Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
File: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft (raw, json)
Hash identifier: 6z6aDUKHuW6ClFdapL2C0gvm9D4Jj/houB7wknA64EI=
Subject key identifier: 26:A3:DF:BC:AC:71:DE:E9:13:CA:F0:D2:BB:81:BB:13:74:91:B3:34
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 019CACB4C5D9D441B87762CCE478D9903D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
Manifest number: 1851
Signing time: Mon 02 Mar 2026 04:00:54 +0000
Manifest this update: Mon 02 Mar 2026 04:00:54 +0000
Manifest next update: Tue 03 Mar 2026 04:00:54 +0000
Files and hashes: 1: DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl (hash: eRucKvDmmNZNYlT5NeQjR3o+f9jIby/6OGroNeKAnkM=)
2: eRJh73NsCl5nLTcM8L-WtjQ1i8M.roa (hash: FurWUtoK3SJ5oNGdIN9dbo+ONOIK9GXi/NLIt8LbtMY=)
3: kEe6Bn-Wm8OU0BMeJ1sgg9otE2g.roa (hash: uUTvD8lHdMsxga0kjra2N6+gIRpOiRjAnp6etvYJekA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:c5:d9:d4:41:b8:77:62:cc:e4:78:d9:90:3d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: Mar 2 04:00:54 2026 GMT
Not After : Mar 3 04:00:54 2026 GMT
Subject: CN=26a3dfbcac71dee913caf0d2bb81bb137491b334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:ac:64:60:c6:f5:85:bb:71:24:af:ad:a7:
6a:72:37:18:c3:8e:8f:eb:fa:d9:01:2b:bc:3d:fd:
46:7f:9c:8c:6a:79:0d:74:79:4a:17:d9:8c:59:ee:
4b:3f:7d:1a:48:c0:26:33:44:c8:a3:6b:83:a0:d2:
43:e9:c5:39:67:25:bd:94:77:b3:3f:1d:42:f3:f0:
ca:6d:f9:81:f5:e3:4c:79:58:6d:a0:d9:3c:25:35:
c6:43:54:64:ec:ab:49:5f:b9:0f:46:dc:ce:f1:d8:
4c:97:ff:e9:8e:53:91:5a:a5:cb:0b:2b:11:e7:90:
e8:67:51:b5:cd:99:f5:f9:b4:ff:5b:3b:3e:35:43:
18:1a:6d:5d:ab:89:48:15:37:14:0f:f3:dd:b6:89:
2b:1c:69:52:aa:49:ab:8c:38:c7:5a:da:cb:28:d0:
1f:4d:38:bb:86:49:95:d5:c8:c8:10:03:fd:51:e0:
a6:02:94:95:0f:22:d3:54:02:fe:d5:0d:60:35:2a:
cc:64:1d:08:a5:95:98:09:f6:79:68:8a:5b:e2:98:
73:50:0b:59:73:50:bd:2d:0c:e6:0f:76:fc:73:d5:
17:be:05:86:76:96:90:00:73:7a:51:69:e8:15:9e:
df:c6:55:f1:e0:65:19:89:ef:6f:10:24:fb:a9:64:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A3:DF:BC:AC:71:DE:E9:13:CA:F0:D2:BB:81:BB:13:74:91:B3:34
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:97:11:bc:5c:e9:da:fc:07:25:68:c0:e0:32:cd:25:24:71:
6d:c2:27:a2:a8:c3:c1:24:9b:bf:d1:b1:b5:55:0c:b6:7a:3b:
61:2b:a3:2a:15:99:77:59:8c:80:e1:ee:ce:18:53:8c:46:1d:
78:7d:f6:67:de:4e:87:ae:eb:a5:3b:18:5f:b7:58:c9:70:6c:
47:eb:78:54:55:ae:b8:46:43:0a:f7:50:db:0f:1f:5e:69:4c:
70:4e:72:96:80:80:b0:d8:ff:af:0f:5f:d3:da:bb:a0:73:41:
aa:56:a0:27:22:8b:db:2a:0a:9e:11:85:c6:fc:a1:70:50:47:
c5:92:05:80:bd:39:49:f7:d0:28:b5:26:57:17:0b:82:76:3d:
1e:2f:f9:3a:39:8a:a2:d7:aa:d8:5a:92:e3:15:f0:79:cd:18:
92:2f:05:17:fc:b5:e6:13:a9:23:cf:39:dc:ce:15:c2:2e:be:
39:1c:c1:f2:24:df:8c:c3:2f:77:39:78:da:a1:c3:56:ed:87:
d9:bb:e4:c0:81:d3:70:ef:66:51:25:ef:dd:2a:76:28:fa:ca:
07:ed:75:95:3b:b0:76:f3:1a:6a:98:9b:8c:01:a6:d5:f0:70:
e4:d9:8d:f7:6f:21:25:8a:eb:c3:97:76:63:82:b6:14:4a:48:
1b:c5:10:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:48:10 2026 by rpki-client