Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier: iT2Ez7v373E2PzUJzRgd9HqLgCvwRcJLZ7ktkjPLYns=
Subject key identifier: 77:E0:9E:60:1B:43:ED:A3:4F:37:D6:5B:9D:80:1D:06:A5:50:7C:3A
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 019CAD5A3C3C7AE659F735B84847CE850A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number: 0BE3
Signing time: Mon 02 Mar 2026 07:01:37 +0000
Manifest this update: Mon 02 Mar 2026 07:01:37 +0000
Manifest next update: Tue 03 Mar 2026 07:01:37 +0000
Files and hashes: 1: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: DmtRem4OYhXQOIq/ireNaMDIDjirQwKgAdQHY61IAcs=)
2: M5PnGpQYm028ws30MJtZnTaTcpo.roa (hash: /Y8TDD+fi7yLoYjDRGZ16k+8Sg/nu7LlsqZTmrtMrIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:3c:3c:7a:e6:59:f7:35:b8:48:47:ce:85:0a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: Mar 2 07:01:37 2026 GMT
Not After : Mar 3 07:01:37 2026 GMT
Subject: CN=77e09e601b43eda34f37d65b9d801d06a5507c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:3a:e4:02:96:ef:0b:77:3b:a1:36:1e:66:
a6:d0:87:97:a9:87:3d:db:9c:48:58:07:06:2f:2a:
02:3a:8e:dd:4a:28:c6:34:53:4b:c4:21:bd:92:18:
6b:58:07:f2:ad:f4:ec:d6:57:51:b9:6a:2a:f8:65:
04:3d:cb:36:a1:1e:cd:f5:54:5f:ab:2e:87:4d:2c:
40:85:aa:e7:b5:b1:54:99:bc:32:8c:bf:fa:2c:40:
92:c8:2e:2d:ac:08:8b:2f:65:42:e4:16:68:24:84:
46:66:c0:41:0a:0d:11:69:96:6d:28:d7:23:cd:27:
ac:cf:c8:1c:2d:0a:c9:99:c7:fa:2e:61:67:ca:24:
87:45:2b:a1:1b:23:d5:b9:43:6d:ad:93:6a:a8:b2:
e1:de:e7:0d:31:db:ab:fe:86:c5:45:ae:47:60:f3:
9e:0b:8b:a4:8a:14:18:e7:09:38:b6:7f:31:e3:53:
94:f0:2b:64:60:60:a6:27:00:f8:71:56:f9:6c:62:
6a:d8:e7:17:e3:15:28:7d:36:26:3a:e3:fa:07:0f:
9b:be:2c:a2:5f:ad:bf:f3:a7:22:32:dd:05:44:44:
47:7c:90:95:41:9a:51:92:bf:28:3c:02:3e:f5:19:
af:eb:4c:9d:d3:47:aa:af:3d:8f:2b:0a:31:32:dc:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E0:9E:60:1B:43:ED:A3:4F:37:D6:5B:9D:80:1D:06:A5:50:7C:3A
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:64:ba:6e:3a:a6:b8:a5:05:83:cc:a3:a8:3b:d1:17:10:fe:
d5:b0:df:f4:ac:38:d8:aa:64:86:32:8a:51:f5:65:e9:89:64:
e1:0b:ea:a3:b3:c6:6c:77:51:b0:0c:10:8b:0f:0d:af:1a:84:
2b:b5:b2:09:c3:c0:bc:c2:b7:b7:72:e4:3b:90:fb:84:5e:84:
05:7b:43:d6:cb:a2:26:f2:04:72:df:df:81:e3:d9:2e:d3:87:
94:5f:f2:ba:2d:98:19:5f:b9:a6:26:7c:94:15:c6:80:5f:53:
1c:2e:20:cc:0a:43:aa:0c:61:48:73:8d:d5:7f:f6:c0:78:a4:
39:51:93:69:76:f6:66:26:41:38:e0:b0:17:59:53:88:c9:70:
a0:d1:98:4c:e2:6e:3b:f4:e0:e9:08:9f:1c:2d:b4:ea:dd:fd:
36:b5:7b:dc:94:8e:4c:c1:39:44:79:46:a1:95:de:32:3c:df:
61:6d:4f:20:24:5f:36:9d:ed:2d:9b:f9:bb:03:fb:02:94:46:
63:db:b9:f5:b5:31:38:07:da:45:57:bb:1a:e2:a8:2b:c3:e2:
a1:27:3e:59:1c:d2:65:4d:a4:b6:99:6b:7f:94:12:13:c5:dc:
fb:40:06:6a:ae:e9:4c:a3:fe:93:e2:4e:e2:00:60:91:11:fe:
c9:b0:41:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:01:28 2026 by rpki-client