
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
File: DNszEee1KoxC8GUP9DwPyE0yDxY.mft (raw, json)
Hash identifier: CQoS0j0+YAhx3xRQhbdZ8zDhGWuggZ9QdFudI7+wruE=
Subject key identifier: 7B:5B:1F:6E:FF:3A:B9:87:0A:D3:7F:40:F3:D4:F8:45:83:41:48:35
Authority key identifier: 0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
Certificate issuer: /CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Certificate serial: 019FA9AC65836B0D0BCC65313312104391CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
Manifest number: 0225
Signing time: Tue 28 Jul 2026 17:01:15 +0000
Manifest this update: Tue 28 Jul 2026 17:01:15 +0000
Manifest next update: Wed 29 Jul 2026 17:01:15 +0000
Files and hashes: 1: DNszEee1KoxC8GUP9DwPyE0yDxY.crl (hash: p/qL0UIJWPG0WC2tDjpkLzSRGO8AIf7atb/nokUTcnQ=)
2: KkZ9T-InsQon19zi2pp0iLPe7uw.asa (hash: PxN+SD6/SnkXuWBprhfsz0XFK1K5PUh2KfS43HH5dtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:65:83:6b:0d:0b:cc:65:31:33:12:10:43:91:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Validity
Not Before: Jul 28 17:01:15 2026 GMT
Not After : Jul 29 17:01:15 2026 GMT
Subject: CN=7b5b1f6eff3ab9870ad37f40f3d4f84583414835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:11:f2:aa:57:54:03:80:7c:3e:17:6c:72:
d8:61:37:05:fa:f7:9f:93:9d:11:98:f0:a8:0a:e3:
93:fc:71:65:33:a9:18:fc:ae:0e:b7:44:6a:3c:b8:
be:f3:90:a4:29:52:08:fa:00:28:0e:6d:85:61:88:
7c:e7:b0:df:ef:81:00:a0:c9:32:f0:11:96:6c:66:
96:da:4c:61:36:72:21:60:7d:31:6a:b6:3a:e1:45:
ec:fb:db:89:84:1a:88:cb:b7:5c:83:5a:b3:4d:05:
14:27:b7:23:39:3d:7c:cd:e6:fd:79:4f:f5:da:44:
1c:40:a6:15:f7:32:e9:ab:8c:b7:8c:ae:11:90:98:
bb:ca:ed:77:ad:14:95:44:35:de:98:e1:d7:d3:8a:
82:25:6b:e7:98:34:26:95:ba:ea:74:41:15:07:13:
94:3b:6e:3b:2e:c8:5b:54:4b:ed:1a:46:ba:06:ee:
e7:9b:d6:ee:d3:1c:f8:1e:47:54:89:11:3e:d2:dd:
35:48:23:e1:42:d4:9c:55:0b:64:0d:17:bf:2d:86:
c6:a4:22:9f:74:15:ac:69:8b:5f:71:09:e6:e3:a8:
08:13:3c:f1:76:9e:39:0d:58:0b:eb:bf:15:f6:38:
55:0d:af:2c:8a:0c:c9:24:21:a4:9b:b5:31:f0:cb:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5B:1F:6E:FF:3A:B9:87:0A:D3:7F:40:F3:D4:F8:45:83:41:48:35
X509v3 Authority Key Identifier:
keyid:0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ac:47:85:69:a9:3f:16:a2:10:e6:22:65:7c:ff:07:0c:8b:
0a:cb:02:e6:e3:83:8c:45:19:8a:48:50:b9:d3:18:14:c2:c0:
8a:16:f2:ff:45:20:01:3e:0a:bf:5f:8a:c0:1f:6b:e5:34:0a:
b3:80:92:7e:e1:ff:f1:26:ec:98:1e:01:34:87:bc:58:6a:0f:
0c:ae:41:94:23:c6:1a:2c:a0:6c:04:05:9b:7e:7c:8b:96:a8:
6a:b9:bb:2e:62:8b:f9:0d:96:5c:54:27:7d:7f:16:ad:0d:bb:
de:3b:26:1f:c2:11:e0:53:99:5c:a7:2f:cc:b7:5c:45:d4:09:
40:34:0a:3d:7b:e9:b7:0d:fc:7d:13:e3:b3:ac:e8:25:a4:79:
e3:60:37:b5:05:52:79:ba:38:d0:ba:18:37:8a:df:4e:60:8e:
08:f4:9b:d6:24:4d:68:cd:7d:4d:89:96:0c:a2:cc:19:b0:b0:
48:18:88:47:5a:9f:46:3d:17:e3:cf:a7:8e:47:b8:bc:46:df:
ae:9d:b9:a9:b9:0a:2c:e8:66:14:74:b3:4c:04:b7:50:81:5b:
7f:56:04:39:a7:70:ee:a9:cc:b4:15:60:de:ab:f8:a8:ff:62:
78:5f:b4:ca:93:ed:a1:77:e5:90:85:86:5f:ea:b6:f9:18:10:
84:6f:a1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:05 2026 by rpki-client