Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File: DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier: KVYSuUxthrRixfdkSbU4mhIpLAUF0dpEiCs02N1kzJ4=
Subject key identifier: FE:EE:51:FD:E3:71:8A:AD:61:8A:CC:1A:43:FC:61:99:3B:44:29:FB
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial: 019FA906D789F32CF8024D0C87AB01C72A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number: 12DF
Signing time: Tue 28 Jul 2026 14:00:25 +0000
Manifest this update: Tue 28 Jul 2026 14:00:25 +0000
Manifest next update: Wed 29 Jul 2026 14:00:25 +0000
Files and hashes: 1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: WVut8dmtr7z5tx3ZY5LpxRiMDKNh+tIqoEJkpY92Lj0=)
2: SxljHk2cGiaCqx7oBYorH1FyNLM.roa (hash: X0K5Gb0sXyJIajhaLNptLUdlUrzJv1KHea1ZlF2NI+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:d7:89:f3:2c:f8:02:4d:0c:87:ab:01:c7:2a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Validity
Not Before: Jul 28 14:00:25 2026 GMT
Not After : Jul 29 14:00:25 2026 GMT
Subject: CN=feee51fde3718aad618acc1a43fc61993b4429fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:37:26:d3:41:6b:a9:54:14:62:e8:f1:7b:
a0:6e:25:da:56:58:84:41:70:b7:91:6d:e7:06:a9:
02:5a:a9:a2:80:08:66:3b:c9:59:36:80:7c:ee:fc:
e1:e2:c8:e4:f1:40:d4:e6:94:38:33:37:f0:bc:bb:
7d:47:2a:65:0c:c2:21:18:3b:50:a9:ce:af:d4:65:
08:61:1a:5c:49:7d:20:c6:cf:20:98:26:a2:5d:1b:
13:d9:48:37:b8:55:da:92:37:94:f1:ff:e9:da:b3:
07:7a:35:95:25:73:24:a5:84:79:cd:aa:f7:44:c2:
a7:e9:24:05:f9:1c:6f:88:9d:76:89:03:45:85:7f:
86:34:6b:28:3e:e2:29:22:ef:09:33:b8:9d:7f:d3:
b7:a0:8b:37:90:e7:e6:78:d3:54:e5:af:12:ec:f1:
7d:cf:45:0e:c7:9a:10:f9:53:f5:c9:e5:aa:9c:72:
46:3c:a7:ce:21:b1:9d:b9:d9:66:09:fe:7f:d6:71:
90:87:5a:06:73:65:ee:41:c8:15:73:7c:be:a2:53:
3f:f8:a4:a6:df:4f:c3:53:6a:8c:4a:2d:e1:0b:7f:
8d:1a:04:a9:30:c3:97:dd:55:c8:66:33:c1:1b:73:
37:1a:b3:e6:40:19:40:8a:58:9e:ef:4f:5a:c6:b3:
47:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EE:51:FD:E3:71:8A:AD:61:8A:CC:1A:43:FC:61:99:3B:44:29:FB
X509v3 Authority Key Identifier:
keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:21:24:a4:a6:b0:5e:ce:1d:0e:51:ab:be:0b:7e:05:00:0c:
e6:1e:e9:fc:41:c4:0a:17:57:95:3e:b8:82:b9:46:4f:11:82:
8d:fa:af:b7:fc:7e:aa:95:2d:d5:9f:31:e6:89:83:4d:ef:82:
1d:e9:39:67:12:38:d6:1d:88:c9:12:03:82:36:06:c6:05:77:
16:87:01:58:ef:28:26:10:71:db:f1:55:a4:03:27:56:65:c4:
03:c8:f4:4e:e3:da:30:ca:ed:be:29:aa:27:cb:31:27:38:28:
4e:f2:bf:dd:da:ad:5f:74:dc:76:75:cf:ed:6f:b0:c5:ac:05:
d8:90:31:29:25:d1:00:98:c5:a4:65:59:c1:e6:b5:e8:8e:5f:
ab:28:ea:4a:0e:cd:bf:61:e7:9b:3d:94:6d:60:bb:61:e5:ef:
3e:ba:e2:d2:de:63:f5:5a:8f:83:47:98:76:e3:27:4c:da:f0:
7c:a3:04:17:c7:81:54:0e:0d:2e:cb:ea:1d:d7:d6:40:ca:2b:
a8:d0:54:e4:a7:17:dc:77:40:ef:7c:bd:1b:4c:3b:23:55:37:
df:ea:2d:55:92:5b:df:31:18:5d:41:1c:d6:28:42:a4:50:c8:
fe:ac:ea:f3:7b:be:f2:03:52:3f:a2:44:45:29:d9:76:b4:a0:
0d:d3:69:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBteJ8yz4Ak0Mh6sBxypuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZDI3ZmVhM2JhYTNlZjY4MGU4ZjdhMDdhNWYxOTRhYzQ5
ODkyYTUwHhcNMjYwNzI4MTQwMDI1WhcNMjYwNzI5MTQwMDI1WjAzMTEwLwYDVQQD
EyhmZWVlNTFmZGUzNzE4YWFkNjE4YWNjMWE0M2ZjNjE5OTNiNDQyOWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxs3JtNBa6lUFGLo8XugbiXaVliE
QXC3kW3nBqkCWqmigAhmO8lZNoB87vzh4sjk8UDU5pQ4MzfwvLt9RyplDMIhGDtQ
qc6v1GUIYRpcSX0gxs8gmCaiXRsT2Ug3uFXakjeU8f/p2rMHejWVJXMkpYR5zar3
RMKn6SQF+RxviJ12iQNFhX+GNGsoPuIpIu8JM7idf9O3oIs3kOfmeNNU5a8S7PF9
z0UOx5oQ+VP1yeWqnHJGPKfOIbGdudlmCf5/1nGQh1oGc2XuQcgVc3y+olM/+KSm
30/DU2qMSi3hC3+NGgSpMMOX3VXIZjPBG3M3GrPmQBlAilie709axrNHAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7uUf3jcYqtYYrMGkP8YZk7RCn7MB8GA1UdIwQY
MBaAFAzSf+o7qj72gOj3oHpfGUrEmJKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYt
YTYwZjEzMTk4ZDVkLzEvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYtYTYwZjEzMTk4ZDVk
LzEvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiEkpKaw
Xs4dDlGrvgt+BQAM5h7p/EHEChdXlT64grlGTxGCjfqvt/x+qpUt1Z8x5omDTe+C
Hek5ZxI41h2IyRIDgjYGxgV3FocBWO8oJhBx2/FVpAMnVmXEA8j0TuPaMMrtvimq
J8sxJzgoTvK/3dqtX3TcdnXP7W+wxawF2JAxKSXRAJjFpGVZwea16I5fqyjqSg7N
v2Hnmz2UbWC7YeXvPrri0t5j9VqPg0eYduMnTNrwfKMEF8eBVA4NLsvqHdfWQMor
qNBU5KcX3HdA73y9G0w7I1U33+otVZJb3zEYXUEc1ihCpFDI/qzq83u+8gNSP6JE
RSnZdrSgDdNpQQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:10:14 2026 by rpki-client