Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
File: DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json)
Hash identifier: jgtcqMGh9PTVKkvBdoZX/F0zD2V/HPYWM1TDgA2sah8=
Subject key identifier: 35:20:00:D0:ED:A8:20:EE:92:08:BC:0E:23:85:86:79:F9:89:C7:E6
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Certificate issuer: /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial: 01A0C1E83BB917486D9D11D238F1785E8E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
Manifest number: 1240
Signing time: Mon 21 Sep 2026 03:00:17 +0000
Manifest this update: Mon 21 Sep 2026 03:00:17 +0000
Manifest next update: Tue 22 Sep 2026 03:00:17 +0000
Files and hashes: 1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: BotKObYfLq+nzfYxVXCdAUtcBRE7BeqTrQ31+QMNzWc=)
2: DiPUcYeYMMKBJ6pco8Genqou5P4.roa (hash: k19Q1QHBDALtzKkWkQIrCed59UccTXEghHZXW9Dj4JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:3b:b9:17:48:6d:9d:11:d2:38:f1:78:5e:8e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Validity
Not Before: Sep 21 03:00:17 2026 GMT
Not After : Sep 22 03:00:17 2026 GMT
Subject: CN=352000d0eda820ee9208bc0e23858679f989c7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c9:fe:49:be:4e:0b:e0:83:03:41:77:44:83:
fd:64:e6:88:85:55:1f:43:bd:bd:22:79:63:cf:c2:
f9:a3:76:5e:77:2a:7d:ca:f3:fd:80:6e:e7:0f:1a:
ab:02:b0:8d:2c:8b:52:85:b5:c2:3f:47:7b:4a:67:
a6:8d:53:2b:94:93:b3:4f:8f:b0:5e:8d:63:da:ee:
43:e1:f4:f2:27:5b:e7:0b:a7:f4:ee:72:6d:9c:f8:
98:0a:f4:cc:9a:fb:ed:e2:b6:02:76:7a:78:e7:bf:
e2:ac:7b:dd:a0:d2:b7:4e:f6:c8:a6:72:05:be:3a:
8a:d2:d9:4c:b2:96:47:c0:24:17:5e:9d:85:c5:db:
07:3f:b5:fa:65:07:ba:3f:45:31:e7:e1:de:d8:7d:
1b:4c:a1:5b:71:58:ee:51:51:d1:1f:46:31:23:78:
7d:6a:71:50:03:52:12:56:3a:c7:a4:8e:57:7b:ac:
d0:07:c3:23:d8:40:0b:c4:99:1e:6b:1d:68:73:4c:
29:25:2f:e2:8c:27:74:65:e7:98:75:af:56:30:7e:
43:67:d1:cd:da:d6:85:9a:ae:f5:57:10:5e:a0:39:
f2:e5:65:d0:e6:28:d7:22:f0:2d:35:55:05:ff:77:
0a:7b:a0:3d:43:e6:20:8c:5e:27:70:32:39:f9:15:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:20:00:D0:ED:A8:20:EE:92:08:BC:0E:23:85:86:79:F9:89:C7:E6
X509v3 Authority Key Identifier:
keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b6:0e:7d:07:27:e2:1c:b1:f5:87:fe:55:37:dd:1b:60:71:
89:31:47:97:30:00:80:be:46:9e:bb:ca:5c:de:0c:cf:d8:5b:
5d:b7:74:97:67:92:a9:34:37:fa:7a:6f:01:f0:4b:3f:2d:a5:
fd:bd:cc:f5:44:92:ca:ca:a8:64:da:a3:89:d8:ad:5f:7e:4a:
17:dc:4f:fc:9c:89:8b:be:64:76:ce:73:c9:31:68:91:b6:73:
55:d4:7b:65:f8:56:59:f1:98:34:57:09:66:8a:99:ac:25:d5:
da:52:73:94:67:fe:ab:6a:b5:e9:df:63:cf:5a:ab:0a:13:db:
a3:e3:51:2a:f7:7b:90:4d:c9:a3:bf:1a:06:d5:93:26:50:55:
54:f0:84:2d:2a:93:f5:2d:0f:d9:f3:22:52:ec:67:13:a7:e7:
80:a9:4f:2a:f0:90:aa:88:7e:f2:d0:e3:b9:7f:30:8a:62:06:
1c:67:cc:7f:7a:af:a2:5f:04:3e:50:b6:0c:1f:62:b7:f9:89:
4e:b2:de:70:7f:3b:81:df:60:8e:92:8d:a9:16:8a:5c:05:c8:
bc:14:06:be:2d:ba:e4:bc:3d:d9:17:0a:6e:3c:59:14:b0:c9:
78:5e:03:5c:44:da:bc:21:f4:0b:8a:90:22:a2:a6:f5:68:27:
6d:e1:43:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:48:24 2026 by rpki-client