Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
File: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json)
Hash identifier: AtVoLrtgrE4bHvGr/DYF2DY8lMOUW31JxgsIQk9azb0=
Subject key identifier: E4:9D:5A:69:88:FC:26:E3:CE:C8:0E:12:7B:53:20:23:FC:C8:7C:87
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial: 019FA8CFBEA09E28F5078A99ED474C64BD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 13:00:14 +0000
Manifest this update: Tue 28 Jul 2026 13:00:14 +0000
Manifest next update: Wed 29 Jul 2026 13:00:14 +0000
Files and hashes: 1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: TYmXYn8GN7RliT7UgiO7SgMHvG2fDBRBSVmP7Wbard4=)
2: qopqpOjSigcAgnh4q3o38zGjwNA.roa (hash: EBQgdsC6JJfdJnKh94uu6CL6R7A3pzSO9sS4FBZtJ/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:be:a0:9e:28:f5:07:8a:99:ed:47:4c:64:bd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
Validity
Not Before: Jul 28 13:00:14 2026 GMT
Not After : Jul 29 13:00:14 2026 GMT
Subject: CN=e49d5a6988fc26e3cec80e127b532023fcc87c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:71:1e:66:f5:1e:a7:d4:ce:ab:b4:df:46:
b7:a4:57:eb:54:25:5f:bc:f8:89:ae:9e:40:52:d9:
5c:29:62:02:9a:cb:59:4c:3c:62:15:a7:e2:57:d0:
7b:93:d6:68:d5:7f:e3:63:fd:0e:43:2e:73:fc:a0:
3a:39:c4:d8:36:3b:00:19:1c:6e:89:89:98:5d:71:
db:75:f2:5a:f4:54:d5:d5:fe:3c:09:d5:c3:9a:05:
2c:b9:44:64:ec:03:36:ec:f7:ad:62:f5:9b:65:f2:
28:6b:e2:f8:51:9d:c9:72:2f:3a:a8:04:f0:08:cc:
2d:cb:22:82:be:83:4a:fb:fa:9e:c8:8e:ae:25:0c:
d9:0a:41:44:2e:0c:7a:21:12:db:33:6f:03:52:32:
dc:e6:57:5e:4e:6b:70:ee:b2:08:8c:d3:d2:b0:74:
20:07:6b:9d:be:ed:55:d4:d5:2d:cd:f1:a3:bd:f8:
fc:75:b2:08:53:81:cd:a8:68:c2:41:77:44:90:44:
c6:a0:0e:ae:32:0e:c9:4a:14:f5:fc:bf:72:ca:53:
e4:75:fc:c9:7f:73:1d:9d:f8:8c:7f:ac:8e:6f:29:
56:05:0a:54:62:09:df:bf:54:17:9f:ea:43:81:ac:
46:72:14:01:2b:41:a2:86:9b:b3:be:ae:80:71:be:
58:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9D:5A:69:88:FC:26:E3:CE:C8:0E:12:7B:53:20:23:FC:C8:7C:87
X509v3 Authority Key Identifier:
keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:72:de:0c:c3:f8:64:79:66:cb:d7:37:98:34:7f:9e:31:73:
85:c9:27:7f:30:21:87:07:35:55:11:4b:ab:d4:af:2a:dd:10:
f5:0d:0b:9b:83:4e:70:46:e0:bd:da:b3:17:39:3f:2a:91:16:
23:a5:98:1a:cb:96:26:f8:d7:b5:76:92:9a:fa:d1:8f:75:d8:
e0:11:b0:da:e7:6d:ae:37:ca:77:2c:64:3c:87:46:8b:5b:f1:
da:5c:f8:5b:d2:f2:89:67:67:01:5a:43:e3:0e:b2:00:7a:6b:
09:25:e6:6e:e8:0b:00:a9:78:48:b8:ab:da:c5:fd:e2:d2:4e:
f0:5f:24:d4:d0:d4:03:1f:89:e6:ef:23:f0:6b:77:5d:50:e0:
8c:71:e0:10:d6:3a:e0:62:9d:63:0b:9b:3c:23:ab:6b:d5:a2:
7b:b3:f4:91:7f:62:fc:ea:e4:87:fd:09:15:55:18:66:21:10:
a5:e6:45:6e:60:97:4c:b2:ec:38:b7:e1:25:9b:8a:dc:a3:fc:
98:3a:19:ea:ea:5f:6c:20:77:d0:9d:ce:3b:3f:08:3f:71:73:
a9:3a:81:52:b7:19:cb:c6:69:e1:19:18:e4:6d:c3:31:3b:49:
53:78:31:8f:c5:6d:29:bc:99:e1:50:39:b1:d3:0f:aa:22:21:
58:09:f7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:25 2026 by rpki-client