Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
File: DflWa2LehAS4VsVgBMxJvmITVOg.mft (raw, json)
Hash identifier: PeSInpjSI29/yAasNt8Iz6UdtI9wbi4chM4qBSMMTNI=
Subject key identifier: 7F:34:2D:DF:F9:1A:02:38:E3:AE:31:AD:64:17:12:73:2A:98:28:62
Authority key identifier: 0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
Certificate issuer: /CN=0df9566b62de8404b856c56004cc49be621354e8
Certificate serial: 01A0ED41B7F6FDE123798CA15AFAFC2C34DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
Manifest number: 01D2
Signing time: Tue 29 Sep 2026 13:01:42 +0000
Manifest this update: Tue 29 Sep 2026 13:01:42 +0000
Manifest next update: Wed 30 Sep 2026 13:01:42 +0000
Files and hashes: 1: DflWa2LehAS4VsVgBMxJvmITVOg.crl (hash: +GjUL5XJQG5zK764/dJtVlx7F7z7cLeye7qUsKCChO8=)
2: sxG-Ohcwvb8aZM2TpYd1NB5vOgY.asa (hash: vSd/IIQwZif93HYdwUlXhWDqa5hZsFOQGXaTzyxogbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:41:b7:f6:fd:e1:23:79:8c:a1:5a:fa:fc:2c:34:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df9566b62de8404b856c56004cc49be621354e8
Validity
Not Before: Sep 29 13:01:42 2026 GMT
Not After : Sep 30 13:01:42 2026 GMT
Subject: CN=7f342ddff91a0238e3ae31ad641712732a982862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0d:ae:79:0c:94:f6:63:22:9f:9a:2a:21:c2:
e1:f5:00:98:ec:ad:cb:42:5f:61:79:f9:f2:20:f8:
ee:80:85:a8:5d:ff:f6:54:ba:e7:09:fc:bf:65:da:
18:d7:1f:4f:f1:75:73:11:4a:31:1e:ac:ab:18:92:
58:e6:c6:8e:1b:d0:65:58:e8:3a:9e:df:cb:5f:9a:
80:93:93:c4:7b:61:98:dd:96:c4:bd:24:cb:68:bb:
43:fa:f0:54:c1:5a:87:49:93:29:53:da:01:2f:61:
34:6f:73:c5:1b:e6:62:e0:95:90:0a:58:fa:80:53:
e5:7c:80:3b:f0:8f:2a:0a:98:0c:27:2f:b7:c0:0a:
e6:36:4a:e4:17:d7:43:ef:0b:69:94:7a:39:7c:77:
a6:93:86:24:33:3c:0b:8b:64:0d:93:30:a5:f7:b6:
4f:95:81:45:66:1d:b9:1c:21:c5:bd:2d:88:79:9a:
2c:1b:f3:72:38:fd:54:1b:e6:1b:fd:84:26:ff:2b:
7d:15:be:95:0c:34:d0:3a:48:c5:7c:47:bc:ae:ac:
46:20:85:46:1a:28:95:31:60:9a:32:93:67:9c:88:
7a:4b:e1:c2:07:67:58:5b:e1:c7:9f:d1:53:2d:b4:
7f:4b:03:f1:0b:d6:cb:0d:42:6e:96:03:9b:ed:b1:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:34:2D:DF:F9:1A:02:38:E3:AE:31:AD:64:17:12:73:2A:98:28:62
X509v3 Authority Key Identifier:
keyid:0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:77:03:f6:aa:84:db:e0:f9:36:ef:4f:37:67:c4:7a:64:05:
68:83:49:4b:7b:29:18:89:2b:64:01:a8:18:64:1a:9e:23:9c:
