Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
File: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json)
Hash identifier: dnqvN9tgf3G3E4bWxhltx6yTylP3tRHoddFGktek8kc=
Subject key identifier: D9:49:F4:06:90:CF:0E:C5:09:65:84:A3:81:1D:5F:3F:38:1C:D3:F6
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial: 019CAC0FFA0B2954E2CEC64A72770991A46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 01:00:54 +0000
Manifest this update: Mon 02 Mar 2026 01:00:54 +0000
Manifest next update: Tue 03 Mar 2026 01:00:54 +0000
Files and hashes: 1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: sHLLmIWv93HvSMoSp/M5x+Wr/44yka2cEC5YKNG9+4M=)
2: qopqpOjSigcAgnh4q3o38zGjwNA.roa (hash: EBQgdsC6JJfdJnKh94uu6CL6R7A3pzSO9sS4FBZtJ/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:fa:0b:29:54:e2:ce:c6:4a:72:77:09:91:a4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
Validity
Not Before: Mar 2 01:00:54 2026 GMT
Not After : Mar 3 01:00:54 2026 GMT
Subject: CN=d949f40690cf0ec5096584a3811d5f3f381cd3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:6e:88:13:68:51:81:ce:f4:ae:b2:78:d3:
bd:50:13:03:5d:1a:da:e0:dd:f6:5c:6e:9b:76:68:
7b:20:c3:21:f8:e5:e8:8f:03:a1:12:ce:46:ae:de:
6b:07:75:e6:d9:84:fe:75:ee:3f:4c:42:ec:aa:40:
7b:13:4f:73:8b:e4:3c:b3:10:3a:36:f0:0d:4f:d2:
54:02:d6:95:41:0b:f9:10:ad:b8:90:91:16:bd:9b:
5f:52:af:16:2c:b0:a2:c5:36:43:57:20:b3:57:dd:
9e:d3:5d:f9:a8:61:8a:50:0a:d2:ce:45:62:e7:b3:
c3:c2:e6:84:1c:09:7b:1d:11:19:03:6b:ea:96:5d:
98:ec:a9:9e:dd:19:6c:22:2a:b5:1e:4a:f5:ee:66:
f0:bd:e7:77:13:76:58:9c:0a:4d:13:54:83:b9:8f:
da:da:78:42:c8:01:31:83:35:35:4c:e0:63:60:5f:
65:d6:c9:d4:2e:81:88:e4:e0:89:f4:d9:13:e4:af:
44:4e:e6:69:66:62:37:cc:b0:c0:3a:07:3f:c5:d0:
24:35:72:22:05:2f:96:9b:90:f7:15:e2:a0:8a:83:
01:95:43:aa:44:7b:ce:93:1c:ce:d1:10:b6:77:88:
00:a9:8a:05:24:4f:9e:bb:16:e6:c4:0f:3e:b7:62:
f0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:49:F4:06:90:CF:0E:C5:09:65:84:A3:81:1D:5F:3F:38:1C:D3:F6
X509v3 Authority Key Identifier:
keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a1:ff:f0:11:63:9f:5c:d3:20:a0:23:ea:48:21:ae:80:2e:
99:df:45:ac:a4:a6:90:6a:cf:08:33:86:ec:ae:c2:b3:09:be:
22:07:c7:97:14:97:b8:a3:79:78:2e:81:ff:58:65:9a:6d:19:
f7:17:a9:40:ac:19:a1:2b:2e:43:3b:8f:dd:c3:07:e6:2f:50:
4a:0d:ea:1e:14:f2:2a:51:b9:60:74:fb:f2:0f:35:e7:d1:76:
f7:79:79:4c:0a:2d:25:47:35:a8:fc:32:3c:42:9c:58:99:a5:
29:90:49:48:5b:0f:26:a4:29:8c:df:53:cb:fe:62:60:d6:dd:
65:65:bc:1b:3a:96:f8:78:8e:1a:b5:dc:8b:49:e1:fe:fe:40:
60:15:4f:44:71:cf:50:b2:4b:b7:29:2a:b1:d9:a3:ee:0f:34:
eb:a5:24:bd:66:06:43:e8:8f:b9:53:4c:15:2d:07:8c:ea:94:
8c:29:f6:aa:7c:91:9a:e9:8c:f6:f3:62:f1:12:8b:28:29:f9:
5e:31:63:59:43:2f:68:e4:f7:51:36:d8:b3:cf:ab:40:c8:ae:
8b:9f:c2:5c:85:27:3a:99:db:38:f3:9d:af:57:bf:7a:bb:22:
57:1a:ef:a9:50:cc:57:5f:33:1e:b9:e1:75:3f:7e:79:3e:d7:
94:fa:f4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:23 2026 by rpki-client