Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
File: DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json)
Hash identifier: Z5mq4rPqmQa7z9zAEfyBPxPSbfeRYAJX2hxPc3Ih8ro=
Subject key identifier: 31:3B:17:21:79:C0:C8:6D:B5:EB:0A:40:7D:D5:18:B6:4E:78:DA:58
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Certificate issuer: /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial: 019EC06E15A145B9570060C628E938905F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
Manifest number: 0EE5
Signing time: Sat 13 Jun 2026 10:01:40 +0000
Manifest this update: Sat 13 Jun 2026 10:01:40 +0000
Manifest next update: Sun 14 Jun 2026 10:01:40 +0000
Files and hashes: 1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: VV1n411R9ptkjcRcvPvOPpsxYz38UIkYEfosgLL8vtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:15:a1:45:b9:57:00:60:c6:28:e9:38:90:5f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
Validity
Not Before: Jun 13 10:01:40 2026 GMT
Not After : Jun 14 10:01:40 2026 GMT
Subject: CN=313b172179c0c86db5eb0a407dd518b64e78da58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:19:b2:07:22:55:98:72:34:94:c6:fb:fd:
e5:c2:42:7a:f0:85:fd:c1:9e:28:18:f4:58:21:b6:
c9:02:57:f4:da:a9:7d:82:53:42:92:04:92:5b:45:
75:82:40:56:c2:66:20:26:09:7c:2c:aa:58:f3:da:
8b:27:be:42:10:4e:33:59:c0:1b:24:5f:2e:ee:72:
8f:99:f0:da:99:36:86:0e:f5:5a:eb:b6:5e:b9:79:
50:b2:18:b9:c1:90:a9:19:31:5b:5b:aa:a4:45:7e:
a3:34:8b:e4:d9:9b:5e:f1:3f:02:98:c4:50:51:f9:
59:b6:35:05:07:30:c0:23:d1:7d:3b:55:9d:7f:5e:
f1:e8:76:e8:14:39:5f:97:b9:fb:c1:7b:90:fb:90:
39:a5:00:f0:13:21:ab:32:a7:07:3c:35:19:7e:09:
cf:c4:92:81:1d:c7:f0:f2:7e:fd:fd:9a:ca:22:06:
37:f8:70:5a:a0:41:42:b9:f3:d2:0c:9b:89:8e:3c:
07:0c:ec:4a:dd:0a:0d:1f:88:50:76:1e:e7:2d:04:
22:da:d5:a5:1f:4a:5e:07:3b:8b:cf:7b:25:21:97:
f7:ed:00:66:1d:c5:f7:76:3f:73:6f:c7:38:1c:2f:
b2:ac:c7:ef:54:1a:5f:5e:de:c7:b5:91:a5:f5:ff:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3B:17:21:79:C0:C8:6D:B5:EB:0A:40:7D:D5:18:B6:4E:78:DA:58
X509v3 Authority Key Identifier:
keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fc:70:26:06:19:13:92:39:cf:e8:df:47:dc:50:2e:16:6e:
4c:14:e0:b2:85:53:9f:fb:de:7d:cb:c8:32:d9:43:59:84:7c:
c0:76:bb:c4:4b:a7:89:50:91:b6:5e:cf:66:18:22:57:4b:42:
d7:a0:cb:de:9e:55:55:1f:cc:c9:41:33:a3:84:8e:5a:c5:b3:
b5:da:00:33:8e:80:c9:44:91:2b:6c:8f:00:32:96:04:8f:7e:
45:44:cc:b0:98:df:37:e6:08:c5:a9:40:6d:4f:10:8e:d2:c2:
09:34:b2:9d:a4:f5:ed:d9:13:ff:36:55:d4:b1:17:d4:3b:7d:
1f:d6:19:c1:7b:d8:93:7f:3c:51:da:32:6a:38:c4:d6:48:e2:
d4:fa:bb:91:45:06:b0:ba:63:89:49:a5:4e:32:dd:ea:70:87:
c4:2c:86:0a:3d:26:36:66:a7:d5:44:2c:83:13:6b:e8:07:1b:
9e:72:2b:31:a8:46:1e:5a:75:90:ff:9a:db:86:a7:d3:e7:44:
c2:74:96:f1:95:96:66:6c:fe:25:73:55:63:be:b9:bc:e1:6c:
dc:8d:e2:dc:e8:3b:a0:b4:8f:33:10:31:0e:33:32:ea:1a:76:
e2:a3:b7:75:a1:54:58:b8:59:0e:69:e5:90:f9:fb:a9:69:ec:
9b:84:8e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:57:04 2026 by rpki-client