Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
File: DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json)
Hash identifier: ClT++Xe5dofqvzk3/SlewM8ZFPEtpVcL9bY3V0O0XBs=
Subject key identifier: 70:F2:25:E7:55:28:DC:BF:1F:5B:52:3B:19:67:0E:23:67:6C:DB:D4
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Certificate issuer: /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial: 019CAD227708BC5E08B3C2EFE20AA577BBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
Manifest number: 1023
Signing time: Mon 02 Mar 2026 06:00:42 +0000
Manifest this update: Mon 02 Mar 2026 06:00:42 +0000
Manifest next update: Tue 03 Mar 2026 06:00:42 +0000
Files and hashes: 1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: ebfheuHIGdLWeZ9wUv55sxiqSvfJ6qH4s8fz8rFTIeY=)
2: DiPUcYeYMMKBJ6pco8Genqou5P4.roa (hash: k19Q1QHBDALtzKkWkQIrCed59UccTXEghHZXW9Dj4JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:77:08:bc:5e:08:b3:c2:ef:e2:0a:a5:77:bb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Validity
Not Before: Mar 2 06:00:42 2026 GMT
Not After : Mar 3 06:00:42 2026 GMT
Subject: CN=70f225e75528dcbf1f5b523b19670e23676cdbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:8a:4b:c5:a5:45:9b:e2:e1:16:2e:f5:bb:
5b:0c:fa:ff:67:07:3c:45:c6:28:00:d5:d5:cf:da:
ae:dd:25:c1:fe:c8:57:7e:df:bb:47:17:e0:1e:dc:
19:25:b1:b9:25:45:73:ff:06:16:d9:26:ce:8b:43:
9d:41:f5:c9:24:ac:ee:16:85:eb:10:52:d9:ca:3f:
da:e4:ef:bc:01:fe:74:27:62:40:bc:73:8c:fb:9b:
a4:1e:98:4c:a2:d3:2c:d6:c5:eb:82:e1:30:07:b2:
c3:d4:29:76:c9:01:bb:d1:cc:c8:74:6d:0e:1b:e3:
a8:91:46:b3:6d:f7:de:a4:43:5b:ab:ae:67:bb:42:
a4:3e:ce:81:67:76:16:d2:0a:4f:44:18:a4:a8:7e:
94:89:83:2a:bd:8a:ca:3c:5a:ec:ed:5e:80:49:8f:
cf:b8:65:81:81:23:6c:89:8b:b0:cd:54:55:ec:b9:
4c:0d:58:8a:c1:1c:c6:6e:86:71:af:80:77:67:ee:
6d:db:f8:f5:a3:76:db:a0:ae:00:58:3d:73:35:51:
c4:12:7c:f3:c2:de:ed:15:52:4b:5b:11:2d:11:0a:
76:38:45:14:67:ec:69:6e:a2:0e:e0:6f:39:a6:37:
1e:05:99:a8:82:8f:77:8f:ee:97:3d:eb:2b:27:0f:
e4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F2:25:E7:55:28:DC:BF:1F:5B:52:3B:19:67:0E:23:67:6C:DB:D4
X509v3 Authority Key Identifier:
keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:df:fe:19:f9:15:e9:fe:5e:30:02:09:20:71:a7:aa:8d:07:
a9:de:bf:e7:7a:4e:53:dc:a1:f0:80:9a:e8:19:9c:43:4f:89:
78:f8:7d:67:49:c5:7b:49:b0:06:b7:ec:18:49:cd:1a:ce:c0:
66:a3:eb:33:b5:2e:cb:97:30:3e:8b:f5:6c:49:16:18:0b:9f:
b2:03:cc:36:88:bd:6d:f0:2c:40:f7:71:fb:34:6d:69:34:ac:
e7:45:b4:de:db:6c:14:21:81:f1:2f:cc:29:11:8a:e3:bb:97:
68:e1:03:17:e2:4c:a1:11:41:39:38:b9:fb:c1:97:36:7b:5f:
d4:dd:8e:50:7d:f6:93:42:21:06:7f:95:9e:28:bb:8a:1f:0d:
ef:22:48:52:aa:d1:a3:c4:c6:98:60:fa:44:53:a2:d1:cb:61:
9f:25:2a:8b:e1:2f:55:73:ac:0c:ea:d0:f5:f6:23:a5:c4:a0:
d2:14:c6:7d:82:e5:22:9c:7e:68:a4:cd:18:a7:bd:46:06:4b:
2c:bb:cd:b8:e0:36:e8:32:89:ed:68:fc:43:0c:b8:f8:76:a3:
79:43:37:b5:8c:46:ac:df:3b:64:d3:d2:76:1e:51:0d:72:69:
d9:0b:e3:7a:78:af:e5:af:63:de:f8:56:f9:99:86:3e:fe:01:
c0:52:98:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:51 2026 by rpki-client