Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
File: DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft (raw, json)
Hash identifier: Xd5N7KdLVq+k6DjgovI6OaNjrV6nKs6ko5NNsGwFPNw=
Subject key identifier: 9A:F5:AF:76:2C:0D:15:A7:CA:9C:0B:7A:0F:1F:05:7A:A7:98:EA:58
Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
Certificate issuer: /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Certificate serial: 01A1C1E652996885685DDFD89393F7D138FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
Manifest number: 1AEA
Signing time: Mon 09 Nov 2026 20:00:59 +0000
Manifest this update: Mon 09 Nov 2026 20:00:59 +0000
Manifest next update: Tue 10 Nov 2026 20:00:59 +0000
Files and hashes: 1: DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl (hash: z9iaH8di/C/kIIDnUeCRoD/Q9OvSuE/9iVrIjPTrNhE=)
2: Ty_PZDqaOmeFjLIdr3QFueerKIM.roa (hash: mfeK6p+b2jXbJTu7RkO60pgbrZY/WThNdE0YkaHIazA=)
3: ZK_lplNOHoj8XGWdtaGMmSrc3x0.roa (hash: /qdKs+yTlrC/OXEPfuDp9SEn7i6+ObqNyY75S5FZQO8=)
4: _7jylL9q9B68bc5gOBCT4NAKAwE.roa (hash: udwwApN1RRRAB/0kSZzWjgDibuhxWbwtgPuXqFkvmuE=)
5: cpElJSiXGO7jJAVo9S1jen5uhjQ.roa (hash: jXHD1yWMKx7op/sh3fiD9gaMHojOuxsjiA1ioAXvW84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:e6:52:99:68:85:68:5d:df:d8:93:93:f7:d1:38:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Validity
Not Before: Nov 9 20:00:59 2026 GMT
Not After : Nov 10 20:00:59 2026 GMT
Subject: CN=9af5af762c0d15a7ca9c0b7a0f1f057aa798ea58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:91:93:f7:bd:82:c2:fc:46:60:e9:30:f5:
d9:97:e0:56:bc:27:15:c4:4a:e9:8f:28:79:35:dd:
c9:f1:b5:20:4b:21:ac:31:96:24:20:d1:e8:99:7e:
fb:69:cc:6a:74:bd:e8:00:0e:37:29:6f:98:65:12:
a0:37:e5:90:32:a4:c2:7d:a5:18:66:f7:58:f9:63:
dd:9b:69:3b:45:16:8d:7b:e0:c1:5e:0c:c1:9b:52:
12:9d:e1:06:46:5b:d5:73:27:7f:a8:6a:2e:82:26:
4a:f0:e7:f3:61:51:3c:f7:06:63:0c:0c:b4:f5:d9:
80:27:4d:6f:06:ad:67:a4:5b:1d:5c:30:35:b4:5b:
fe:b2:a7:fc:9f:e0:37:3d:a2:83:8e:02:d2:a9:bf:
d8:19:61:b3:76:ba:c0:42:44:62:7f:de:b6:04:13:
dc:2b:f0:84:f1:57:19:ef:c2:97:ba:70:de:64:65:
ef:48:25:fb:38:63:e2:be:a2:a8:57:a4:c1:d5:84:
1f:9e:5e:67:7d:3e:cb:74:0f:ee:5d:1a:f8:53:8d:
50:65:b0:17:65:71:af:a4:b8:54:a8:d8:b7:d0:b7:
a9:d1:69:a8:aa:42:ee:67:ce:b5:7b:6a:e3:8f:72:
d0:e0:bf:9f:44:9a:a2:ac:9c:b6:54:54:8b:a6:2a:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F5:AF:76:2C:0D:15:A7:CA:9C:0B:7A:0F:1F:05:7A:A7:98:EA:58
X509v3 Authority Key Identifier:
keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:49:74:ce:ed:1c:b2:26:37:60:9e:16:dd:cc:52:c3:54:a2:
2b:df:fc:da:6c:7e:8f:a8:8a:50:91:c6:79:a3:b8:ba:0e:e1:
3b:f9:e0:11:05:2a:6a:44:f7:fc:79:70:85:21:ba:a0:27:8a:
76:ca:e7:0c:3d:22:06:61:5e:d3:97:8d:1f:d9:b5:18:11:51:
92:f2:1b:49:1e:24:4d:fd:1a:69:21:b1:88:50:01:e4:49:86:
3e:7b:34:ba:5e:7f:f4:0a:a2:d3:dd:a4:23:b0:54:b0:51:e9:
aa:43:dc:f7:ec:be:c3:0d:d5:e5:eb:20:61:34:4f:c0:93:c1:
9d:74:aa:15:d3:32:85:a8:45:8f:49:86:2d:5f:16:09:c2:ca:
bc:a0:e3:c5:91:14:32:a0:e9:e7:9e:45:20:d0:3a:15:7f:a7:
76:48:bd:ca:c6:89:ac:57:ce:ed:f5:77:4b:6c:b2:56:64:05:
f2:b7:f4:59:a5:a6:c5:5c:82:5c:af:b1:aa:ae:7c:a2:58:51:
ec:11:e0:93:13:52:48:ce:ac:17:bf:17:cd:ca:97:b5:fc:11:
79:23:eb:de:3f:fa:8c:63:54:94:d7:a0:7a:1d:e5:7f:4c:ee:
ad:90:7c:24:67:39:22:dd:f2:a8:07:96:d9:07:93:bb:87:73:
a0:c3:89:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 00:52:05 2026 by rpki-client