Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: VhaUDyWd3e9nNmYXjX2cN2geBGHgUpLHGLTSVcbC1lA=
Subject key identifier: A9:8C:B2:30:43:1F:C8:F5:AF:DF:30:BA:0A:E1:79:16:8B:3D:60:B9
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 01A0C3691F392AA3A79331CEA27580217ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 1A70
Signing time: Mon 21 Sep 2026 10:00:41 +0000
Manifest this update: Mon 21 Sep 2026 10:00:41 +0000
Manifest next update: Tue 22 Sep 2026 10:00:41 +0000
Files and hashes: 1: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: ePZQaRjkv6mk5d3w4kNi/YH2fuoDvAm0tiIwZIqYpBk=)
2: u5v1NIr7zCznyDKOfZW5zSM1TZI.roa (hash: 0y7T3YJCDc+2Cz1VFqoKYSn2dXOumotGXs+vkOowx74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:1f:39:2a:a3:a7:93:31:ce:a2:75:80:21:7e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Sep 21 10:00:41 2026 GMT
Not After : Sep 22 10:00:41 2026 GMT
Subject: CN=a98cb230431fc8f5afdf30ba0ae179168b3d60b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:b6:6b:d2:1f:57:fe:e1:37:65:d2:78:27:
70:48:34:f3:c3:8a:2d:4a:bc:c2:7f:44:6b:14:35:
3c:3e:88:88:3f:e8:16:7d:f1:17:2d:f9:8b:8c:33:
55:3f:f2:3b:b8:14:d6:df:c5:ff:3e:da:9b:89:0e:
45:a0:22:17:be:af:61:af:9e:ac:10:38:9a:40:3d:
09:2b:72:cb:85:a1:cd:f1:0f:d2:f6:1e:12:b8:76:
61:d1:37:72:42:7c:75:2e:8c:7e:cf:0a:be:a5:05:
07:7c:5f:e8:12:bb:17:c3:e7:41:a2:92:6f:4d:88:
f6:1a:13:e6:e2:46:0e:99:d2:4f:0e:5b:7f:fe:93:
1a:15:37:12:c5:9d:ac:11:eb:3b:46:23:e9:30:87:
65:73:bc:78:18:6b:85:89:f6:bd:ef:7f:a7:3c:8e:
76:ff:e1:fb:5f:c9:c3:fd:47:49:a6:39:39:3e:ae:
60:06:fa:11:81:13:0c:6a:c3:2f:08:24:7a:d9:0b:
6e:b7:8d:56:03:6e:f7:82:98:4a:1d:6a:6a:09:3a:
7d:a1:30:ed:1f:84:9c:36:93:27:61:48:2e:ab:63:
25:33:72:4a:d3:4e:bb:fd:41:37:7a:5f:20:fc:dd:
fc:b2:9e:67:23:45:05:8b:d2:82:e8:b8:f7:38:e9:
ca:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8C:B2:30:43:1F:C8:F5:AF:DF:30:BA:0A:E1:79:16:8B:3D:60:B9
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:80:91:a7:48:b0:55:d3:34:36:04:48:25:95:87:e4:1c:ad:
67:cd:1f:42:c2:6a:d1:10:3f:96:c4:89:95:1e:fb:cb:0d:8d:
79:bb:12:b1:21:48:31:16:f1:c1:8e:b3:4c:1a:6b:d4:2d:d9:
dd:2e:fc:71:d1:a2:32:89:74:e6:b5:75:37:01:e9:0a:34:8f:
4f:65:ce:8d:88:a1:8d:0e:20:63:ab:04:8b:9b:4f:80:eb:f4:
91:0f:ef:98:64:15:67:c1:e2:6d:15:0d:6e:59:d9:50:32:b1:
5d:92:16:19:8f:15:f7:08:38:fe:c5:02:69:6a:59:c3:43:1c:
a6:89:e5:e3:d5:32:0d:61:f0:2f:13:87:bf:9f:73:7f:95:28:
15:32:cf:58:92:dc:bb:20:86:29:82:12:9a:fc:9a:6b:81:9c:
69:f7:a2:6f:83:e3:65:d3:c5:c7:85:09:22:cf:6e:d5:ea:f7:
0f:6c:59:c6:ce:bf:32:6f:7f:c0:6d:30:50:c6:cc:f2:d2:2f:
21:27:67:73:fe:02:dc:51:a5:73:80:f4:ef:be:58:91:4d:08:
63:c2:c3:bb:1b:0c:ef:3e:f1:53:7e:03:2e:10:1c:53:a0:e5:
1b:41:01:e2:19:24:36:e2:70:dc:a5:75:35:23:06:ac:5c:2a:
fe:e8:ba:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:06:59 2026 by rpki-client