Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: k0saqswgRogm9Q3Emn6fcOH1Mm3ucIg06YWcuhtE9Tk=
Subject key identifier: 1D:8A:79:CF:50:10:9B:F8:C5:DA:8D:CD:F1:54:26:49:69:7A:A8:A1
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 019EBFFF7B897CAD0824561410E675B951A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 0A2A
Signing time: Sat 13 Jun 2026 08:00:51 +0000
Manifest this update: Sat 13 Jun 2026 08:00:51 +0000
Manifest next update: Sun 14 Jun 2026 08:00:51 +0000
Files and hashes: 1: 1--Z6Q8BarjYadI1h8WmhE35LM8U.roa (hash: pUDJuTCmc9bQJt1IcbDsRbQfB75IO5Jl60DjnzyNbKQ=)
2: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: kIO+ECFpTQOFZ4p5OA13A+c2Wm7bTFz7NAptxJsORXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:7b:89:7c:ad:08:24:56:14:10:e6:75:b9:51:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: Jun 13 08:00:51 2026 GMT
Not After : Jun 14 08:00:51 2026 GMT
Subject: CN=1d8a79cf50109bf8c5da8dcdf1542649697aa8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b8:ba:c6:51:f6:a5:c6:25:f3:89:cb:9d:f6:
33:fd:90:18:0e:c1:88:57:52:10:dd:de:20:7a:42:
54:c8:59:05:91:9e:8b:63:21:7e:2e:51:28:e4:75:
72:2c:25:53:1b:01:99:ac:2c:de:51:04:d8:b7:5c:
87:ae:c4:74:fb:6f:96:b9:77:3d:42:77:29:5d:1c:
bd:02:ff:8d:17:35:97:57:7c:94:2c:17:f1:a3:0b:
d4:f6:54:05:ed:82:98:12:b8:a5:e7:f9:ea:4b:54:
2d:40:dc:54:f8:99:9c:d7:a8:68:cd:50:0e:8a:cc:
90:3a:33:70:da:5f:f3:e4:52:f8:1e:c1:44:fc:30:
a1:b1:f9:7b:f7:7e:3a:e9:4b:0f:a0:3a:ae:65:e0:
36:af:0d:7b:8d:6d:a1:0c:ae:d5:5d:03:93:cd:b7:
04:31:31:33:11:75:98:64:68:12:1f:f7:94:5f:6a:
1c:18:c7:f8:d8:b4:ca:c2:31:c6:97:7b:05:f6:95:
fe:96:ed:17:2e:6d:ee:83:77:e4:2b:08:04:a8:4e:
43:c5:27:1f:e2:09:6d:5d:00:fc:e3:87:28:ee:2a:
58:f1:14:6b:08:8f:0a:43:65:3d:2c:94:ed:3e:8a:
43:4f:ef:6e:7f:41:08:cb:17:f7:e4:ec:6a:03:e1:
7c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8A:79:CF:50:10:9B:F8:C5:DA:8D:CD:F1:54:26:49:69:7A:A8:A1
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c4:cf:8e:c5:2f:a5:1c:7c:73:6d:69:25:22:31:fc:8d:34:
43:18:da:f2:0a:80:0a:24:64:55:15:cc:ee:0b:a7:90:58:74:
b8:89:7a:d9:c4:17:8d:1f:eb:b9:25:80:27:fb:91:31:44:99:
6f:7e:02:d0:5c:84:8b:e5:86:87:a2:22:ef:c0:30:30:48:74:
ce:f8:53:92:de:db:96:91:1c:8f:00:25:33:bc:66:6b:9b:39:
5c:ed:85:59:12:82:9c:d9:d7:86:71:0a:70:e6:27:e7:3e:29:
8e:07:6c:44:44:ff:7d:f2:c4:f3:15:e6:b8:bd:2c:e2:6d:b1:
ca:82:95:23:5d:6e:42:32:6c:cc:58:9d:72:02:0d:2d:67:d9:
35:88:43:e1:ce:0b:c1:3d:5d:43:2a:c1:ae:31:ba:5e:91:80:
af:5b:ef:a3:cd:e2:31:a6:39:ed:00:43:88:b9:79:de:fe:af:
a0:ca:d8:b7:41:0e:2a:77:08:2e:98:12:89:0e:06:e0:ac:9c:
3f:76:7b:fd:da:e4:05:32:87:db:fa:e1:06:0b:b8:b0:e7:d2:
3e:f3:4a:7c:e8:0f:a8:59:51:76:b2:92:c3:b7:77:d7:df:52:
4f:51:b3:85:ec:ae:da:54:bf:4b:5a:f1:e4:ac:71:1d:d3:fd:
12:0c:aa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:47:11 2026 by rpki-client