Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier: 81irqdObABiI11hQoAJAICZhvLDbtZBVnoOqXDLxDd0=
Subject key identifier: 3D:56:D0:50:26:23:6E:66:CF:36:5A:83:BA:6C:DF:70:FC:6D:72:70
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 019D9818F7AB2B641E66F9F3A5DC2E073AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number: 0C46
Signing time: Thu 16 Apr 2026 21:01:06 +0000
Manifest this update: Thu 16 Apr 2026 21:01:06 +0000
Manifest next update: Fri 17 Apr 2026 21:01:06 +0000
Files and hashes: 1: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: ZV6eiZoxlegi6ZHCrj/UNS1HEYbC9WadQS0koIlNce8=)
2: R9CKdSuhKcix03lDYUZNj_9bSZw.roa (hash: 25D9RZgSbgAoxxPe4MQJY7sqqlRu8rIg+8wl9bKE/EI=)
3: mq48_sBKvAEWvtf8WzXrPhnKlKI.roa (hash: 7dt1YErJg3/qsgZU38eup42hAog0One7x1CvO3l5p0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:f7:ab:2b:64:1e:66:f9:f3:a5:dc:2e:07:3a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Apr 16 21:01:06 2026 GMT
Not After : Apr 17 21:01:06 2026 GMT
Subject: CN=3d56d05026236e66cf365a83ba6cdf70fc6d7270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:52:c8:b4:d0:77:32:14:77:19:3a:94:41:
13:4f:28:d8:af:df:bb:21:8f:f4:04:54:4d:88:54:
3b:d9:c4:e8:d0:07:d9:c6:a3:1d:dd:55:6a:19:a9:
99:13:c9:5b:76:30:7d:09:fa:bf:fd:35:b9:41:f8:
83:63:5b:dd:86:cd:1b:ee:60:b2:72:5a:e8:1e:d0:
a2:24:05:2c:c4:18:da:f5:ed:d4:d9:17:b0:4d:c9:
52:9a:14:7f:8e:50:39:70:06:7d:ba:55:c5:4f:fe:
f0:f6:cd:fe:9f:7e:36:7f:4d:9d:97:64:78:c5:8e:
42:61:fa:db:18:21:e5:ad:ad:31:82:6f:a9:0a:84:
27:70:85:cb:74:d8:d3:4b:3b:3c:52:99:ed:e3:18:
5b:c3:19:35:ff:4c:ef:b6:af:82:dd:e3:97:2a:be:
5c:72:93:f6:2f:a8:b3:a1:1c:03:5e:4b:85:ef:d1:
08:fe:ba:4f:3b:2a:d5:52:0b:6c:e4:c6:e0:97:a8:
96:85:33:4a:e8:48:02:2a:14:35:f6:64:2c:a0:a8:
f8:30:9d:d9:70:81:c3:70:ea:a7:81:cd:03:81:5a:
12:2d:4f:83:17:f0:f7:77:eb:44:81:1f:64:9b:27:
ab:ae:d9:2f:18:63:05:38:d9:18:a9:9c:e7:80:9f:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:56:D0:50:26:23:6E:66:CF:36:5A:83:BA:6C:DF:70:FC:6D:72:70
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cd:e3:27:7b:5c:bd:a6:8b:bb:c0:bc:9e:62:9b:21:f3:3e:
5c:26:39:22:22:53:fd:92:15:f2:d4:b8:25:ba:fb:a3:81:ac:
e2:e5:4e:aa:65:fa:a9:c4:ac:a2:7a:50:4f:1e:33:89:ef:c4:
83:35:92:70:8b:b6:40:2f:69:ab:20:dd:bc:98:1c:af:eb:16:
e3:39:be:98:33:a7:5a:7b:7f:1e:4c:76:97:db:67:f2:ab:b3:
0c:19:86:db:59:63:2a:1a:38:2b:38:43:15:04:38:bf:8d:5e:
bc:6f:1d:47:b3:9b:11:d9:c6:07:a2:51:38:f5:b1:3a:6b:1f:
76:34:cd:c7:f5:71:03:41:f8:53:63:5d:30:5a:5e:22:4d:f3:
52:4a:e1:42:9a:bd:8b:a1:86:a3:0e:e7:c2:6b:54:1d:02:65:
e8:8a:74:cc:12:00:09:a0:b2:93:af:a9:3e:e8:5e:99:5d:77:
1e:d6:ff:b1:be:5f:17:c2:3d:d0:db:3e:c0:e8:c6:d0:7a:4b:
4f:e6:73:fc:dc:09:bd:62:2c:e6:77:c2:8e:39:b6:0a:14:7c:
87:93:d5:53:a0:f8:86:3a:14:d8:d0:d5:88:5a:24:b6:a0:91:
27:55:3a:e9:34:2e:1e:4d:a8:60:dc:72:2c:50:e7:d8:67:5f:
af:a6:d7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:23:28 2026 by rpki-client