Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier: 58BC/E1t7XgjX64lSEluCf/6jvjd4uN12JKDJwlg7fI=
Subject key identifier: EB:E8:2C:F3:C6:27:B2:D0:70:17:D1:9D:BE:3F:70:54:C5:17:F7:F7
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 01A0C3D710DA0E9CBAD78C65EF5FF2C25AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 12:00:46 +0000
Manifest this update: Mon 21 Sep 2026 12:00:46 +0000
Manifest next update: Tue 22 Sep 2026 12:00:46 +0000
Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: GOxMx0hQ6VczLnlmr/FB0f8Bii66RFPUjYloNcQRL5U=)
2: KAtyNFRu0nGkFIQ31UZVhuZVup8.roa (hash: YYWx9qqk5yZ7cfiJEDfLmx13WTy9RC2Y4Yty+5dwt2A=)
3: Mx6UIzbNO3Bm-ZPN13wn4uov6Qg.roa (hash: KtCxVhRpFwySEkS5UZDhWr1MQTEnHKhuscd/bkCMZDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:10:da:0e:9c:ba:d7:8c:65:ef:5f:f2:c2:5a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Sep 21 12:00:46 2026 GMT
Not After : Sep 22 12:00:46 2026 GMT
Subject: CN=ebe82cf3c627b2d07017d19dbe3f7054c517f7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d9:75:7f:b5:b4:80:5d:df:1a:f0:59:30:08:
8b:78:5d:42:18:b5:ba:53:a0:8d:a8:5d:ae:cf:ee:
7d:8e:d0:4f:19:9b:b3:bd:3e:fe:d7:d8:a5:60:c1:
45:02:99:77:36:26:8a:fd:a4:26:f2:fb:1b:86:1c:
27:4c:5f:5c:fe:86:eb:07:36:04:48:a7:01:09:0c:
7a:99:f1:79:61:e9:5e:1b:28:a0:0b:76:80:a2:9b:
bb:80:fa:3d:cb:4b:92:f1:7c:46:dc:f9:ca:91:83:
c6:88:c1:e9:de:68:88:b3:2e:b1:5b:7d:98:38:83:
6f:0b:62:a0:80:6b:39:08:3d:89:16:c1:bb:90:ad:
3c:c7:cf:bb:d6:25:87:45:38:cc:5e:85:00:8e:93:
09:f4:af:0d:3a:5e:ea:52:3f:4c:d7:40:71:90:31:
13:a0:46:2c:61:89:6a:8a:a7:c6:72:0e:3f:3e:3f:
97:3b:7f:1e:82:90:8e:1e:23:77:07:fb:2b:8d:ca:
e2:4c:48:d3:a3:d7:36:02:29:00:1b:ef:1b:c9:62:
38:53:31:e1:5f:e1:f8:26:c9:d5:c2:1d:04:39:e1:
3e:40:94:7c:43:ee:77:56:c0:c3:56:ad:1f:8f:15:
0e:85:3f:7a:ee:05:0b:69:bb:e3:2d:2a:4d:ae:db:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E8:2C:F3:C6:27:B2:D0:70:17:D1:9D:BE:3F:70:54:C5:17:F7:F7
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:be:ca:71:f7:da:35:80:b2:79:9d:16:c0:7d:8b:4c:8a:49:
27:fa:20:7b:0f:67:c5:db:ec:a9:c1:49:c2:62:8c:8a:f6:6a:
a3:c1:98:bb:9a:db:d9:3d:30:5f:1e:8d:34:03:a2:a3:8d:15:
04:9c:ae:5e:e8:2a:da:4a:8b:f2:15:e5:1a:30:8d:cb:b5:9b:
20:14:b6:10:ae:06:51:77:6b:9e:ba:18:37:fd:c3:9c:e8:7a:
d3:47:1f:84:a1:51:af:4e:55:91:dd:4f:08:4a:42:68:df:c6:
6e:d9:57:e9:c6:95:36:ca:32:4c:4d:28:d5:76:5b:a4:cb:b9:
38:da:52:2f:81:7c:8b:cb:03:5e:ec:65:9a:d2:0b:4a:91:99:
3a:35:35:40:ac:f7:77:19:88:6d:0e:49:3b:4f:0b:dd:75:37:
21:e8:eb:b0:29:f6:2d:04:ac:0d:a9:79:2c:1c:59:89:3e:7e:
82:22:1c:1e:17:7e:d3:f4:0e:0e:4d:01:56:60:9c:36:00:d2:
b7:5e:27:72:f5:4e:f7:e4:11:f0:e0:0c:52:90:c1:4f:69:53:
24:4d:94:5e:0d:43:12:66:3c:3c:78:cf:ab:84:5c:ec:b0:96:
05:50:c3:3c:bd:f5:89:9e:0a:26:fa:f9:71:09:b5:d0:16:27:
97:e4:5d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:22:22 2026 by rpki-client