Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
File: DNCWnknJrnyl6POE4ZEvxzauwx0.mft (raw, json)
Hash identifier: Cz5YHe/cZg0CiLMUQTHwtDdrQcoTPgt6HPBiNthjYd0=
Subject key identifier: FA:02:84:69:64:13:5E:93:28:03:0F:0C:F6:43:DE:8B:06:C9:E7:A2
Authority key identifier: 0C:D0:96:9E:49:C9:AE:7C:A5:E8:F3:84:E1:91:2F:C7:36:AE:C3:1D
Certificate issuer: /CN=0cd0969e49c9ae7ca5e8f384e1912fc736aec31d
Certificate serial: 01A1366D328D7A2CAD085890AC640C23BD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
Manifest number: 011A
Signing time: Tue 13 Oct 2026 18:01:28 +0000
Manifest this update: Tue 13 Oct 2026 18:01:28 +0000
Manifest next update: Wed 14 Oct 2026 18:01:28 +0000
Files and hashes: 1: DNCWnknJrnyl6POE4ZEvxzauwx0.crl (hash: WMSffKhOiicp9kJZup6WwywqwKmPclNWie/sDK2POJY=)
2: QL2RZ2Q7sMvqAmtDAtbRFFttDqQ.roa (hash: 4wHUxK0fzTcnu97RI6Dg3YXNgmexEtc/7w7Ys0gTVow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:6d:32:8d:7a:2c:ad:08:58:90:ac:64:0c:23:bd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd0969e49c9ae7ca5e8f384e1912fc736aec31d
Validity
Not Before: Oct 13 18:01:28 2026 GMT
Not After : Oct 14 18:01:28 2026 GMT
Subject: CN=fa02846964135e9328030f0cf643de8b06c9e7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f7:9a:26:11:5d:8e:21:7d:42:42:31:dd:b3:
3a:0a:ac:d5:b8:24:a6:57:d0:2c:0d:7e:a1:5f:ff:
05:76:84:b1:38:74:3d:03:58:26:7c:a8:65:21:35:
23:8a:aa:78:d0:5d:59:b0:ff:70:16:45:88:de:bb:
15:5e:b4:9a:32:79:fc:e6:e2:78:5a:c6:92:c5:fa:
f2:d8:ec:70:ff:db:f5:b6:b6:97:d6:93:fe:0b:4c:
7d:28:0f:50:d2:80:2e:59:2c:1e:31:1d:8c:2c:7d:
c3:a8:bf:10:ed:b4:36:c5:fb:a8:99:4f:81:5b:43:
5f:39:a7:83:c2:d1:b8:d3:67:f5:6e:ff:6e:23:57:
76:a1:cb:81:da:57:cc:03:f9:ba:18:df:07:38:92:
9a:81:b9:1a:05:0b:00:9b:62:33:1c:fe:d6:2f:29:
e9:b7:df:57:8d:d0:b4:9c:40:47:b5:a3:88:40:fb:
a3:70:21:55:50:0e:37:e1:b6:ce:f4:22:86:e6:1f:
33:fd:15:3e:05:60:bb:ce:a9:74:8d:13:68:f1:00:
83:a6:7b:86:4c:73:58:ff:af:4e:eb:bb:4b:66:3c:
26:d8:5a:9b:b1:88:ce:d7:28:31:85:c8:de:d9:7b:
29:df:a6:4e:b8:cc:57:d8:be:8b:35:f8:f8:8e:22:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:02:84:69:64:13:5E:93:28:03:0F:0C:F6:43:DE:8B:06:C9:E7:A2
X509v3 Authority Key Identifier:
keyid:0C:D0:96:9E:49:C9:AE:7C:A5:E8:F3:84:E1:91:2F:C7:36:AE:C3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4e:06:40:99:d4:7f:9f:aa:51:cb:3a:17:fc:b9:17:b7:c6:
f9:8b:e3:d6:32:d5:81:75:26:c4:d3:7a:2f:a0:95:3e:36:15:
44:04:56:b7:04:6d:5b:79:91:39:92:f8:b9:c7:58:04:41:08:
6b:03:f5:d4:c7:d2:5e:bb:e4:a7:5b:ec:ad:2f:00:a8:0b:42:
a2:3a:7a:f4:e4:6a:70:64:56:34:30:bb:6a:64:8a:39:42:d0:
64:9e:5a:4d:b8:b2:4f:97:7c:92:24:89:1d:0d:ff:40:d1:1b:
82:d8:2a:3a:45:df:d1:c4:b3:cf:ec:bb:7e:79:3d:c2:05:4a:
42:66:9f:1c:dd:ff:b7:aa:a3:cd:38:de:ea:07:6e:ed:77:33:
82:2f:99:cd:c6:3a:aa:bc:3d:6f:43:57:a5:63:50:10:08:1a:
b8:35:08:fb:26:42:8c:be:a5:35:96:da:17:81:c2:c4:86:fb:
a8:66:17:22:6e:3f:a8:9e:b2:22:dc:91:94:c6:68:a5:d1:b9:
5f:39:cd:49:44:b5:05:e8:ec:d2:e5:6d:ff:53:10:f9:08:de:
f6:1a:3f:1d:0c:59:b0:8a:51:45:80:74:ca:ea:52:0d:31:fa:
35:3c:39:7a:7c:a7:19:13:22:f3:41:ae:6d:c7:bf:80:dd:0f:
fc:a9:07:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:38:30 2026 by rpki-client