Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
File: DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json)
Hash identifier: 7i4+IT2u7QEL36I/WIT7k0vj4SZq+C+QQ/3Q9SOODbU=
Subject key identifier: CF:43:E1:55:92:50:89:4A:8E:D8:59:44:F9:00:72:E0:66:14:27:80
Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
Certificate issuer: /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Certificate serial: 019CAB6B3CB13AF7C16AACFA057A2C7DF962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
Manifest number: 07B0
Signing time: Sun 01 Mar 2026 22:00:57 +0000
Manifest this update: Sun 01 Mar 2026 22:00:57 +0000
Manifest next update: Mon 02 Mar 2026 22:00:57 +0000
Files and hashes: 1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: cXzRGj1iFQydeM6nwTUTjw9NxRFD2l38XJD0QHgB6wQ=)
2: ItFf5mGxUD7KxGy789UtNATPKKo.roa (hash: q6yJcUukZanUDWbF7+j0aEo4I20oQqnK0aRmb9zfRQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:3c:b1:3a:f7:c1:6a:ac:fa:05:7a:2c:7d:f9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Validity
Not Before: Mar 1 22:00:57 2026 GMT
Not After : Mar 2 22:00:57 2026 GMT
Subject: CN=cf43e1559250894a8ed85944f90072e066142780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:f2:57:e1:4a:36:ed:b3:c3:26:d3:60:ef:
f6:9c:b5:74:61:4a:37:ef:9a:43:80:42:ba:43:40:
9f:3c:a5:98:5c:98:69:f6:96:77:80:45:93:81:51:
fa:e8:6a:ab:58:0e:3c:6e:32:21:8b:c0:10:9b:6b:
30:36:1d:db:68:b4:c9:9f:47:ad:2e:1e:d4:b7:02:
50:e3:0a:31:7a:03:03:f7:f9:2e:97:ac:26:1a:f5:
9a:dc:d6:47:30:56:3c:36:64:04:45:5c:eb:2c:dc:
90:e9:66:f2:f1:c0:92:08:64:59:f5:3c:2e:08:d5:
a6:65:7b:9b:b6:1f:28:5a:2f:43:70:f4:19:14:69:
4d:a9:eb:ee:ca:e4:8a:b0:e1:bc:80:11:3b:b8:d3:
dd:0f:02:42:82:97:a9:ba:c7:fa:c3:0f:51:d5:3f:
94:3f:af:c6:68:bf:9a:a4:69:e0:d8:25:03:d4:8c:
f6:51:5e:69:98:42:3c:b6:fb:de:d9:04:0a:90:2b:
25:00:77:16:f5:ba:33:b2:d6:fb:73:e5:4e:a1:92:
20:28:da:b9:1b:b9:bb:03:b9:b9:0a:84:01:9c:17:
b9:d6:69:11:48:1d:68:ed:ba:3c:12:29:3f:75:16:
c0:0d:0f:7e:69:94:f4:f6:24:30:21:c1:f0:c0:b8:
c9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:43:E1:55:92:50:89:4A:8E:D8:59:44:F9:00:72:E0:66:14:27:80
X509v3 Authority Key Identifier:
keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2b:08:f6:25:f2:62:ff:80:58:de:e5:24:b5:6b:d6:ab:a5:
28:25:02:ed:e5:9b:13:23:54:c2:1e:3a:27:fa:7c:06:fe:ba:
97:27:44:5d:32:ba:ba:dd:08:9e:88:8b:e8:1f:25:12:3c:19:
1e:6c:4c:40:f0:0e:d6:f2:42:5b:d9:fb:bd:f3:29:c3:34:b1:
fd:b0:be:7b:7f:84:3c:20:5d:e3:51:3d:4d:3b:6c:15:83:91:
5a:6a:19:38:91:83:7a:87:f9:82:e8:56:ec:fb:2b:54:3b:33:
af:a7:de:86:dc:19:8f:ee:e9:67:79:7b:5a:a6:39:04:85:8d:
a9:be:9c:db:6c:89:29:2f:c8:cd:ec:0e:0d:f1:72:e9:db:ad:
c2:b0:85:27:6e:21:d4:e5:c9:d2:1b:f3:75:30:a8:7a:6e:a8:
a5:88:64:23:b4:8c:bb:91:71:f7:c2:a6:60:66:07:37:9d:f8:
80:7e:8f:b5:a3:fe:2d:d8:4f:05:c1:55:ce:f6:80:64:af:2a:
63:47:cd:5b:ce:66:41:e1:4a:97:57:dd:2b:85:25:3c:40:9e:
e1:b1:f1:1c:84:ee:71:ac:bd:d4:f7:37:72:49:60:22:8f:3e:
f3:ea:e2:96:68:de:5c:1a:af:d6:72:85:8e:f3:4d:1e:86:6c:
1b:72:96:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:10 2026 by rpki-client