Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
File: DNScoZAd8CCTDOlx9lzBgKP8voE.mft (raw, json)
Hash identifier: 0DuUfL6HPmtk0Y/o/jt5w/MR3qrdAKf0N6HzJUanrZk=
Subject key identifier: 18:D4:C7:67:5A:AB:E6:CD:8E:A9:23:ED:ED:00:72:07:82:52:C1:AE
Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Certificate serial: 019FAA19775890062F5B14CD2B2CAAC23BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 19:00:23 +0000
Manifest this update: Tue 28 Jul 2026 19:00:23 +0000
Manifest next update: Wed 29 Jul 2026 19:00:23 +0000
Files and hashes: 1: DNScoZAd8CCTDOlx9lzBgKP8voE.crl (hash: GM5u2LFQkniHwDP9bym9PmiRlBKSA9CpQ8thK5q4SWg=)
2: R1HqNhBgcIe-3oW62MxdKjDKqQw.roa (hash: qEknwbkXeioT3cO8P3jelWto+d9dLLFAHoISR08x8Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:77:58:90:06:2f:5b:14:cd:2b:2c:aa:c2:3b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Validity
Not Before: Jul 28 19:00:23 2026 GMT
Not After : Jul 29 19:00:23 2026 GMT
Subject: CN=18d4c7675aabe6cd8ea923eded0072078252c1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c7:62:bf:3a:af:b0:22:b9:53:a2:0f:85:af:
9b:63:63:f1:05:b6:5e:c1:5e:9a:59:89:5a:5d:33:
5e:20:4e:5b:23:a6:93:d9:a8:5c:86:e1:80:40:68:
65:1e:44:4d:9a:b4:8c:bd:4b:79:74:22:e5:a8:43:
5e:73:3e:23:38:13:a7:90:2f:94:99:f0:73:00:5c:
d2:82:26:9e:6a:22:03:6b:2e:66:96:26:b9:06:98:
6c:78:f2:68:5b:3d:7b:74:f8:85:b0:03:94:1f:ca:
13:8f:86:63:c4:e1:da:ec:dd:bf:4a:0f:b1:7e:26:
45:74:48:c4:4c:09:cd:75:07:dc:a8:15:4a:08:1e:
60:f6:db:83:41:d7:e0:68:ef:9a:43:aa:0e:e5:af:
95:92:56:60:b5:f5:bf:7d:11:9e:72:f9:39:27:0e:
0b:75:a4:25:01:6e:32:98:3b:4c:f5:61:df:94:d1:
9b:61:d2:63:f7:73:39:51:3f:88:eb:da:00:0d:33:
3a:0e:77:27:09:3c:8e:c9:86:9b:30:9d:75:93:15:
6a:a5:a2:fd:0b:21:6f:3d:73:09:c3:21:30:e0:1c:
6b:f0:1d:77:af:4a:f3:52:43:3e:65:58:05:6c:ad:
e3:ed:40:66:ab:a2:c4:3a:eb:9b:0a:44:a1:23:b6:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D4:C7:67:5A:AB:E6:CD:8E:A9:23:ED:ED:00:72:07:82:52:C1:AE
X509v3 Authority Key Identifier:
keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:94:4f:10:f3:2b:b6:5f:22:d5:ba:9f:a1:43:2c:ed:44:a3:
b1:f2:e1:ad:1c:1e:cf:f4:f9:94:d2:dc:c8:db:d5:67:4b:6d:
96:e5:30:fd:d5:5d:43:68:89:83:9e:08:92:6a:b7:0a:2f:ee:
b9:66:76:0f:df:93:7b:a7:6f:c9:05:e0:e5:d6:51:7b:14:82:
5a:52:a4:6d:dc:b5:00:52:9c:af:64:2d:61:be:63:6f:45:95:
8c:a9:03:1e:5f:fe:37:22:58:e7:8b:28:c9:3c:0b:bc:74:aa:
b2:ba:f5:42:7a:8b:e1:65:be:16:a6:b5:a9:63:92:00:c5:88:
15:dd:0a:7a:f4:99:3e:7a:da:8d:aa:ba:ff:e9:c1:e8:61:94:
04:55:ec:d2:42:9f:10:de:5b:ee:d9:1d:29:6f:2e:6e:2c:ec:
f1:ac:2f:91:29:ef:47:24:f7:0b:0b:4e:c4:f0:74:85:40:81:
9c:46:ed:23:02:99:32:d9:d8:29:74:33:1b:cf:f2:84:a5:de:
3a:c2:4d:2d:48:ce:f4:a4:1e:b6:00:b6:ed:37:b3:8a:85:fa:
af:2c:1c:64:d1:14:ab:69:7b:64:e3:2e:46:7e:14:0c:c1:5f:
ea:d5:6c:3a:d1:16:bb:78:30:2f:f2:01:db:97:22:0a:8d:45:
12:70:47:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:15 2026 by rpki-client