Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier: 9fNOTonpd06gXiXz+79Jkz3lZTmclFCjasscphcbB8U=
Subject key identifier: 46:90:BF:9F:B5:E3:73:FD:FA:06:CF:93:48:23:6F:08:5E:61:17:79
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 019CAC7E212457C5E3D4852D39AEFAFC46C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number: 0BCC
Signing time: Mon 02 Mar 2026 03:01:12 +0000
Manifest this update: Mon 02 Mar 2026 03:01:12 +0000
Manifest next update: Tue 03 Mar 2026 03:01:12 +0000
Files and hashes: 1: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: 6Dhd5WtBrcVfEfquezU8G1wSwzebg/VcNunn928qUXI=)
2: R9CKdSuhKcix03lDYUZNj_9bSZw.roa (hash: 25D9RZgSbgAoxxPe4MQJY7sqqlRu8rIg+8wl9bKE/EI=)
3: mq48_sBKvAEWvtf8WzXrPhnKlKI.roa (hash: 7dt1YErJg3/qsgZU38eup42hAog0One7x1CvO3l5p0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:21:24:57:c5:e3:d4:85:2d:39:ae:fa:fc:46:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Mar 2 03:01:12 2026 GMT
Not After : Mar 3 03:01:12 2026 GMT
Subject: CN=4690bf9fb5e373fdfa06cf9348236f085e611779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e5:bb:6d:05:8c:79:ca:56:9c:86:d4:60:bf:
0a:e0:75:d6:29:0a:73:88:98:61:97:d2:9a:a3:9a:
47:b7:ad:ef:34:83:c4:05:59:61:54:d1:20:f7:5c:
b7:5b:06:0d:9a:75:bb:b2:6c:70:4b:73:65:7e:26:
1a:bc:d5:bf:6c:0b:48:32:25:d8:84:a5:91:2b:6d:
90:22:b9:61:31:b2:87:d5:09:bc:54:4e:5e:4f:ea:
54:79:63:e3:11:22:59:82:70:96:c1:3a:3f:0c:e2:
7c:c1:a1:90:cc:00:c4:ef:6d:16:76:e5:7e:25:8b:
2d:12:53:cb:93:72:fe:b1:a6:ea:b0:a1:6a:22:39:
02:c0:5e:16:a5:90:0c:eb:80:30:c6:01:29:29:86:
cf:6d:7c:e8:bd:fb:d7:2c:a0:7c:72:d6:8e:9f:45:
04:97:c3:db:4b:9a:05:d3:8c:83:58:7e:d0:49:3c:
72:91:ab:9a:9d:d6:90:d1:a8:e1:a4:83:f1:35:1c:
4d:1b:58:24:c7:4e:cf:b5:ea:bc:51:c6:22:72:ad:
97:b2:8c:99:cf:93:16:7e:f7:7d:3a:72:9e:bd:42:
ba:87:5d:26:cf:04:f2:4b:bf:5d:ce:2c:4d:72:d7:
1c:db:84:71:21:a7:96:4e:36:70:c4:43:e6:7b:01:
1b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:90:BF:9F:B5:E3:73:FD:FA:06:CF:93:48:23:6F:08:5E:61:17:79
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7a:f4:6f:80:a6:66:b3:0c:2a:e6:10:61:77:5c:e6:03:e3:
85:88:24:e4:d1:c5:b3:81:6d:fe:63:b6:8a:da:fe:b8:e2:06:
d9:d0:13:2b:c3:b0:1a:d8:20:c6:2c:24:d1:d8:27:a5:83:db:
3a:52:40:32:91:37:6a:27:9a:1f:ce:9c:7f:3d:af:c2:99:4a:
a6:fd:8c:72:45:9e:75:cc:0f:76:a0:3c:6d:02:63:ac:f9:34:
bf:1e:82:5a:36:13:dc:f5:ef:a7:2f:1f:81:a8:35:d2:ee:65:
01:18:a0:6d:3d:2f:a7:c0:f0:d3:f9:24:0a:75:9d:35:7e:e4:
d2:b9:df:e7:cb:88:47:a4:61:a9:5f:07:73:f8:5f:56:66:17:
b7:af:86:ca:43:fb:f0:f9:93:e2:f4:2b:3a:12:8d:fd:dc:be:
93:0d:63:7f:b4:64:1b:b8:a4:83:7f:fe:61:bb:86:c3:a9:d7:
03:1d:49:3e:94:43:65:7d:73:46:33:26:a2:d3:70:8f:da:d6:
c2:de:6e:76:c5:7d:2f:a6:21:a4:84:a4:ac:d2:dc:d2:16:fb:
6f:26:cb:66:8b:a2:85:98:35:fc:89:65:d6:0b:48:83:b6:28:
cb:87:17:07:6c:b4:2e:7d:7c:8f:25:8f:81:36:ad:63:a8:8d:
1f:13:20:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:02 2026 by rpki-client