
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier: TkTo5CzLPtv2gpp5ounXfCtJUjl2WUJgW2eUvw98sgk=
Subject key identifier: 8C:17:89:26:B6:A3:2B:BB:B8:11:C4:B8:40:9B:57:A7:5B:A5:E3:27
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 01A15108C4E280A92B57C38989C8F55C861B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number: 0E4A
Signing time: Sun 18 Oct 2026 22:01:31 +0000
Manifest this update: Sun 18 Oct 2026 22:01:31 +0000
Manifest next update: Mon 19 Oct 2026 22:01:31 +0000
Files and hashes: 1: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: RkuQkH0MEdwvfSSquXp4ZP3TocfnqkfGnTgTZcGyCLI=)
2: M5PnGpQYm028ws30MJtZnTaTcpo.roa (hash: /Y8TDD+fi7yLoYjDRGZ16k+8Sg/nu7LlsqZTmrtMrIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:08:c4:e2:80:a9:2b:57:c3:89:89:c8:f5:5c:86:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: Oct 18 22:01:31 2026 GMT
Not After : Oct 19 22:01:31 2026 GMT
Subject: CN=8c178926b6a32bbbb811c4b8409b57a75ba5e327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:22:48:14:0e:3c:97:9d:6a:8e:74:48:1c:34:
14:fc:f2:30:10:eb:16:9c:be:d3:62:bd:87:eb:8d:
64:71:50:14:9d:7a:d9:07:48:68:15:42:d0:ed:59:
63:a1:a8:54:9d:10:e1:df:4f:a2:f6:9b:29:4c:99:
d1:c6:43:e3:51:7f:94:5a:15:f2:6e:49:b2:00:38:
48:1a:5e:ea:64:15:31:d8:f4:9c:38:e6:75:db:23:
c4:da:33:32:f1:1d:f1:7a:1b:30:e0:5a:a1:8c:9f:
a2:86:4c:e9:5a:dd:15:44:82:bd:4e:b8:31:43:ba:
e9:48:00:e8:f4:53:57:9f:58:df:3e:3c:a6:b6:35:
e7:56:32:0c:b4:a1:21:10:c6:cb:fe:2a:3d:af:03:
26:65:ea:70:5c:d6:cd:5e:87:30:58:64:c4:d5:ee:
ac:e4:41:72:a2:6b:e5:5b:5b:a3:d2:b3:84:26:28:
8c:aa:02:db:e7:05:37:0f:1c:a6:fe:50:e4:ac:53:
04:c9:bb:84:ee:81:21:82:8f:06:d8:78:3c:4f:73:
4a:32:8a:4d:be:be:1c:04:d5:09:fc:58:02:3d:7c:
d4:6a:a4:6d:52:c5:f8:e8:24:c9:b0:8f:e3:db:1a:
31:a6:08:06:c4:c1:23:44:a8:d7:14:3d:4b:4b:58:
56:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:17:89:26:B6:A3:2B:BB:B8:11:C4:B8:40:9B:57:A7:5B:A5:E3:27
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f1:bc:db:9f:a2:0f:16:f7:6c:bd:4c:77:55:90:2b:71:b6:
65:b8:ec:b4:10:75:63:54:23:f6:2d:2d:f1:2d:a7:d9:f5:3c:
2e:ab:77:06:2b:21:51:5c:b2:91:76:a9:84:b6:d0:75:10:96:
52:aa:71:f1:4c:c0:e8:5b:88:49:1a:1e:6c:f7:61:cb:a9:c6:
e3:61:03:7b:e2:dc:8c:36:52:90:90:02:16:e6:af:4e:60:e3:
db:40:b0:f7:da:8a:ec:6a:74:16:5c:7c:83:86:50:a4:f1:84:
a6:95:4a:f2:2d:2f:f0:98:78:5f:16:ce:89:dc:81:e5:c0:a9:
02:be:19:b6:d3:96:f1:84:c6:60:4f:31:6b:58:b3:c2:3e:b5:
35:d6:91:ca:a6:a1:83:6d:97:d3:53:88:42:ea:01:3b:70:3f:
21:11:6e:9c:b0:cc:9c:53:77:53:ae:43:07:87:3e:f3:d5:3a:
ac:4e:22:e3:b2:e3:20:d5:8a:f1:07:6f:97:a6:2a:bb:4f:0b:
a3:d8:73:78:8d:16:85:a1:53:32:03:f0:c7:5c:0f:e7:b4:41:
77:e5:3b:2c:8c:78:ca:f8:9b:c6:94:e6:86:66:52:96:06:90:
a7:37:a2:cd:29:af:43:37:01:ae:c2:53:28:05:8d:2f:86:2c:
5f:38:ed:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFRCMTigKkrV8OJicj1XIYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTgwZDhjYTQ2NGFlNDQzMzBjMDJkNjA5N2QxYjNlMzQ2
N2UwODUwHhcNMjYxMDE4MjIwMTMxWhcNMjYxMDE5MjIwMTMxWjAzMTEwLwYDVQQD
Eyg4YzE3ODkyNmI2YTMyYmJiYjgxMWM0Yjg0MDliNTdhNzViYTVlMzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyJIFA48l51qjnRIHDQU/PIwEOsW
nL7TYr2H641kcVAUnXrZB0hoFULQ7VljoahUnRDh30+i9pspTJnRxkPjUX+UWhXy
bkmyADhIGl7qZBUx2PScOOZ12yPE2jMy8R3xehsw4FqhjJ+ihkzpWt0VRIK9Trgx
Q7rpSADo9FNXn1jfPjymtjXnVjIMtKEhEMbL/io9rwMmZepwXNbNXocwWGTE1e6s
5EFyomvlW1uj0rOEJiiMqgLb5wU3Dxym/lDkrFMEybuE7oEhgo8G2Hg8T3NKMopN
vr4cBNUJ/FgCPXzUaqRtUsX46CTJsI/j2xoxpggGxMEjRKjXFD1LS1hWMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwXiSa2oyu7uBHEuECbV6dbpeMnMB8GA1UdIwQY
MBaAFA2YDYykZK5EMwwC1gl9Gz40Z+CFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUt
ZjZmZjI4MWZiYzMyLzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUtZjZmZjI4MWZiYzMy
LzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/G825+i
Dxb3bL1Md1WQK3G2ZbjstBB1Y1Qj9i0t8S2n2fU8Lqt3BishUVyykXaphLbQdRCW
Uqpx8UzA6FuISRoebPdhy6nG42EDe+LcjDZSkJACFuavTmDj20Cw99qK7Gp0Flx8
g4ZQpPGEppVK8i0v8Jh4XxbOidyB5cCpAr4ZttOW8YTGYE8xa1izwj61NdaRyqah
g22X01OIQuoBO3A/IRFunLDMnFN3U65DB4c+89U6rE4i47LjINWK8Qdvl6Yqu08L
o9hzeI0WhaFTMgPwx1wP57RBd+U7LIx4yvibxpTmhmZSlgaQpzeizSmvQzcBrsJT
KAWNL4YsXzjtbw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:22:57 2026 by rpki-client