Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier: J/Dsn5GffkvuBYdfp27tpPayxgFXihzFOCmeHgh5loU=
Subject key identifier: 69:01:0C:F1:CD:13:05:4A:9F:32:9A:E1:E9:99:0E:FB:61:45:3E:92
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 019D9EBF43EFDBACE11732152065D79A9DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number: 0C60
Signing time: Sat 18 Apr 2026 04:00:28 +0000
Manifest this update: Sat 18 Apr 2026 04:00:28 +0000
Manifest next update: Sun 19 Apr 2026 04:00:28 +0000
Files and hashes: 1: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: R5OR4BESIuFjadhfprZeVNqeoOojtSZzS8CTG8Oj+Jo=)
2: M5PnGpQYm028ws30MJtZnTaTcpo.roa (hash: /Y8TDD+fi7yLoYjDRGZ16k+8Sg/nu7LlsqZTmrtMrIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:bf:43:ef:db:ac:e1:17:32:15:20:65:d7:9a:9d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: Apr 18 04:00:28 2026 GMT
Not After : Apr 19 04:00:28 2026 GMT
Subject: CN=69010cf1cd13054a9f329ae1e9990efb61453e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:f1:12:19:93:c1:35:af:49:e9:78:b2:a9:
23:a2:4d:ad:2d:28:3b:fd:49:36:3c:11:97:b3:c3:
76:27:eb:2b:5b:84:f6:91:46:5d:77:5b:97:1e:e0:
5c:ca:df:03:8c:8b:dc:b2:ad:e5:ef:0a:c8:06:7a:
b7:4a:a5:0c:df:80:b9:9f:16:30:9b:3c:4c:96:ea:
3c:4d:dc:12:16:79:37:1e:53:db:92:a4:42:ab:0e:
a1:48:b8:bd:9c:2b:19:59:25:c2:30:06:50:c0:80:
b7:a3:87:c1:fd:74:8e:23:f4:4a:78:48:cd:2f:2b:
6c:56:69:90:a0:af:57:8e:f5:c4:9f:e6:34:47:2c:
42:6e:80:63:50:f6:df:37:f5:8f:e3:82:ab:ac:a2:
e0:05:56:40:57:48:37:98:07:3b:10:1c:b1:4c:e9:
7a:2e:9f:97:41:09:79:83:f9:f3:95:ea:91:0a:42:
16:c6:6c:d6:1e:33:08:60:15:85:13:65:ba:6b:28:
9b:76:ae:ec:92:f9:06:04:bd:5e:ae:bc:c0:9e:53:
e6:d4:53:3e:1e:29:a0:16:32:9b:0a:39:f5:e9:5c:
cd:fa:fd:b0:ec:ab:b6:8f:e1:91:62:03:c0:5c:e7:
ea:14:50:76:15:3b:e7:4c:23:be:1f:55:07:da:03:
d9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:01:0C:F1:CD:13:05:4A:9F:32:9A:E1:E9:99:0E:FB:61:45:3E:92
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:28:a5:e1:37:e5:65:b5:4c:f9:ee:a4:ef:e4:07:5d:4c:85:
1d:21:42:13:ce:7e:9b:3b:c9:bb:da:72:68:6c:f1:40:f9:ce:
3d:ec:75:ce:18:c2:9c:f6:96:a8:31:b7:10:0e:23:cd:2c:aa:
fb:c8:a3:f2:4c:e5:73:43:ee:80:6b:0a:fc:4d:b9:4b:b0:27:
41:37:29:07:7c:63:12:dc:25:ca:e9:21:0c:4b:59:4f:9f:98:
c8:c1:e5:3a:c2:2e:4c:70:a5:88:14:ac:da:57:4a:dd:bc:17:
14:a4:f5:f9:1d:a4:73:31:b7:17:17:22:c0:df:97:a8:26:62:
67:d9:27:75:6b:d1:f3:67:b2:23:dc:a8:1d:f1:9b:aa:9c:7f:
32:2d:50:8d:22:bb:c7:f8:3e:3c:60:c4:94:7f:1a:9b:f8:11:
f1:7d:3a:59:83:f1:a3:a5:94:1e:f6:35:06:e3:31:6b:50:08:
e4:e4:ab:44:5b:84:b1:4c:d4:ee:1d:19:2d:aa:c7:08:c0:c0:
c1:17:23:a8:b7:15:b5:82:3b:2b:27:79:d0:59:5d:d4:bc:12:
e1:ee:76:d5:55:49:fd:c7:3a:36:59:55:47:dd:09:68:b6:74:
5c:eb:7f:a1:de:70:84:42:f6:de:07:6c:f6:eb:18:3a:75:bc:
1a:85:48:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:09:22 2026 by rpki-client