d:2e:16:b0:36:73:7c:5a:ca:08:
37:c5:1e:fb:95:71:23:6b:7d:86:43:26:6f:40:47:8a:63:d0:
68:88:ee:d1:64:bf:c2:eb:d9:4f:c9:7e:cc:2e:3f:47:50:a4:
38:84:88:c2:46:fb:1b:5b:aa:27:a4:2f:36:e0:6e:26:41:3f:
dc:d3:31:91:bd:96:cb:f7:cb:ed:4d:57:39:44:f3:b2:46:e2:
68:ff:4a:0c:e8:31:10:13:78:10:00:ed:33:da:5a:6e:4a:a0:
91:17:15:43:07:7f:97:87:c5:62:58:e3:ac:69:29:33:9b:e9:
b6:c5:5f:22:f1:39:c2:37:dc:82:77:cb:db:4e:80:d9:a9:e1:
05:69:d2:1c:4f:47:61:ea:94:73:1c:d2:11:f8:73:b6:fa:88:
3f:bd:6d:f6:63:90:80:cd:fa:05:3c:50:b9:a2:c2:be:c8:f3:
5e:ac:5f:af:01:74:3b:86:81:cf:45:a1:a2:8a:c6:8a:0b:70:
1d:1a:77:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 07:29:02 2026 by rpki-client