Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier: 51ToD+x93Vm/ZgFG3ODEUcwt8XqzIWQBbtnC5T5dTjo=
Subject key identifier: 9D:31:A1:D6:B5:0F:E6:D3:7B:88:42:FE:E6:A4:87:67:C5:30:F1:6D
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 019EC25C8AAFA45693E5C148E0DEB96ADFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number: 0CF7
Signing time: Sat 13 Jun 2026 19:01:45 +0000
Manifest this update: Sat 13 Jun 2026 19:01:45 +0000
Manifest next update: Sun 14 Jun 2026 19:01:45 +0000
Files and hashes: 1: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: IXNtAXx3MSc+iv+9o/5txUwuMHsug6TMsYBnp27Xs/g=)
2: M5PnGpQYm028ws30MJtZnTaTcpo.roa (hash: /Y8TDD+fi7yLoYjDRGZ16k+8Sg/nu7LlsqZTmrtMrIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:8a:af:a4:56:93:e5:c1:48:e0:de:b9:6a:df:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: Jun 13 19:01:45 2026 GMT
Not After : Jun 14 19:01:45 2026 GMT
Subject: CN=9d31a1d6b50fe6d37b8842fee6a48767c530f16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:0f:f6:29:2e:9c:e1:cd:e4:7b:bc:da:e9:
41:7a:36:1b:c9:cb:42:0c:c8:d6:ff:bb:a2:97:19:
25:09:84:cc:fd:7e:9b:43:7e:54:c2:d7:1c:27:ba:
53:d8:7d:aa:07:17:30:be:6a:e3:f5:de:0c:18:ff:
42:c0:30:73:1b:10:97:6b:fa:c7:1a:4e:c1:9c:6a:
be:e4:84:4c:c6:d9:2e:08:a9:5a:e3:af:56:a0:e0:
cb:3f:02:17:3f:fc:92:dd:56:09:f9:f6:d9:71:cb:
83:9f:2a:30:6f:72:8a:de:43:8a:d7:4e:7c:9f:f8:
25:6e:16:9d:f3:4d:e5:25:b1:4f:da:0b:f7:d7:48:
c4:dd:e4:81:49:cf:4d:23:f2:e8:80:4a:c0:1e:91:
63:83:37:9b:a1:58:f2:26:81:3f:c3:bf:64:2d:e7:
c8:7c:19:95:4b:4d:26:27:73:de:d0:2c:6e:2a:9f:
b0:eb:37:51:c9:24:ed:4d:66:ad:42:12:7b:2e:ab:
30:7f:f2:c9:90:ed:e9:5e:2a:a3:8d:de:25:80:21:
24:6e:ad:13:12:17:71:2a:72:39:00:81:bd:19:19:
e1:bd:de:eb:a2:6e:4d:34:97:5e:2f:69:da:bb:56:
87:a6:50:d0:47:90:9a:e7:be:84:75:e4:c4:01:ea:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:31:A1:D6:B5:0F:E6:D3:7B:88:42:FE:E6:A4:87:67:C5:30:F1:6D
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:03:db:79:e1:da:3b:e8:73:e7:27:c6:bc:ea:f3:18:e3:0d:
d2:0a:11:bd:0e:cc:08:3e:29:7b:70:db:9c:08:e5:cb:88:af:
3e:87:10:c7:f0:6e:d9:cd:36:e8:af:cf:4c:9a:53:54:36:3c:
b0:fe:fb:43:01:2d:73:9b:7a:fe:50:6d:e3:8e:b3:93:c7:7c:
7d:73:f5:a4:49:8d:a8:25:4d:e7:29:42:11:ca:c4:91:3f:36:
b7:47:19:8d:1b:23:72:6a:b0:3f:71:9b:5e:7b:27:ee:d7:09:
98:7a:ae:f5:d2:26:09:9f:0f:64:94:1f:37:fd:36:8b:46:f1:
62:5e:36:50:8d:7f:15:ba:fb:fe:cf:56:d6:64:0e:30:7e:5d:
4e:0c:eb:be:86:21:8a:eb:51:b4:fe:0f:c2:88:7a:f4:ca:0f:
48:ad:01:aa:3e:57:4d:d9:9d:59:db:37:bd:25:bc:87:cc:cf:
9b:f4:4f:06:9a:41:00:55:b0:a1:05:1e:02:00:72:79:26:51:
86:03:6a:53:4c:d9:d5:5a:a0:20:fa:3d:74:85:d5:d5:28:ec:
16:ba:4b:2b:03:77:66:79:a9:c4:1a:9b:9a:7b:ee:e7:a4:a5:
87:91:aa:b9:9b:7c:50:9a:35:d4:e1:20:63:7a:0e:d4:f8:61:
22:eb:e1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:50:17 2026 by rpki-client