Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: I/p5HDq8kDuijPlmhL+5tn12cU1Wf9ZIaBDKOomTDI0=
Subject key identifier: A9:3A:74:68:53:05:45:3E:0B:BA:A2:0B:1F:70:41:26:19:D4:D8:AA
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 019EBE7F329FB37A6B0FD48B10FE7FCA04E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 01:01:07 +0000
Manifest this update: Sat 13 Jun 2026 01:01:07 +0000
Manifest next update: Sun 14 Jun 2026 01:01:07 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: VPrvXOw0dqv/YMgSFC/5HAZ0lhYvGQRRxgfnC+otBd8=)
2: NxS44xqtw9wnJjtyrxmTBDUCj5c.roa (hash: HUNSDs/gJPWUN3iy9W3sRGZH+ajPQ9ZIuVJ3VIFyz4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:32:9f:b3:7a:6b:0f:d4:8b:10:fe:7f:ca:04:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Jun 13 01:01:07 2026 GMT
Not After : Jun 14 01:01:07 2026 GMT
Subject: CN=a93a74685305453e0bbaa20b1f70412619d4d8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:2e:d1:a3:46:6f:44:95:4a:f6:cd:90:04:
6f:bc:b6:ea:51:14:67:ae:96:f5:0f:7c:ad:cd:2a:
86:07:af:f4:25:65:9d:76:91:bf:cc:39:ae:5c:0e:
7a:16:ab:a8:05:3c:34:23:e8:52:02:73:91:60:52:
8f:e0:1e:fc:23:b8:df:e6:a0:20:eb:4d:d0:07:a2:
81:8b:28:ab:26:5b:81:08:e6:c0:13:22:34:29:c2:
82:b4:2f:68:3b:4b:25:b6:54:c2:fd:47:87:3c:31:
ff:11:9c:e4:0f:2a:6f:86:ea:a3:f4:c9:85:1c:df:
54:25:a8:e1:df:29:05:f6:e0:15:a8:f6:4d:d3:e7:
f3:03:a6:64:f5:16:4d:d5:02:fd:3c:de:e7:59:19:
5e:21:33:25:39:cf:ba:5d:a0:bf:6f:0a:55:59:68:
9e:a2:30:b4:58:40:9b:37:32:53:e1:58:28:ec:b6:
92:c3:82:f7:d7:38:dd:c7:ee:1e:73:a3:e0:1f:d1:
cf:da:38:d3:a6:26:9e:ff:ad:1e:da:13:bc:02:81:
74:27:27:69:76:b8:b9:5f:ff:74:df:51:e3:4f:ec:
c1:f8:cf:ba:e4:86:b8:ec:39:cb:ad:4b:87:0a:3e:
35:06:c0:bf:d2:0e:17:1f:9e:48:c5:21:7d:a4:ef:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3A:74:68:53:05:45:3E:0B:BA:A2:0B:1F:70:41:26:19:D4:D8:AA
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6b:84:2f:65:d0:8c:44:2e:da:97:6e:67:6a:ec:b2:97:f0:
3b:af:a3:ac:d3:a0:2e:e9:c5:f9:f6:7b:b3:f5:59:54:6e:61:
09:5b:c7:71:c1:ce:ac:ae:e5:42:eb:75:be:3a:7f:69:ee:b5:
a9:19:50:91:52:1a:da:62:02:f3:17:07:76:ad:c8:84:cc:0e:
e3:30:6a:58:6f:a1:1e:d8:c7:86:6d:6b:e0:43:75:3e:fd:dd:
d6:f1:ef:1d:cb:6b:f9:1b:7a:0c:ad:b9:05:99:45:71:1a:c9:
2a:0c:94:4a:dd:db:1e:51:fb:e1:f2:44:40:33:42:3c:25:e9:
46:ef:48:9f:3f:61:85:53:f8:26:ab:8f:3e:47:13:2f:41:8b:
b6:67:56:2f:c2:ec:64:7c:56:c6:bb:b4:f0:cb:aa:3c:b1:df:
5a:e9:92:81:21:5c:68:ec:73:c4:67:57:d1:39:24:6f:d2:c1:
90:8a:ce:52:84:2f:89:3b:56:08:5f:01:5d:e1:1c:5a:c9:f1:
bd:cd:18:cd:4c:fb:7e:ef:31:3c:a2:8a:7a:6a:42:01:0f:46:
a4:2d:9c:1d:09:aa:07:2d:56:b0:d8:45:70:33:d6:3d:8d:0d:
05:e5:83:ff:57:4d:a6:fb:26:c4:dc:0f:98:b9:3c:c9:7e:8a:
41:45:0d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:44 2026 by rpki-client