Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
File: DNScoZAd8CCTDOlx9lzBgKP8voE.mft (raw, json)
Hash identifier: df4PcEoCo7R89/WQQxfe0d2FVwDr9L4AJsw+4lQwBCY=
Subject key identifier: 9A:25:DA:D2:14:AA:5F:1E:1C:D3:41:AE:1F:C8:01:3A:AB:68:90:8B
Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Certificate serial: 01A0C7EA5773FC75A64B8CC865DA9F84FC16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 07:00:18 +0000
Manifest this update: Tue 22 Sep 2026 07:00:18 +0000
Manifest next update: Wed 23 Sep 2026 07:00:18 +0000
Files and hashes: 1: DNScoZAd8CCTDOlx9lzBgKP8voE.crl (hash: ZG5jmRjIqiqydwjP7NJghgOlWXrGtp6vIrRwU5y+v+M=)
2: R1HqNhBgcIe-3oW62MxdKjDKqQw.roa (hash: qEknwbkXeioT3cO8P3jelWto+d9dLLFAHoISR08x8Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:57:73:fc:75:a6:4b:8c:c8:65:da:9f:84:fc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Validity
Not Before: Sep 22 07:00:18 2026 GMT
Not After : Sep 23 07:00:18 2026 GMT
Subject: CN=9a25dad214aa5f1e1cd341ae1fc8013aab68908b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:f0:14:94:c4:48:74:2d:7d:d4:27:a5:b2:
89:60:48:5b:88:fa:50:58:fa:69:01:02:59:ee:8c:
a3:16:32:d6:11:a8:85:e9:4e:f9:3e:0c:bd:41:71:
bb:c8:87:d8:f4:27:06:2f:ec:f8:f0:12:09:5d:b7:
c4:ed:a0:a6:7a:ce:90:29:b2:c3:08:67:cb:df:35:
f6:7b:b6:e1:30:ca:13:d3:0f:fc:25:47:ef:c6:92:
50:4f:77:56:5d:b0:51:3b:ab:dc:74:1f:50:58:ff:
22:45:b7:83:32:d6:91:93:19:42:5f:b3:96:e3:e7:
fb:56:c9:b7:a6:b6:5b:3a:8f:c6:fe:9a:cd:f5:5a:
dd:2b:c9:72:fb:69:49:0f:b3:84:0f:b1:c8:4a:2f:
ae:99:2c:fb:8a:94:28:6b:d3:70:9a:ae:ff:ac:73:
6c:fa:cd:e4:7f:77:72:85:8e:d7:de:d6:67:39:ab:
8e:52:86:9d:e5:88:d9:f5:c1:41:30:cb:a2:38:a8:
e1:1a:72:d5:99:7a:06:20:e6:7d:47:2f:c8:c1:1b:
67:04:34:8b:35:89:67:f7:b0:97:54:15:77:84:03:
43:ac:ab:ef:c9:eb:15:da:59:48:7e:1f:ae:29:51:
38:db:ad:2c:7d:5e:c9:97:b6:0e:2f:e1:8e:f7:d1:
72:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:25:DA:D2:14:AA:5F:1E:1C:D3:41:AE:1F:C8:01:3A:AB:68:90:8B
X509v3 Authority Key Identifier:
keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cf:79:da:0c:5d:93:a6:d9:79:c4:5f:87:47:11:30:23:30:
2a:a1:e2:75:69:72:7b:f5:8a:99:8e:35:ce:4d:99:22:77:2d:
05:ac:bd:8c:a9:0a:ae:97:c5:aa:c3:44:5f:6d:50:5d:57:59:
da:31:69:6c:0d:6c:5b:0d:f5:dc:cc:80:9a:5a:ad:58:ab:48:
bd:90:4a:44:ad:df:93:54:20:37:88:e4:81:ed:39:da:4e:c9:
db:14:dc:28:3f:34:78:10:5a:63:31:60:a3:e7:db:20:38:07:
7c:30:66:0d:26:85:0e:48:83:9d:4d:ca:92:b8:1e:d4:30:c9:
00:32:95:b9:b9:8d:c6:7b:f4:c7:9c:ea:e7:68:2b:77:19:14:
a1:9b:00:dc:10:97:ea:2f:95:ed:c9:70:5f:4c:04:0c:7a:ac:
8b:e3:e3:95:49:d6:38:d7:cd:8d:64:92:36:9f:d6:94:f5:82:
f8:42:c5:2f:4c:96:75:c0:01:c8:95:c4:cd:96:ab:6c:90:e4:
f1:96:9a:d5:80:c7:9c:d7:3e:d3:f5:a4:a7:be:78:51:7e:95:
ce:91:cf:da:88:7f:80:fd:c6:f9:61:11:2b:17:64:7b:fa:ad:
22:50:d7:8e:aa:93:21:74:c5:36:eb:6a:41:93:3d:50:19:b1:
a0:19:ce:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:27:46 2026 by rpki-client