Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
File: DNScoZAd8CCTDOlx9lzBgKP8voE.mft (raw, json)
Hash identifier: uleUKZOxV7LFD0IhmG/oT5i9dhomi8TU9DlVQTnPrew=
Subject key identifier: FF:6E:80:B1:42:9C:EA:1C:B4:9A:C6:DE:B5:2A:32:97:A9:DD:A7:A8
Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Certificate serial: 019EBE7F5713858535FA9D79E33A6974DB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 01:01:16 +0000
Manifest this update: Sat 13 Jun 2026 01:01:16 +0000
Manifest next update: Sun 14 Jun 2026 01:01:16 +0000
Files and hashes: 1: DNScoZAd8CCTDOlx9lzBgKP8voE.crl (hash: Zp3jDfABaPQ9ehrO7p+eBQYmLyVOse3pRdkmwIY9JAY=)
2: R1HqNhBgcIe-3oW62MxdKjDKqQw.roa (hash: qEknwbkXeioT3cO8P3jelWto+d9dLLFAHoISR08x8Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:57:13:85:85:35:fa:9d:79:e3:3a:69:74:db:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Validity
Not Before: Jun 13 01:01:16 2026 GMT
Not After : Jun 14 01:01:16 2026 GMT
Subject: CN=ff6e80b1429cea1cb49ac6deb52a3297a9dda7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:32:16:a6:b6:a4:0c:6a:0d:95:c1:31:8a:
c8:61:e2:7c:f2:0d:4c:a3:85:6f:dd:39:97:93:0e:
1c:da:ab:88:b0:dd:0b:3e:43:96:1c:05:2f:57:0f:
97:14:af:13:01:5a:64:5b:39:70:c5:98:ba:9d:54:
bb:2f:f8:01:0a:72:68:16:42:03:4d:63:49:29:5a:
cb:73:bd:f6:6b:61:d4:ef:58:68:6c:1b:78:bb:53:
72:ca:c9:d3:f5:4d:46:32:08:53:98:93:39:36:0c:
bb:a2:f1:02:ba:1f:3c:6c:f4:a3:a1:7b:82:4e:e3:
1a:08:28:97:f7:61:c7:d4:d1:24:ae:09:86:d5:84:
5f:d6:81:30:59:65:0b:b3:7c:53:f7:8d:62:52:af:
4f:e0:66:30:93:b0:c5:5b:8a:76:9a:b4:a0:9f:5f:
c3:b6:53:9f:d7:f4:08:ee:13:6c:b3:66:60:47:21:
38:b5:8e:42:dc:97:48:11:f7:2a:28:9b:f6:37:80:
0c:57:54:84:54:31:d2:07:c3:20:cd:57:7d:ab:b7:
57:97:2d:f5:ae:49:1e:3d:65:2c:94:fe:86:83:b7:
fe:e4:95:44:7f:47:06:25:cd:21:3b:cc:aa:f7:f7:
99:61:cd:7c:4b:93:a4:8a:e3:69:14:ca:18:86:d0:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6E:80:B1:42:9C:EA:1C:B4:9A:C6:DE:B5:2A:32:97:A9:DD:A7:A8
X509v3 Authority Key Identifier:
keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:90:74:e4:ad:b6:2f:ec:63:c5:66:1d:4e:1e:58:3f:bf:e0:
24:4c:d0:04:f9:54:fe:ba:fb:e4:1d:1e:2c:f9:c9:45:2f:e6:
df:c1:82:d7:a5:bb:3a:f6:ca:67:24:87:2b:fa:67:2f:29:34:
ed:99:47:24:a9:23:a0:5e:bf:60:00:11:a0:10:ca:23:25:a4:
e8:d1:db:cf:ae:69:49:b8:40:95:2b:34:37:fe:73:1d:44:7e:
58:82:67:ce:f2:91:d4:cf:31:ee:e1:27:cd:e7:4e:d6:12:c6:
85:93:0c:41:f7:89:ab:12:48:26:6a:5d:ac:10:55:e9:e0:01:
ef:c2:dd:2c:6f:6f:1f:e4:14:12:01:c0:52:82:0c:c9:fc:ec:
a8:c6:1b:19:d1:1d:b8:7b:24:9a:5e:fa:b4:27:0c:73:41:e0:
52:08:04:0a:36:c8:99:20:25:30:5c:03:03:29:5a:21:e1:79:
6b:b7:c9:d9:96:f3:88:12:5f:1d:4a:e8:0e:34:ef:c8:20:f7:
3a:46:03:e2:97:f3:f5:4f:a1:6e:14:36:39:82:4b:11:b4:07:
a7:8a:ee:08:80:2e:5e:7a:8f:44:88:95:87:8c:e7:3d:03:0e:
97:02:07:14:ee:4e:4c:94:97:9f:b4:93:56:d0:97:da:c6:34:
1f:b1:25:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:38:34 2026 by rpki-client