Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
File: DNszEee1KoxC8GUP9DwPyE0yDxY.mft (raw, json)
Hash identifier: HynpDUJ9fLNAbBUctj4IDxBnRepRky1hki64iu5I4n8=
Subject key identifier: 88:76:B1:0D:A4:F4:55:30:D0:BE:4D:E5:10:02:47:BE:9C:B4:15:17
Authority key identifier: 0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
Certificate issuer: /CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Certificate serial: 019D9C638A3011F68DA7E5E5BD7E66444DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
Manifest number: 0115
Signing time: Fri 17 Apr 2026 17:01:02 +0000
Manifest this update: Fri 17 Apr 2026 17:01:02 +0000
Manifest next update: Sat 18 Apr 2026 17:01:02 +0000
Files and hashes: 1: DNszEee1KoxC8GUP9DwPyE0yDxY.crl (hash: iJucmj/qToKq9L3SYvYKjC1LP9GvmYQnWNNNwR/PcdM=)
2: KkZ9T-InsQon19zi2pp0iLPe7uw.asa (hash: PxN+SD6/SnkXuWBprhfsz0XFK1K5PUh2KfS43HH5dtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:8a:30:11:f6:8d:a7:e5:e5:bd:7e:66:44:4d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Validity
Not Before: Apr 17 17:01:02 2026 GMT
Not After : Apr 18 17:01:02 2026 GMT
Subject: CN=8876b10da4f45530d0be4de5100247be9cb41517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ef:97:85:9c:9e:35:b1:54:48:76:2f:53:c3:
b6:46:fc:cb:ba:78:60:e0:91:1f:4c:ff:ce:99:89:
81:47:9d:e0:f8:e5:af:fb:47:9a:5b:86:a6:70:60:
55:ee:e2:0a:70:17:18:22:82:ba:a7:a5:22:26:98:
ee:63:29:a4:cc:c3:b3:ae:31:30:f8:30:f5:06:74:
04:23:9b:6a:83:23:8e:1c:00:76:ca:c1:32:79:12:
19:bd:cb:b5:75:60:82:63:5d:07:2d:4f:73:a9:26:
e4:29:2e:f1:0f:19:74:d4:9d:40:a7:e5:2e:6a:a4:
d6:7c:26:48:71:67:1b:2b:2f:42:55:07:eb:bf:f7:
64:38:00:9a:7c:92:2d:41:7d:ad:fd:44:2e:e5:d6:
5a:e8:62:61:a0:9d:21:11:26:96:e7:a7:ba:56:ab:
1c:2e:c0:68:dd:8f:bb:fa:c2:93:4d:ca:82:9b:fa:
65:91:7d:39:90:2b:3a:1f:28:e8:8f:2a:58:b8:f2:
ee:4a:96:bb:16:b5:db:06:86:b0:b6:3e:c3:8c:f5:
54:1e:82:c0:67:9e:25:6b:20:23:e9:76:d7:3e:76:
d5:ae:75:fd:1c:94:df:25:30:ff:a0:d8:34:e1:b0:
b6:ab:83:ad:72:76:16:fe:17:9c:ec:9b:a0:7f:86:
1a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:76:B1:0D:A4:F4:55:30:D0:BE:4D:E5:10:02:47:BE:9C:B4:15:17
X509v3 Authority Key Identifier:
keyid:0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:83:89:1f:1d:03:fa:37:1f:db:47:81:56:be:9a:8d:ad:fe:
9e:4c:0d:74:6b:d2:8f:11:77:23:e3:d1:a3:1b:81:25:51:11:
86:7a:84:93:e2:a6:5c:27:f3:5e:e0:f4:da:63:e9:5d:d3:d7:
22:43:1e:88:70:b1:56:6d:5c:91:93:50:58:6e:ca:8d:db:04:
63:28:37:37:7f:5f:c9:23:9a:c5:eb:b5:ac:f0:fa:f4:60:01:
89:e8:12:49:7b:63:eb:58:bd:9a:bb:29:5f:fb:b4:a4:79:3f:
3f:9f:98:51:d6:0d:eb:79:27:4e:8d:02:52:14:99:4d:59:3d:
bf:56:39:c0:52:59:8b:40:b3:91:96:da:03:28:b0:de:91:a5:
43:8a:8d:35:92:ff:c0:8d:5f:5c:1f:db:4f:a4:8b:6a:08:f0:
18:b3:9a:96:69:8b:42:64:57:bb:2b:72:92:95:47:45:f1:b8:
6d:e5:32:f9:a6:d4:ea:54:e2:30:e9:f8:f3:45:10:83:3a:92:
7d:52:09:19:f2:4c:36:98:e9:99:cc:22:f7:27:88:45:f2:62:
e5:cc:9c:08:15:da:02:4d:8f:51:b8:77:da:99:a0:a0:2f:e7:
e3:71:f7:4b:00:75:3f:d5:0e:39:a5:8d:0a:e8:4a:8c:3f:9d:
11:46:a4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:40:39 2026 by rpki-client