bc:f7:18:9d:cb:a2:ff:c6:11:7d:df:21:4a:37:19:eb:6e:13:
ec:07:e0:ef:88:a0:3c:67:c8:4f:06:9b:63:cb:c9:63:f8:d3:
73:5b:54:70:b8:1f:1e:34:cb:b5:4d:ee:de:d6:e2:f8:88:ad:
a8:61:da:be:b0:f5:42:15:6d:5b:73:8b:35:f9:44:17:55:26:
01:04:a9:33:c5:51:89:ca:76:c8:17:61:e7:4c:ef:07:84:02:
26:70:e2:c9:38:4d:c8:41:9c:5b:ff:33:2b:f4:d5:42:97:51:
1a:b8:6d:00:e5:57:01:24:63:b5:a3:3a:79:ca:e1:1d:b2:6b:
d3:6b:48:b6:6c:12:4a:5b:eb:69:d3:09:73:32:18:dd:ef:9e:
ad:60:1c:ca:5b:2a:77:a7:a3:f2:a4:92:0d:6a:09:76:21:8e:
1e:a8:7f:dd:5e:2b:06:4a:66:81:5f:dc:2f:fd:fd:1c:ef:30:
55:8a:ac:7b:2a:2d:b8:d3:e9:69:ca:ed:c4:81:b7:31:20:46:
5a:76:13:48:f4:d5:d0:46:33:db:71:ce:33:66:5a:6b:63:c1:
0b:9f:70:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDtQbf2/eEjeYyhWvr8LDTaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZjk1NjZiNjJkZTg0MDRiODU2YzU2MDA0Y2M0OWJlNjIx
MzU0ZTgwHhcNMjYwOTI5MTMwMTQyWhcNMjYwOTMwMTMwMTQyWjAzMTEwLwYDVQQD
Eyg3ZjM0MmRkZmY5MWEwMjM4ZTNhZTMxYWQ2NDE3MTI3MzJhOTgyODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw2ueQyU9mMin5oqIcLh9QCY7K3L
Ql9hefnyIPjugIWoXf/2VLrnCfy/ZdoY1x9P8XVzEUoxHqyrGJJY5saOG9BlWOg6
nt/LX5qAk5PEe2GY3ZbEvSTLaLtD+vBUwVqHSZMpU9oBL2E0b3PFG+Zi4JWQClj6
gFPlfIA78I8qCpgMJy+3wArmNkrkF9dD7wtplHo5fHemk4YkMzwLi2QNkzCl97ZP
lYFFZh25HCHFvS2IeZosG/NyOP1UG+Yb/YQm/yt9Fb6VDDTQOkjFfEe8rqxGIIVG
GiiVMWCaMpNnnIh6S+HCB2dYW+HHn9FTLbR/SwPxC9bLDUJulgOb7bE4pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH80Ld/5GgI4464xrWQXEnMqmChiMB8GA1UdIwQY
MBaAFA35Vmti3oQEuFbFYATMSb5iE1ToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGZsV2EyTGVoQVM0VnNWZ0JNeEp2bUlUVk9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jNzkzNjctNGM3NC00ZGFlLWJiMzAt
ODgzZTRjODVlNGVlLzEvRGZsV2EyTGVoQVM0VnNWZ0JNeEp2bUlUVk9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jNzkzNjctNGM3NC00ZGFlLWJiMzAtODgzZTRjODVlNGVl
LzEvRGZsV2EyTGVoQVM0VnNWZ0JNeEp2bUlUVk9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFncD9qqE
2+D5Nu9PN2fEemQFaINJS3spGIkrZAGoGGQaniOcvPcYncui/8YRfd8hSjcZ624T
7Afg74igPGfITwabY8vJY/jTc1tUcLgfHjTLtU3u3tbi+IitqGHavrD1QhVtW3OL
NflEF1UmAQSpM8VRicp2yBdh50zvB4QCJnDiyThNyEGcW/8zK/TVQpdRGrhtAOVX
ASRjtaM6ecrhHbJr02tItmwSSlvradMJczIY3e+erWAcylsqd6ej8qSSDWoJdiGO
Hqh/3V4rBkpmgV/cL/39HO8wVYqseyotuNPpacrtxIG3MSBGWnYTSPTV0EYz23HO
M2Zaa2PBC59wHQ==
-----END CERTIFICATE-----
Generated at Wed Sep 30 01:59:28 2026 by rpki-client