Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
File: DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json)
Hash identifier: +9GJsr50NeDLro09i32neL6p8XpJwUoz4xY9vQcI2tw=
Subject key identifier: 4A:5A:E0:D7:B5:87:BE:04:59:9B:12:D9:A1:47:FE:3C:B8:BB:CB:F0
Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
Certificate issuer: /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Certificate serial: 019EBE7EEE54F5BE15727351D6FB0BE15136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
Manifest number: 08C3
Signing time: Sat 13 Jun 2026 01:00:50 +0000
Manifest this update: Sat 13 Jun 2026 01:00:50 +0000
Manifest next update: Sun 14 Jun 2026 01:00:50 +0000
Files and hashes: 1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: z+M2ha2zDj2WigK1O4TbdHRPTcxkCoeAtIW7h0AXDdo=)
2: ItFf5mGxUD7KxGy789UtNATPKKo.roa (hash: q6yJcUukZanUDWbF7+j0aEo4I20oQqnK0aRmb9zfRQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:ee:54:f5:be:15:72:73:51:d6:fb:0b:e1:51:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Validity
Not Before: Jun 13 01:00:50 2026 GMT
Not After : Jun 14 01:00:50 2026 GMT
Subject: CN=4a5ae0d7b587be04599b12d9a147fe3cb8bbcbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:9d:39:6e:f1:50:f7:77:23:31:d4:d3:80:
5c:0c:e6:09:48:8c:a7:df:86:ed:46:56:01:14:ce:
84:19:91:24:3f:01:84:ed:01:e3:ce:8a:9f:9b:62:
2a:bc:4e:c2:4d:ec:da:e0:5d:41:9c:1c:75:25:25:
32:16:d5:23:87:af:47:2d:37:6f:89:9a:68:b7:20:
c3:9f:db:18:8c:96:eb:ca:1f:4b:82:fe:9e:79:01:
89:a2:a7:7a:60:0b:d8:e0:2e:3f:d1:fa:a8:e8:d2:
af:36:6d:10:0d:55:69:59:f5:1f:ec:76:03:61:a6:
28:82:ab:22:4d:70:5c:f1:39:4d:18:de:eb:a4:da:
5a:dc:8e:15:f2:3a:b2:ae:ed:34:aa:bf:7a:57:2a:
5e:99:7a:8b:9c:6d:57:66:29:7b:11:d2:25:8d:fc:
bc:58:d1:2d:26:ee:5d:c7:d8:af:c6:5d:82:47:cb:
d4:4c:23:c1:63:97:ec:4c:87:2b:af:02:6c:ea:0d:
c1:5a:1a:c6:2c:92:41:88:cf:e0:a0:0b:78:8a:b4:
17:fd:57:06:3a:a4:74:6c:b7:58:22:68:f8:54:d2:
65:a1:df:54:6f:b4:a8:84:e4:b3:97:0b:65:45:da:
0b:a7:45:e9:15:9f:4f:36:dd:05:ff:dc:ba:5b:7a:
33:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5A:E0:D7:B5:87:BE:04:59:9B:12:D9:A1:47:FE:3C:B8:BB:CB:F0
X509v3 Authority Key Identifier:
keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8f:32:42:0d:8a:b4:e3:7f:5a:a6:77:c7:91:f1:3a:cf:77:
d7:42:0a:09:26:3b:48:42:44:c9:77:07:c2:85:62:b5:b4:7a:
aa:e7:11:89:fa:5a:db:e9:86:75:1c:2b:38:51:51:80:5f:98:
fe:eb:eb:1c:4b:1b:41:ef:07:73:0e:09:77:3b:c4:79:69:20:
82:08:08:e8:99:2f:6f:2b:ef:e2:93:60:0d:ed:f7:28:4a:80:
ec:1a:e0:62:16:71:cf:73:72:d4:fc:7f:77:01:cf:5a:55:7d:
44:d4:74:85:e4:e1:5d:42:48:93:52:45:a5:30:ac:7a:eb:06:
e5:bf:27:dc:73:79:91:0d:6a:72:91:fe:54:ed:fd:f9:13:11:
9e:ad:74:81:47:10:31:c0:09:69:cc:f3:78:aa:94:4e:4f:e2:
ed:d8:2b:7d:d8:1a:ed:38:be:cf:0b:ae:7d:63:b4:bd:85:f5:
9b:90:24:1e:4e:b5:8b:68:fe:6b:41:95:50:9b:ff:43:8d:72:
bc:a2:96:f7:10:79:45:ae:0d:b7:48:65:14:9a:50:fb:c2:64:
eb:c6:f3:13:78:a1:7b:b8:6a:e7:07:12:b5:60:11:ba:f0:1f:
84:c7:41:84:67:bd:a8:d0:60:7a:a2:20:39:42:43:47:c7:74:
e1:75:54:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:17:11 2026 by rpki-client