Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
File: DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json)
Hash identifier: /vGwf+wK2o3z8+LPyNZaUjEmzaACdlE4ge6JVcQWeIc=
Subject key identifier: 42:48:F6:A7:ED:37:38:B3:98:A0:01:7A:1D:53:0C:B0:FD:84:46:66
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial: 019CAA583E3B0755DF7E953E2C5D2D1DF9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
Manifest number: 0F2B
Signing time: Sun 01 Mar 2026 17:00:35 +0000
Manifest this update: Sun 01 Mar 2026 17:00:35 +0000
Manifest next update: Mon 02 Mar 2026 17:00:35 +0000
Files and hashes: 1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: h2FA0AUKsF92mxnnDyKYrdMNPW7JM0rZh57AEOehLP0=)
2: pEi1sXolFr3_KzzGy9GgxCb35YI.roa (hash: 0hWxK4UVYjDavdDARBqtyWujMUcunhSXg8YFegPVy8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:3e:3b:07:55:df:7e:95:3e:2c:5d:2d:1d:f9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Validity
Not Before: Mar 1 17:00:35 2026 GMT
Not After : Mar 2 17:00:35 2026 GMT
Subject: CN=4248f6a7ed3738b398a0017a1d530cb0fd844666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:7d:72:1d:2b:94:03:ed:81:bf:a5:0e:a4:
c3:11:38:f0:1d:7f:39:cb:d7:b5:cc:13:b8:93:d9:
45:bd:5c:2b:e5:2e:8c:88:eb:78:b9:c6:41:96:a0:
37:4d:9d:d0:fb:04:f9:ac:37:29:75:ce:13:ba:4b:
8f:a7:2b:f3:c6:80:3b:6d:5e:f4:58:4d:e2:14:00:
89:30:81:4b:0f:45:c7:93:2c:81:71:55:a2:c3:83:
02:02:63:d0:f8:b8:7f:1a:fd:cf:70:0e:76:df:48:
71:af:6f:19:62:fc:5b:3f:d9:f5:d2:2b:14:43:46:
f1:ba:ae:18:36:1d:68:d1:6e:76:d9:fa:09:60:c2:
67:97:27:ce:84:5c:ac:86:ec:75:f0:8b:7f:a2:f5:
15:f1:65:26:cb:ed:a7:95:8b:1b:ef:a2:dc:74:fb:
af:04:32:87:35:3b:88:84:32:91:da:ee:a3:41:62:
15:a0:4c:fc:e8:7a:27:bc:92:5f:52:16:dc:94:3a:
e0:3b:c8:e0:b1:3d:88:34:a3:a0:81:49:19:f1:11:
84:d6:77:25:1a:2c:6d:87:a9:c6:d3:5b:9e:6b:0c:
5d:55:d1:db:5c:0f:17:ad:92:54:e1:79:b4:d4:56:
61:06:54:60:8f:c8:83:db:ba:96:d0:7f:eb:b7:9b:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:48:F6:A7:ED:37:38:B3:98:A0:01:7A:1D:53:0C:B0:FD:84:46:66
X509v3 Authority Key Identifier:
keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:11:4e:be:57:ad:f6:78:e6:d0:e2:a4:0c:38:e9:91:17:00:
aa:78:f3:d4:34:62:38:40:e3:55:be:83:d0:a9:7c:53:9a:a3:
d3:02:1c:2e:1e:c5:75:fa:e6:a8:92:a9:eb:69:58:9f:51:fd:
08:65:6f:7f:91:9a:ee:a6:08:01:11:e9:30:c4:37:7f:3a:95:
10:87:1d:1b:52:62:e2:3e:70:c8:d4:d1:4a:10:d7:e3:dd:18:
5e:99:03:93:55:31:84:20:2a:64:3b:12:73:e4:45:9b:e8:58:
b6:9e:94:9c:a1:1b:49:7d:7f:d0:4c:e8:20:41:c3:c0:78:32:
b7:9b:65:0d:3f:38:28:0b:e8:70:d0:e5:ff:4a:9b:c4:2d:e7:
fe:ef:f4:17:33:b0:4b:b3:49:43:4f:13:17:39:58:c5:56:32:
bf:e8:13:24:5f:6e:dd:af:15:b2:45:2a:43:d5:5e:0e:8e:c6:
b4:6e:24:47:2f:4b:90:1a:7f:42:46:37:56:d6:d6:ed:15:8d:
6b:f4:72:2c:32:53:ec:ab:36:4f:37:9a:4c:d1:87:87:92:0a:
fc:2e:8d:f4:24:e6:a2:b1:3a:19:de:bd:7b:b0:9f:e6:7c:12:
43:8d:bf:f8:91:ea:b7:9c:d8:4a:49:1a:2b:e3:64:6e:ea:05:
5d:e5:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:48 2026 by rpki-client