Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: uQWhgryTm70JfjZ6SWcwulLvkJqK8v00vD1rcAfUtrk=
Subject key identifier: E2:E6:69:51:71:2B:23:0D:D0:D0:F2:A2:9A:A5:78:F7:D0:BF:42:B8
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 019CAAC65A9F03CEBD4EB0DB126F09693997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 1851
Signing time: Sun 01 Mar 2026 19:00:51 +0000
Manifest this update: Sun 01 Mar 2026 19:00:51 +0000
Manifest next update: Mon 02 Mar 2026 19:00:51 +0000
Files and hashes: 1: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: pKZCj865uM5qe/mJwEzXW2pn2xcJtP9A/Y9XU8YCqnQ=)
2: u5v1NIr7zCznyDKOfZW5zSM1TZI.roa (hash: 0y7T3YJCDc+2Cz1VFqoKYSn2dXOumotGXs+vkOowx74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:5a:9f:03:ce:bd:4e:b0:db:12:6f:09:69:39:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Mar 1 19:00:51 2026 GMT
Not After : Mar 2 19:00:51 2026 GMT
Subject: CN=e2e66951712b230dd0d0f2a29aa578f7d0bf42b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:f0:74:91:9c:50:b8:b4:38:de:00:db:89:
ad:89:49:0a:37:3d:78:ab:5d:09:bf:f1:31:7f:3a:
d9:82:6a:73:67:da:90:2d:31:9e:a5:8d:43:2b:0d:
b3:b7:95:f8:58:e9:c8:4f:18:4d:68:0a:28:cb:33:
11:73:14:b8:e7:dc:73:9f:21:ca:b3:4b:99:26:52:
9a:ca:41:03:0c:a9:34:a4:c7:b0:bc:4b:10:ab:12:
45:ce:88:f1:f7:26:bd:05:fc:2c:22:53:b9:21:c5:
c0:a6:91:4b:7e:e5:fc:93:be:fd:10:bb:56:9f:a4:
b5:8d:2a:ac:a2:d4:24:56:3f:36:43:3d:55:6f:5f:
3d:6b:26:1b:ff:ff:51:b1:05:7a:98:be:c2:f6:0f:
3e:38:a3:3e:dd:dd:c8:da:53:27:94:76:67:49:b7:
77:08:01:43:73:9d:7d:d0:3c:90:75:6a:dd:24:ce:
38:5d:b2:1e:6b:b6:d1:cc:40:06:6e:fa:6c:d6:06:
3d:19:22:2d:02:ab:d0:90:d1:06:18:58:26:c0:ce:
4c:48:7c:a3:63:70:4b:c7:72:57:34:93:52:e0:ef:
2f:a0:69:cc:2e:9f:65:c1:b9:f9:14:81:b1:4e:41:
a7:70:02:29:49:bf:2e:9a:26:e6:aa:0a:b4:16:7d:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E6:69:51:71:2B:23:0D:D0:D0:F2:A2:9A:A5:78:F7:D0:BF:42:B8
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ac:17:c4:61:85:5c:89:97:68:1c:c9:57:b1:de:68:9c:44:
c6:4c:ad:3e:3b:14:57:ab:bc:38:79:d9:f0:d0:46:61:88:6b:
46:8f:b6:76:5c:af:32:23:01:fd:64:5b:52:cc:28:f9:d5:79:
d3:3d:42:97:49:15:62:a4:05:97:ef:90:50:28:6d:09:f5:f5:
fa:23:12:05:b0:ac:b4:66:e2:b9:3a:28:56:89:b7:93:3d:90:
f7:7b:e2:7c:34:97:92:ac:f0:e7:fc:a2:a7:70:98:47:0a:12:
eb:ce:f6:37:77:8d:24:3d:c6:93:0e:72:b5:19:3f:bf:3d:fe:
1b:12:44:0a:8b:03:ad:01:bd:12:e0:3a:6b:b6:1a:c6:56:f2:
7a:38:b6:bc:08:9f:86:38:fa:00:1e:4d:0b:76:7e:5f:97:e9:
66:40:da:0f:63:5e:d0:95:69:e6:c3:3d:06:5c:0e:90:1d:ea:
0f:dc:3b:7a:7b:f7:15:65:38:65:04:b3:30:6e:1f:99:be:6f:
77:f7:1d:88:22:ba:87:1c:3f:46:37:44:35:97:79:43:89:44:
ca:f0:3e:79:42:60:fd:97:36:b4:86:c1:ad:c1:87:fd:12:c1:
84:94:68:f6:b1:ce:db:ea:03:c7:d1:af:a3:ff:ef:9f:cf:db:
60:b2:74:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:54 2026 by rpki-client