Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: 5f+e0dwtWeXFPAazMkfk7P091oiDVXRuHo++egaXoCk=
Subject key identifier: 75:37:BC:32:32:2C:E9:4C:11:54:DE:5E:4E:9C:A8:06:21:5E:92:32
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 019FA9758C66091C5013F2E9198A58FC3B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 19DE
Signing time: Tue 28 Jul 2026 16:01:20 +0000
Manifest this update: Tue 28 Jul 2026 16:01:20 +0000
Manifest next update: Wed 29 Jul 2026 16:01:20 +0000
Files and hashes: 1: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: +ewL2uQ2Ww9DNn0tieit30C9LV9FDhU0QK1rqslXWGM=)
2: u5v1NIr7zCznyDKOfZW5zSM1TZI.roa (hash: 0y7T3YJCDc+2Cz1VFqoKYSn2dXOumotGXs+vkOowx74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:8c:66:09:1c:50:13:f2:e9:19:8a:58:fc:3b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Jul 28 16:01:20 2026 GMT
Not After : Jul 29 16:01:20 2026 GMT
Subject: CN=7537bc32322ce94c1154de5e4e9ca806215e9232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:23:c1:45:69:65:82:c4:2c:60:e5:d2:d1:
d1:f1:30:6c:56:5e:6a:20:7d:dd:62:8f:fa:47:72:
f6:88:66:97:f8:22:75:2c:b1:30:b1:63:65:2e:7c:
e1:6d:de:de:c1:b5:86:12:2e:e6:6d:71:b4:0b:63:
86:82:9c:b7:b8:d9:7b:17:0c:9b:ae:e7:36:7a:a0:
df:53:b9:ab:d4:04:19:5e:c3:89:1e:9a:62:bc:ce:
59:fb:d8:c7:60:c6:1e:9d:8c:22:c8:56:11:68:03:
ae:0a:e7:9c:de:09:75:66:b3:87:1f:c8:56:74:32:
be:9a:e2:3c:6a:fa:67:72:f7:5e:68:a9:a4:4b:f7:
31:88:cb:f2:9e:81:ad:5d:35:e4:3b:99:ac:e7:8a:
51:04:34:33:bf:53:ed:7d:da:d0:53:d7:eb:f8:e8:
6a:d8:1f:a4:b1:11:03:a3:fc:68:e1:ff:7c:5c:a8:
e2:99:24:37:68:62:35:87:f0:e9:a3:bc:47:88:ad:
0d:0f:a9:a4:86:da:a0:13:24:81:4f:02:ea:9b:fb:
e3:72:cd:a6:30:1b:cc:0c:02:5c:00:7e:0c:6b:fd:
1d:d2:0a:01:1b:ff:3f:18:c8:8b:48:48:1d:b9:23:
8f:fa:ea:25:f4:e9:36:8a:0c:7b:7d:5f:80:57:6a:
f4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:37:BC:32:32:2C:E9:4C:11:54:DE:5E:4E:9C:A8:06:21:5E:92:32
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b2:04:a3:f0:1d:d2:72:ef:f9:40:af:65:56:c2:f7:6c:43:
a1:4c:8a:0b:b9:dc:20:57:a0:d5:33:af:36:f5:67:fd:d1:b0:
99:f5:ef:55:a4:42:a5:64:a6:26:eb:1b:5a:e5:50:f4:c2:84:
89:32:97:09:62:85:9e:ff:8e:bf:d3:e9:c2:26:15:f2:87:74:
00:1d:ec:a9:3e:ee:3e:06:5a:70:0b:1a:6a:8e:8e:e2:dc:e0:
61:b0:3d:fa:61:e9:9a:1a:6d:d6:a9:cc:c9:7e:66:ef:ea:5c:
19:f9:60:a0:d6:96:2a:c4:bf:ee:63:68:c4:d1:06:cb:9e:06:
7e:6c:a9:ce:c5:00:05:70:dc:4c:d6:3d:5e:36:7e:5a:3c:7e:
28:ad:d3:a2:8b:8b:1e:b9:f8:57:f2:3c:a9:8c:f7:7a:be:29:
ca:21:e2:d2:7a:93:3d:a8:43:18:31:4c:62:6a:f1:62:4f:48:
db:dd:2b:43:a4:14:1d:3f:80:39:28:04:5c:3d:55:6b:f0:55:
c2:1e:69:b3:da:0b:8f:a7:eb:2c:a2:ef:09:7e:40:35:58:cf:
18:4e:1b:9d:ee:c1:d5:d1:04:12:a5:c2:64:90:4a:31:bb:a3:
6a:b8:ed:33:4a:53:ae:8c:ea:86:95:8d:c3:6d:0d:d4:d9:61:
4f:e4:13:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:54 2026 by rpki-client