Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
File: DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json)
Hash identifier: zZtCX5Z+novfr9ixjRCDlASIvgZFtbFpepCl+TFkdxo=
Subject key identifier: C4:26:1C:7A:DF:73:0B:A3:EE:C5:20:B6:20:81:BC:EF:6E:7A:1D:9A
Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
Certificate issuer: /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Certificate serial: 019EBF5A5277EEBEBB68BD4D17B4B94C7339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
Manifest number: 11C1
Signing time: Sat 13 Jun 2026 05:00:27 +0000
Manifest this update: Sat 13 Jun 2026 05:00:27 +0000
Manifest next update: Sun 14 Jun 2026 05:00:27 +0000
Files and hashes: 1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: /hVcEAoo9i3ckI4lQPH7LCQWN+Uvek0r1w5b7KMYW7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:52:77:ee:be:bb:68:bd:4d:17:b4:b9:4c:73:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Validity
Not Before: Jun 13 05:00:27 2026 GMT
Not After : Jun 14 05:00:27 2026 GMT
Subject: CN=c4261c7adf730ba3eec520b62081bcef6e7a1d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:7d:62:ec:6f:72:23:a9:69:b9:12:f3:6a:
e5:38:52:c9:9f:78:65:ed:4c:7c:00:ec:9d:de:7a:
d5:c3:10:94:2f:fa:4b:d0:2e:db:46:3d:27:57:05:
0d:3d:07:f8:8d:ef:98:d9:ee:78:81:b3:64:5e:25:
aa:a4:b7:ec:96:40:f0:24:2f:4c:aa:8d:20:61:d5:
6a:57:93:9b:3b:3d:26:fa:db:8c:dc:6e:22:e1:79:
2b:e1:c6:e9:bf:54:70:7d:a0:45:fd:cc:87:1a:7b:
cf:bd:a0:96:a6:1e:fa:bd:c7:fa:c5:94:24:da:2b:
1e:05:40:28:4d:ad:07:d1:78:a8:e6:61:e7:5a:57:
d6:90:ea:6a:55:c7:3b:30:b1:39:71:1e:e0:82:95:
dc:69:61:2c:62:58:2e:14:1a:f1:a1:2a:c1:a3:c9:
fa:c1:7b:f5:e6:fe:07:94:af:19:69:c9:f8:34:65:
64:05:dc:0b:bb:80:a5:18:fb:d3:06:b9:f4:1f:e5:
c0:8b:b8:22:9c:b3:91:c3:2a:69:38:f0:73:4b:36:
0f:a8:0f:dd:9d:e9:6f:c7:9a:a6:ba:cf:dd:f1:7e:
1c:9e:06:bd:8d:c1:98:24:0e:d6:3d:ef:8c:cc:06:
01:b5:f5:8c:72:bc:4e:ee:8a:ca:03:55:08:f3:d9:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:26:1C:7A:DF:73:0B:A3:EE:C5:20:B6:20:81:BC:EF:6E:7A:1D:9A
X509v3 Authority Key Identifier:
keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:bb:7b:bf:3f:eb:fe:55:f0:21:59:90:69:cf:a9:14:8c:63:
bd:a8:fe:35:d2:13:20:0b:fc:bd:a9:f2:a0:05:00:7b:38:b8:
1c:aa:d6:92:29:c7:9d:20:0c:9e:7d:2b:2f:e4:0e:8e:82:de:
8d:3b:ae:df:35:54:16:45:6c:9d:6c:3c:ce:90:ac:06:f4:d9:
80:aa:27:b7:e9:13:4e:fa:7d:75:36:e1:a0:7d:6d:5f:6a:4c:
9f:94:7c:65:6e:dc:73:75:05:78:68:16:69:9a:b9:cc:d3:f0:
16:6f:45:50:25:93:f3:2b:32:93:b0:62:f2:5c:a3:cd:4f:a3:
4b:ad:f9:d9:3d:29:23:7d:87:29:33:40:26:be:a5:88:66:90:
ec:ee:6b:c3:d8:e6:e3:d5:87:b8:59:85:f1:eb:bf:54:c1:b6:
1f:2e:f8:c6:88:70:84:9b:37:82:fd:89:dc:af:93:b3:8b:66:
f4:31:39:0f:25:1d:98:49:65:31:1a:18:67:3f:27:ae:62:67:
a5:64:86:fb:ef:a0:35:22:9d:e0:01:a0:cf:f2:7f:58:82:15:
12:4d:35:fc:85:73:57:0c:bb:da:51:dc:f0:9c:55:f3:cc:33:
3b:79:70:40:92:66:3f:98:e8:74:99:59:2a:f8:f0:04:53:f1:
25:98:70:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:10:16 2026 by rpki-client