Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File: DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier: umNe2KVJAQezIyg+8NAGMpx36bFlk1y6nlJIUl/cHDI=
Subject key identifier: B0:F1:A3:3A:08:AD:30:AE:59:32:90:FB:EB:09:10:4E:4B:38:F2:CF
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial: 01A0E3D0EB61199A1BDA1A6A490AF937974B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number: 1382
Signing time: Sun 27 Sep 2026 17:01:54 +0000
Manifest this update: Sun 27 Sep 2026 17:01:54 +0000
Manifest next update: Mon 28 Sep 2026 17:01:54 +0000
Files and hashes: 1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: Lq8nX6DpkKvzQjnGK4xrm91uCCxuniEOFsF+Hd1XDAw=)
2: SxljHk2cGiaCqx7oBYorH1FyNLM.roa (hash: X0K5Gb0sXyJIajhaLNptLUdlUrzJv1KHea1ZlF2NI+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:eb:61:19:9a:1b:da:1a:6a:49:0a:f9:37:97:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Validity
Not Before: Sep 27 17:01:54 2026 GMT
Not After : Sep 28 17:01:54 2026 GMT
Subject: CN=b0f1a33a08ad30ae593290fbeb09104e4b38f2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e6:07:5c:9c:05:fa:d3:01:da:22:d1:bc:82:
18:86:8a:7d:e7:3e:72:74:8e:18:a0:45:18:7e:94:
65:71:16:6a:d5:25:e8:49:de:d1:1a:16:3a:4d:66:
4f:3e:d5:de:1e:30:6c:c3:3a:d4:ae:f5:b6:f8:08:
58:20:af:6d:9b:80:63:3d:af:97:7e:91:ee:bf:db:
57:d6:70:d2:f6:f8:1f:a7:21:5a:58:63:02:6a:d7:
15:a3:9f:39:d6:8f:ff:77:0f:ca:c8:3f:ec:b9:da:
b3:7a:c2:d1:26:ff:9a:3c:e5:ba:cb:2e:bd:c5:9d:
05:90:cd:f4:a9:41:28:f0:bb:ad:c7:3e:b6:b7:dc:
78:27:54:ba:8b:63:71:81:b4:3c:8f:21:26:ce:3a:
72:04:c6:0c:a6:c0:81:04:ef:3c:76:3c:87:d0:f9:
85:a1:5e:ba:83:cc:97:c2:6a:97:46:2f:c1:16:9d:
a1:bf:92:6d:e6:02:a5:83:82:34:d0:30:75:78:75:
09:01:f1:20:cf:bc:41:d9:09:ab:d9:34:82:12:85:
39:85:0c:02:54:1b:3b:c6:10:2c:ca:1c:ef:62:a7:
64:19:6a:a0:e5:af:b9:3f:67:3a:d0:26:ec:83:80:
99:51:90:69:dd:87:01:e7:d8:b7:93:75:e4:f3:97:
82:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F1:A3:3A:08:AD:30:AE:59:32:90:FB:EB:09:10:4E:4B:38:F2:CF
X509v3 Authority Key Identifier:
keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7d:a7:f6:e0:e0:80:8b:c8:b0:5e:d2:78:68:05:6a:61:2d:
4c:cb:79:63:33:ea:65:68:25:f5:4a:46:15:f2:e2:e4:46:f5:
17:f6:5f:ad:8e:ad:91:32:f1:c0:b5:d5:df:1a:8a:3d:55:ff:
e4:23:19:6c:b4:6e:00:d7:ef:18:a1:d5:ce:89:27:d6:89:a6:
4c:f8:07:cd:07:a9:f2:37:cf:ad:3e:a6:a4:26:a2:16:9e:4f:
44:9f:26:ce:b0:74:ad:3d:e7:a4:d8:92:6c:42:d2:24:9a:64:
cc:4b:49:af:b8:58:d8:0f:1c:c1:dd:7f:e4:07:97:7a:2e:db:
2c:3c:49:aa:1a:b5:3a:60:90:af:0d:25:c8:35:38:51:3c:69:
0e:df:31:ef:ed:fc:6c:85:ab:91:9b:d8:f4:2b:76:de:ba:85:
c4:4c:6e:25:bc:65:03:c9:14:c0:6b:13:bb:0e:06:5a:9f:52:
79:c1:12:9a:09:f8:21:ff:e8:54:bf:2b:70:c2:2c:35:ac:8a:
99:99:06:59:da:65:83:eb:0a:de:a6:36:45:d7:89:f8:76:11:
90:47:ea:8d:7a:51:88:59:0d:be:17:9b:b9:16:b2:dc:14:4e:
3d:84:a4:5d:52:48:0f:cc:11:6e:c0:f6:b9:19:8c:16:ca:b2:
8b:de:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:47:14 2026 by rpki-client