Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File: DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier: CJRc4I0OSm+KU8TPTn6FpzDH8OannXwvcpRPGgIRYKE=
Subject key identifier: FC:2A:F8:ED:19:FC:06:C7:F4:81:A9:72:5C:B1:5E:78:AB:E5:9D:2F
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial: 019D9BBEC7526ADA596903D549375A32A980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number: 11CF
Signing time: Fri 17 Apr 2026 14:01:04 +0000
Manifest this update: Fri 17 Apr 2026 14:01:04 +0000
Manifest next update: Sat 18 Apr 2026 14:01:04 +0000
Files and hashes: 1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: Z3KXPFDydtwq3OvrIwQFaM7AeZkGkbL/AzLLe5NVrbw=)
2: SxljHk2cGiaCqx7oBYorH1FyNLM.roa (hash: X0K5Gb0sXyJIajhaLNptLUdlUrzJv1KHea1ZlF2NI+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:c7:52:6a:da:59:69:03:d5:49:37:5a:32:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Validity
Not Before: Apr 17 14:01:04 2026 GMT
Not After : Apr 18 14:01:04 2026 GMT
Subject: CN=fc2af8ed19fc06c7f481a9725cb15e78abe59d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:1f:a7:f4:23:57:47:33:d6:01:8e:64:b5:
00:e4:54:6c:fb:1d:df:e7:6d:c5:ec:9c:d5:1a:ba:
92:1d:22:fe:9a:3f:89:ec:66:c5:48:76:6a:91:c7:
90:64:a2:8b:0c:d1:e6:d9:db:dd:73:e5:37:4a:33:
8e:09:58:94:8f:99:8a:97:0e:fa:5d:dd:c3:d4:76:
73:d8:f4:65:bf:e4:14:14:e4:2c:9d:49:3b:52:9e:
56:cf:09:f6:e5:9f:0a:19:bc:fc:c8:0f:c7:60:ab:
51:c9:29:0b:76:92:ee:92:04:28:a9:a4:e8:fe:e5:
cb:5f:0e:0a:d5:78:be:1a:db:57:28:52:b2:0b:78:
65:74:d8:3f:cc:2c:b5:b1:19:1e:c1:22:32:24:90:
6b:fd:73:e2:b4:e0:6b:c8:b0:2d:31:c8:42:11:6d:
e1:f3:3f:c8:55:5b:b0:f2:36:1a:1b:c7:2a:8f:25:
05:38:7c:42:6e:6c:c0:df:0d:73:48:57:72:ff:61:
fe:9f:71:3d:c6:91:0e:b2:3f:f1:20:43:7a:97:4a:
a3:0d:81:fe:a0:e9:f9:e5:95:ac:12:4d:a3:db:62:
75:15:4b:41:01:a7:36:01:3e:ec:2b:41:fd:7f:5a:
96:66:c0:2d:05:ee:0d:8e:db:12:98:c6:66:47:fe:
a3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2A:F8:ED:19:FC:06:C7:F4:81:A9:72:5C:B1:5E:78:AB:E5:9D:2F
X509v3 Authority Key Identifier:
keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f0:68:e7:cb:00:d0:de:21:1d:f2:9d:f5:9a:04:07:c6:5c:
08:1c:12:a8:dc:90:c6:21:57:13:26:1e:7e:bb:5f:1d:28:2d:
7d:b4:fe:34:9a:96:3a:18:a1:7e:1e:06:ef:19:f7:a6:b9:19:
d5:bd:d1:88:e1:81:39:9f:8f:4b:91:25:b1:2f:ce:8c:fc:fc:
52:be:d4:a3:35:94:53:3f:16:51:39:24:51:16:8d:73:6b:1f:
b3:6f:18:9f:c5:a9:4e:03:54:ee:c8:59:66:97:d6:f6:b7:29:
31:97:67:a0:f3:21:ec:fc:bb:d4:01:34:ec:ed:03:d5:8b:1f:
45:77:6b:7d:1a:6b:a3:ef:42:5e:b8:2a:46:6a:e4:27:f6:a9:
1e:36:25:e4:9a:27:61:ff:19:8b:4f:4e:1b:74:60:f0:0e:a9:
d7:a0:7c:ad:f5:bb:bc:b4:15:36:2f:d6:5b:15:37:b7:22:9c:
fd:d2:ba:33:c7:b8:7a:a9:ec:63:5d:ef:c2:44:5e:c1:bb:77:
c7:b1:1c:09:a8:ce:5b:73:a0:b0:fd:17:6c:a3:2c:06:31:2c:
13:83:c6:9c:d3:ba:9c:9d:9f:02:09:ca:71:8d:82:02:a0:05:
bf:6f:b0:b0:c4:a4:59:f5:45:d4:02:de:66:dc:6b:70:fd:a5:
ae:61:b1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:21:11 2026 by rpki-client