Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: LYUAVRzz9yR8TNrMUziwCMpwwg/SeNFiaqVOnzVK16E=
Subject key identifier: 7E:2B:32:C3:F4:24:EB:19:F3:D0:45:63:89:92:39:3E:9F:C4:9D:96
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 019CAAFD5612A50C975C119DBC7B267098FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 0916
Signing time: Sun 01 Mar 2026 20:00:55 +0000
Manifest this update: Sun 01 Mar 2026 20:00:55 +0000
Manifest next update: Mon 02 Mar 2026 20:00:55 +0000
Files and hashes: 1: 1--Z6Q8BarjYadI1h8WmhE35LM8U.roa (hash: pUDJuTCmc9bQJt1IcbDsRbQfB75IO5Jl60DjnzyNbKQ=)
2: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: lKL6tFaI9SGOWHxp5++I3jfS7bu7dTWsJGdo5RsVAtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:56:12:a5:0c:97:5c:11:9d:bc:7b:26:70:98:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: Mar 1 20:00:55 2026 GMT
Not After : Mar 2 20:00:55 2026 GMT
Subject: CN=7e2b32c3f424eb19f3d045638992393e9fc49d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:0b:49:3f:46:1e:6f:b1:c8:42:d0:77:85:
11:67:95:01:6a:e3:e3:cf:06:eb:d4:95:60:ba:ab:
b4:fe:17:58:4e:c4:16:17:f8:d2:8c:48:f8:25:36:
61:2f:6d:6f:48:89:18:cf:fd:aa:42:dd:0f:13:d7:
e0:ab:7d:cb:9e:e8:cb:89:a5:c0:a5:7f:05:89:81:
e7:bb:03:06:a0:59:72:61:88:71:7d:5d:a2:e1:66:
5c:72:8c:50:d8:4f:cf:62:b0:81:88:5a:12:57:b9:
0a:52:c6:29:41:91:bd:05:4e:6d:a6:90:31:3f:23:
af:3d:87:64:4e:8b:26:2c:40:8d:fc:23:42:e0:d8:
e2:f2:90:cc:93:3b:2b:e8:63:c1:93:48:59:64:2d:
58:1c:39:1d:b5:8e:10:a5:bb:20:e5:f6:84:39:5e:
e0:7f:a6:31:d6:0e:06:c2:a6:7d:2d:f4:cd:69:84:
e3:7a:b4:52:65:6f:39:8d:fa:05:f9:b4:5a:95:de:
7e:ea:d6:ed:87:a4:ae:23:89:45:27:f7:de:9f:4c:
b3:ff:7c:d8:c2:f3:28:65:cb:17:df:b6:a2:6c:04:
e1:bd:29:f4:67:38:91:a0:ad:32:f3:db:66:0e:b5:
5c:d6:73:3e:c7:b8:d2:44:f0:22:5d:52:e0:c5:ce:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2B:32:C3:F4:24:EB:19:F3:D0:45:63:89:92:39:3E:9F:C4:9D:96
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:e3:96:84:c6:ce:1c:5d:76:da:26:49:7b:f6:5d:73:5d:59:
f9:2e:90:9d:f1:3e:3c:1f:92:5b:3e:08:75:ca:f7:5e:d3:d5:
22:ec:cf:b4:10:d4:8f:e5:fe:06:43:9e:56:7f:ff:26:35:1c:
d5:32:2f:d7:17:e8:12:7c:6a:6a:a0:fe:fc:b6:80:e9:4a:52:
91:d0:a7:b0:1c:63:e1:cd:7d:27:19:f3:3f:f1:be:e0:03:6f:
ae:5b:a2:f9:5d:72:07:aa:f4:1b:5d:5a:75:05:56:4a:7b:25:
b7:15:00:29:f5:e1:c5:2c:4f:be:32:73:a3:3b:f5:2a:03:a9:
6f:c8:ff:53:bc:ad:05:82:36:d9:58:bc:62:09:7b:45:d0:43:
8a:fb:47:f9:dd:84:15:17:cc:ba:40:43:67:dd:23:8c:b3:fb:
1c:10:d1:ee:22:87:25:8f:1f:da:3f:50:15:04:3e:69:b6:0b:
5e:3d:36:97:0f:70:7e:57:f4:ac:4f:62:66:30:74:16:84:ff:
19:57:7c:20:fe:bc:f2:af:6f:5a:e1:83:a8:a6:44:c9:76:42:
29:1f:7d:d5:67:a3:1d:f8:f1:e3:aa:03:19:ae:6c:06:d4:b2:
6a:fd:50:3e:58:c4:5b:d1:81:ec:1c:cd:b2:b8:58:2d:f9:96:
db:ed:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:53 2026 by rpki-client