Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
File: DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json)
Hash identifier: h+kpr1jn9MdVldWl8USjBtogFBAt2kBijVDMY9PyGd0=
Subject key identifier: B8:9B:0D:08:82:60:BD:08:D7:1F:4F:0C:38:3A:41:71:68:E0:3F:AB
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Certificate issuer: /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial: 019FA7F4A546131C9DEEE42B1FDA7E78F71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
Manifest number: 11AE
Signing time: Tue 28 Jul 2026 09:00:55 +0000
Manifest this update: Tue 28 Jul 2026 09:00:55 +0000
Manifest next update: Wed 29 Jul 2026 09:00:55 +0000
Files and hashes: 1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: WNg+MAqguxqfSjkVUQUjwasKEf56auY2P9DXVhi2+r0=)
2: DiPUcYeYMMKBJ6pco8Genqou5P4.roa (hash: k19Q1QHBDALtzKkWkQIrCed59UccTXEghHZXW9Dj4JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:a5:46:13:1c:9d:ee:e4:2b:1f:da:7e:78:f7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Validity
Not Before: Jul 28 09:00:55 2026 GMT
Not After : Jul 29 09:00:55 2026 GMT
Subject: CN=b89b0d088260bd08d71f4f0c383a417168e03fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:01:ff:87:d8:15:e4:73:fc:8b:4f:2b:09:
cc:10:b3:a1:ce:22:dd:6d:fa:a6:e5:d9:44:1f:ed:
1d:fd:ef:9f:69:64:fb:a3:c2:25:21:9f:21:ba:9a:
98:5c:ef:b7:d8:b2:a7:a3:2e:34:a3:74:1c:08:92:
b3:b6:9d:e5:54:af:0a:9b:0d:7c:3b:f2:9a:6c:a4:
6f:ac:4c:7c:03:ac:42:88:32:02:61:91:b3:d6:ff:
4a:84:95:22:19:dc:c5:48:23:b6:a4:51:39:5f:fc:
2f:49:e7:b6:c2:b0:70:28:7b:69:fe:d2:58:64:71:
9b:e2:bf:91:4f:27:c2:ed:72:17:b0:a2:d3:a6:ff:
02:6f:69:e6:57:80:26:7f:29:b7:d9:44:4e:bc:14:
51:98:e5:16:17:92:5b:40:4b:59:c5:36:b3:49:49:
a6:1c:83:50:24:dd:a9:d1:ae:91:e1:d0:ce:af:8e:
84:7a:5b:6e:97:22:aa:12:d2:f5:11:b1:53:aa:6f:
59:0a:79:ac:e5:74:25:08:3a:0d:c3:1b:aa:ab:29:
70:d0:60:77:e7:ca:bb:eb:61:4d:ca:e9:0e:d8:26:
fe:37:d9:9a:2a:db:87:b6:e1:36:bf:12:10:c9:07:
e5:08:94:81:52:9d:54:74:37:1e:d2:ca:f6:48:67:
55:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9B:0D:08:82:60:BD:08:D7:1F:4F:0C:38:3A:41:71:68:E0:3F:AB
X509v3 Authority Key Identifier:
keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:31:d3:db:de:ba:de:a4:04:87:87:de:4e:4b:39:3e:62:43:
6c:f8:d8:bd:e8:ba:98:20:95:74:e5:ff:fa:e7:1c:7f:e3:bc:
44:28:50:44:2f:c0:d4:e5:7a:6b:06:06:e2:40:4f:6c:89:26:
8c:27:45:7b:15:34:49:c1:f1:50:de:b3:58:cf:fa:76:8d:9e:
4f:45:4e:e9:6c:c6:9b:45:87:3d:72:67:b4:a7:5d:88:64:b1:
85:35:46:c4:7e:90:99:8b:1f:ce:58:45:b2:12:e4:2b:f7:d4:
4b:3e:d0:ba:a9:0c:40:92:73:41:09:aa:ac:96:9f:63:1c:fb:
30:f4:5f:2c:df:33:39:96:7f:bf:c0:ef:4c:39:10:95:0e:b4:
5c:32:da:0c:94:5a:6d:1c:25:fc:db:1f:bf:33:b0:47:0c:49:
31:27:7b:77:d9:3a:a9:ed:16:13:9c:5b:12:b2:da:32:8c:83:
fd:7b:59:b6:fd:20:13:7d:0e:da:ed:75:ae:d8:78:d8:e4:b2:
81:df:5b:7d:48:e7:f0:63:e6:a7:80:2d:bc:4d:cc:fc:cc:06:
cf:a2:73:16:67:fb:b2:16:19:c9:90:de:41:86:aa:6c:54:23:
a4:31:c1:ec:cd:2e:aa:24:5c:a2:a1:bf:f6:e8:4b:cd:56:87:
e8:47:39:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:53 2026 by rpki-client