Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
File: DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json)
Hash identifier: Et3NLy5txlalcSAsja1PlR+EsYsRuiLQ90f1hpe0/g8=
Subject key identifier: 2A:53:58:F4:6E:B9:D6:13:7B:F3:F4:D5:2D:13:AA:60:18:00:88:48
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Certificate issuer: /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial: 019EBE4819A3E6B365D79CFEA3BCF938A3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
Manifest number: 1135
Signing time: Sat 13 Jun 2026 00:00:56 +0000
Manifest this update: Sat 13 Jun 2026 00:00:56 +0000
Manifest next update: Sun 14 Jun 2026 00:00:56 +0000
Files and hashes: 1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: CQHfUcnoQgG3RtMq0VmMpl6ameB+R13+HQqhjLyVTWg=)
2: DiPUcYeYMMKBJ6pco8Genqou5P4.roa (hash: k19Q1QHBDALtzKkWkQIrCed59UccTXEghHZXW9Dj4JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:19:a3:e6:b3:65:d7:9c:fe:a3:bc:f9:38:a3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Validity
Not Before: Jun 13 00:00:56 2026 GMT
Not After : Jun 14 00:00:56 2026 GMT
Subject: CN=2a5358f46eb9d6137bf3f4d52d13aa6018008848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ba:d4:fd:ae:4c:ae:da:f4:c6:db:f9:41:cb:
10:0c:45:fb:66:e3:97:af:be:3a:52:ef:30:45:df:
ac:8a:ff:82:c4:c9:93:53:94:dc:e8:69:37:0a:13:
2c:e5:2f:4f:6a:22:2a:27:a6:df:5b:d2:d5:70:bc:
79:60:be:90:16:97:de:20:4b:2b:d6:e4:73:63:65:
97:2e:ba:3b:bf:98:87:bb:ea:f0:33:e5:df:5b:f3:
3a:68:23:44:33:e0:c9:f9:9e:61:f4:cc:43:a2:26:
25:13:9d:77:81:c2:af:18:80:67:d4:e7:b4:b0:11:
76:29:9a:9c:5c:e3:75:84:e4:93:13:06:87:25:77:
be:06:52:d5:62:09:06:f6:61:d0:c4:91:5a:fa:da:
70:dc:0b:38:cb:4a:97:2b:8e:e1:c2:e0:c0:b3:ff:
ce:65:d4:18:68:4e:c3:72:23:ab:a9:84:99:63:af:
c0:29:2a:b5:4b:43:48:fc:86:02:32:70:90:2c:20:
05:3c:32:93:d8:90:60:a0:a4:a2:c6:eb:6d:bb:e0:
18:a8:e0:8a:7e:12:5e:a8:aa:7b:11:95:39:30:c5:
ba:ec:f3:93:4b:08:fb:95:94:bd:3d:f0:ca:16:85:
12:ad:ee:87:21:45:cf:7e:bd:8a:aa:38:e9:db:f9:
e9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:53:58:F4:6E:B9:D6:13:7B:F3:F4:D5:2D:13:AA:60:18:00:88:48
X509v3 Authority Key Identifier:
keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:fc:fd:7f:d1:05:51:62:3d:6b:d1:f1:f4:a1:43:c8:bd:b8:
ff:6a:4c:60:24:a5:cd:11:5c:5a:42:e1:38:c2:b4:31:4c:89:
73:a5:e7:b3:b0:38:06:2c:47:30:5a:45:84:44:de:66:10:b7:
82:13:e2:02:9c:2e:7b:5e:fc:10:c8:00:b5:cf:a7:8b:fd:ce:
5d:bf:c3:0c:45:2e:5e:99:84:2b:32:e1:c4:3d:45:be:e8:ec:
fb:fc:5b:d3:44:2a:aa:a3:81:78:df:8b:60:86:7c:0b:0f:07:
f3:15:3d:f1:67:dd:b3:ca:e1:9e:b3:63:bb:8c:41:d7:ed:ff:
12:74:1d:06:26:12:d3:b4:cd:b6:20:5d:cd:bc:63:c6:a2:c2:
37:ee:03:07:e4:d6:aa:09:20:ab:e5:1c:2a:20:74:4b:4f:06:
e4:2a:12:26:99:c8:5f:93:44:ff:36:12:52:e7:f7:93:a2:37:
b8:a9:e1:24:23:93:63:c9:3b:f3:1f:de:24:14:ac:cf:e4:82:
a7:f4:17:a5:9c:c4:d5:60:01:c6:b0:4a:b6:9a:89:2a:41:21:
57:7e:32:31:0b:65:a2:71:26:03:93:94:25:1d:20:25:14:31:
2c:00:dc:d5:a6:d2:e4:ca:6f:25:cb:2a:7f:98:25:1a:08:15:
61:f2:ae:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:29:59 2026 by rpki-client