Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
File: DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json)
Hash identifier: 5skC0MNERvBb5DCP8o8Cc4Ahv4PfuEaoTuZ5BOnM/rA=
Subject key identifier: 69:B0:61:C5:CB:C7:28:2A:DC:DB:F6:A8:5C:B9:0E:74:F3:BE:DC:52
Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
Certificate issuer: /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Certificate serial: 01A1C6D64205DD8DA955EACE2E54D896365E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
Manifest number: 0A55
Signing time: Tue 10 Nov 2026 19:01:32 +0000
Manifest this update: Tue 10 Nov 2026 19:01:32 +0000
Manifest next update: Wed 11 Nov 2026 19:01:32 +0000
Files and hashes: 1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: l8cOS5RdEkOSuxRmxPHNBcVwVOv3htyvCBZjOvl35VM=)
2: ItFf5mGxUD7KxGy789UtNATPKKo.roa (hash: q6yJcUukZanUDWbF7+j0aEo4I20oQqnK0aRmb9zfRQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:d6:42:05:dd:8d:a9:55:ea:ce:2e:54:d8:96:36:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Validity
Not Before: Nov 10 19:01:32 2026 GMT
Not After : Nov 11 19:01:32 2026 GMT
Subject: CN=69b061c5cbc7282adcdbf6a85cb90e74f3bedc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:07:26:8e:1f:ee:b5:9a:0c:81:57:44:5c:
b1:80:35:68:ef:c7:d8:f1:6c:e7:c6:5e:d3:60:80:
c6:30:76:93:2d:1b:dd:82:c9:14:0b:ef:4e:91:76:
99:25:3f:e3:77:87:7d:5b:76:1d:d2:64:b7:b9:a8:
e7:4a:b0:24:af:b3:a1:ba:6d:7e:cb:fe:8c:69:1a:
59:11:ac:42:ab:4b:b8:78:d9:fd:ca:0a:e5:fb:db:
38:bf:85:9e:10:9a:ff:2c:8b:ff:16:22:b0:57:74:
33:fe:34:d7:ec:97:61:6e:cb:5c:b0:31:16:51:4f:
bb:df:f0:63:c0:ee:93:8a:50:0b:d0:f2:0a:ab:51:
0d:13:f2:88:63:c6:f4:04:51:49:33:59:27:6b:7f:
bb:78:f3:db:8e:a2:c5:07:f0:01:2a:87:5c:e1:57:
b3:e6:9f:e2:31:58:37:7a:e4:0d:89:20:64:90:c4:
64:23:32:44:62:4e:db:4b:15:87:ac:f5:16:66:44:
9a:5b:9b:8a:f8:f9:4e:9e:45:c5:5a:ea:29:a7:7a:
4f:bd:f6:99:d8:35:4b:73:c4:66:c0:3d:02:5c:a6:
4c:c9:99:d3:8c:7d:ec:7a:be:c1:49:0f:9f:6a:c2:
db:59:7d:50:8c:ac:ab:a8:e5:50:53:9b:8e:f0:1a:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B0:61:C5:CB:C7:28:2A:DC:DB:F6:A8:5C:B9:0E:74:F3:BE:DC:52
X509v3 Authority Key Identifier:
keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:22:3c:9c:57:26:f5:d2:37:6f:2d:88:17:3e:f1:7d:e3:19:
c2:8d:0d:a7:e0:68:96:71:a6:1c:c0:58:b2:a2:3a:5b:4e:da:
ab:f6:c9:a4:b3:38:45:7b:6d:d1:28:9b:40:64:b2:41:43:d2:
9d:6e:cb:d5:b2:eb:3c:36:a9:77:e9:31:b4:1c:95:13:74:ec:
d3:ae:7d:5d:2e:c8:58:1f:4d:fe:f2:a8:71:5c:dd:27:b8:ec:
bb:e9:b9:95:ad:cc:5b:e7:41:50:e8:fd:ed:a0:14:2d:f5:26:
7f:63:57:1e:a5:a8:ea:e2:f3:e4:6b:96:a8:a5:42:e8:66:66:
12:48:5c:c4:93:29:5a:7d:e2:a7:97:92:f6:6a:d5:a3:e2:ba:
72:4a:1c:ab:0a:49:84:c3:f2:49:47:b9:36:67:f7:3f:3f:3d:
52:33:67:bc:e3:17:21:d1:06:26:c0:a4:74:c3:24:f2:fd:e4:
e9:e5:05:59:58:d3:27:a3:d0:c3:92:77:da:b8:e2:94:55:9a:
72:65:08:1d:0a:63:ab:18:7d:e4:64:dd:8c:b5:98:c1:df:81:
69:3b:72:36:fd:d9:15:b5:e2:f0:2c:a9:bf:fd:65:e5:20:37:
35:ef:47:76:6f:ed:5e:1d:44:ae:cd:11:e7:36:eb:76:e5:09:
3e:f7:c4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 00:24:31 2026 by rpki-client