Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: SNkvy0JCsfVRLEFYUNuMQH+LpAc/mz9qzlYMgT/GI5g=
Subject key identifier: F3:2B:B4:62:22:DF:CE:5F:CC:AB:3C:82:9D:8F:08:61:47:8B:F5:1E
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 019FA9AC01E6056306B969B275AA7E3986BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 0AA3
Signing time: Tue 28 Jul 2026 17:00:49 +0000
Manifest this update: Tue 28 Jul 2026 17:00:49 +0000
Manifest next update: Wed 29 Jul 2026 17:00:49 +0000
Files and hashes: 1: 1--Z6Q8BarjYadI1h8WmhE35LM8U.roa (hash: pUDJuTCmc9bQJt1IcbDsRbQfB75IO5Jl60DjnzyNbKQ=)
2: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: J6JbEO/vzw9foM8sJCXj8W6Gzi/1ODNB0nr7BLlixMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:01:e6:05:63:06:b9:69:b2:75:aa:7e:39:86:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: Jul 28 17:00:49 2026 GMT
Not After : Jul 29 17:00:49 2026 GMT
Subject: CN=f32bb46222dfce5fccab3c829d8f0861478bf51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:8f:f8:c8:f4:cd:6a:7f:1c:6f:ef:b7:53:
21:37:0a:07:be:71:59:5c:3f:5e:00:bd:9a:30:b8:
37:d2:3c:0c:02:7e:0d:81:c9:85:bd:f9:df:5e:7e:
98:a4:3c:f5:1f:d4:ff:1a:3e:e8:1c:58:e4:98:f1:
01:62:e0:08:6e:62:51:45:0c:17:43:71:d6:81:28:
cb:3c:ef:df:d9:30:d1:fc:31:eb:71:65:45:e7:64:
90:db:d6:bf:21:cd:ba:bb:b9:af:78:e6:b2:3f:e0:
ea:97:7f:c1:09:e7:6d:72:dd:8c:67:bd:f6:bf:31:
17:6e:ff:c3:37:b4:ab:bb:d5:15:ac:46:66:6a:ac:
54:4f:4f:09:3b:81:fc:bb:79:f0:f0:12:24:f7:db:
d6:ff:1d:66:38:a6:27:ca:27:0c:ee:03:64:be:88:
56:00:76:8b:f9:2d:39:f6:12:3c:4e:e8:a4:18:5e:
52:61:84:2b:7e:ac:b6:83:7d:ef:ae:26:d8:88:53:
29:f3:18:04:86:69:ea:7f:2b:c2:87:9a:fd:37:bd:
1e:57:52:53:e0:fb:f1:19:cf:4b:cf:39:86:16:7b:
bb:f8:17:26:07:21:ed:7e:69:65:74:57:9d:b0:88:
fa:a8:19:11:5b:26:4c:1c:99:1c:d0:fc:22:dc:f2:
e9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2B:B4:62:22:DF:CE:5F:CC:AB:3C:82:9D:8F:08:61:47:8B:F5:1E
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:4c:f4:7b:43:3a:ed:71:b6:11:ec:fb:12:82:67:2e:24:21:
b4:32:0c:35:b6:0b:ac:dc:d1:87:e9:06:af:54:95:30:22:25:
30:52:7c:f4:24:f7:06:ed:2e:5f:ff:7c:3c:d3:dc:74:a7:c8:
7f:31:23:3d:68:36:8d:11:ce:a6:b6:57:ae:ff:1f:aa:15:1d:
71:ee:3b:49:50:75:d3:f2:08:39:31:ed:69:74:75:95:b0:92:
88:70:55:7d:73:34:ce:81:59:dc:ea:18:41:a8:a3:dd:21:d1:
96:4d:f4:07:3e:96:7a:5b:f8:8c:1a:02:f7:1c:59:50:52:75:
d2:c3:59:db:73:30:99:0c:b9:81:12:fe:5b:58:e4:46:2b:41:
78:5d:af:d8:5f:54:d2:5f:75:65:eb:9f:5c:3a:bd:bd:09:72:
8d:48:64:f1:9f:c8:7f:77:0f:73:fe:b5:fe:f6:07:ca:ba:e1:
40:25:60:bf:69:4b:69:05:59:a7:18:70:7d:c4:2c:24:d1:dd:
e2:af:91:4b:a1:ac:28:3c:a5:fc:c1:3d:eb:a7:f0:76:ee:b3:
a9:b5:0b:b2:1b:25:75:f0:77:ea:f0:1c:f1:aa:21:08:90:b2:
4e:a7:73:b5:60:17:33:58:df:a3:c9:79:64:ff:ec:95:bb:7d:
61:0e:53:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:24 2026 by rpki-client