Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
File: DflWa2LehAS4VsVgBMxJvmITVOg.mft (raw, json)
Hash identifier: AZ0Q+IYgre/kMxgq3YC+z5qI6X5LV5U9eC3Bs7W6308=
Subject key identifier: 13:05:7E:59:DB:DA:4C:D4:58:7D:10:C4:22:EC:3B:99:F1:80:45:84
Authority key identifier: 0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
Certificate issuer: /CN=0df9566b62de8404b856c56004cc49be621354e8
Certificate serial: 019FAABE97DCD1DA19685A0E0639ACBFFEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
Manifest number: 012B
Signing time: Tue 28 Jul 2026 22:00:45 +0000
Manifest this update: Tue 28 Jul 2026 22:00:45 +0000
Manifest next update: Wed 29 Jul 2026 22:00:45 +0000
Files and hashes: 1: DflWa2LehAS4VsVgBMxJvmITVOg.crl (hash: uul9ZsZ2H7h3mQoRqzuKP7tqWs23vVrx2wZ8j/HZc6I=)
2: sxG-Ohcwvb8aZM2TpYd1NB5vOgY.asa (hash: vSd/IIQwZif93HYdwUlXhWDqa5hZsFOQGXaTzyxogbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:97:dc:d1:da:19:68:5a:0e:06:39:ac:bf:fe:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df9566b62de8404b856c56004cc49be621354e8
Validity
Not Before: Jul 28 22:00:45 2026 GMT
Not After : Jul 29 22:00:45 2026 GMT
Subject: CN=13057e59dbda4cd4587d10c422ec3b99f1804584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:f4:53:c2:39:a6:6d:69:ef:0c:ae:aa:1b:
3f:41:ed:f8:30:cf:0d:cc:26:57:03:80:db:fa:ac:
41:fe:5d:10:08:f9:00:77:b8:e6:09:26:d3:c4:a9:
42:ae:22:07:4c:ff:43:58:48:bc:eb:dd:4a:e8:01:
a5:52:24:fd:2a:f0:8b:b3:9a:62:9c:1f:5d:e6:40:
cb:a2:ea:7d:4d:58:6a:76:95:1d:4d:b1:8d:f0:46:
27:f4:01:c1:d6:b9:c0:78:5b:90:b2:16:fb:df:d7:
c2:c2:f1:7d:d6:79:66:a0:bd:9a:28:35:b5:ce:34:
ce:fb:6d:d1:c6:35:e3:da:8d:a6:c5:11:a8:5f:e4:
a8:b9:6c:54:49:cd:23:ce:0f:94:71:68:d5:56:0e:
c9:25:09:fe:e3:bf:5e:74:e3:27:41:bc:6d:ed:4d:
11:68:e2:a4:38:17:66:8b:8f:bf:be:1f:e1:3d:2c:
c4:f0:28:b0:03:e1:04:70:26:41:91:3a:04:02:0b:
96:77:76:d2:28:3e:84:ee:bd:02:8c:96:9b:a5:9c:
3e:7f:a0:cd:48:d2:34:88:6a:7e:3d:3a:cc:0d:ef:
a2:17:a3:87:ba:29:2a:3f:62:20:67:a3:ee:0a:36:
7a:fe:38:25:d4:e0:30:3a:39:b3:77:bb:7e:ad:9d:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:05:7E:59:DB:DA:4C:D4:58:7D:10:C4:22:EC:3B:99:F1:80:45:84
X509v3 Authority Key Identifier:
keyid:0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d6:4e:94:0a:b6:84:05:b8:73:68:e7:07:36:c7:18:2b:7d:
8e:78:d1:e7:32:fb:f2:ce:6b:39:2c:38:ab:50:18:31:0f:cb:
cd:fd:1d:e6:0d:64:ba:ee:de:9d:2e:3b:31:30:20:9f:48:b0:
c8:fc:56:7e:8c:a2:96:ec:c7:e1:74:39:56:06:82:c3:10:74:
7d:4d:b9:ef:2b:5a:c5:fa:2b:e6:52:3f:b7:a6:aa:e0:e6:25:
c3:36:e4:09:07:17:d0:d4:64:0f:1e:74:17:8b:a5:8a:ed:f4:
71:98:aa:71:23:40:cd:4b:2f:ab:c8:5e:0f:00:99:12:b0:65:
34:01:b1:1f:c9:41:87:ab:82:6f:db:5f:3f:c6:ac:a5:b9:ca:
62:b1:f3:63:77:bf:e1:63:4e:dc:8d:a7:08:10:de:08:11:a5:
57:ce:41:d7:f4:7c:72:2d:83:84:fc:cd:2c:58:e4:5e:0e:3a:
ad:5b:21:29:45:66:8d:14:cf:f0:8e:b1:90:a5:0d:2c:16:1c:
ac:73:c1:95:75:d7:87:9d:fb:36:b2:41:72:ea:71:2d:53:ad:
fd:73:5a:af:b5:49:14:ed:6c:39:88:59:e6:85:10:78:2b:ba:
ed:ad:f9:de:fe:04:13:a1:2e:6f:77:2e:40:70:50:00:1d:f9:
23:9e:55:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:41:04 2026 by rpki-client