Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
File: DNCWnknJrnyl6POE4ZEvxzauwx0.mft (raw, json)
Hash identifier: Kz/7iBS74NL6FILHaZG3qc6NCWx6184Wn03wjeBObNk=
Subject key identifier: E4:1A:54:F5:C3:44:66:CA:86:3E:8A:2A:3C:BA:10:D5:38:3C:62:05
Authority key identifier: 0C:D0:96:9E:49:C9:AE:7C:A5:E8:F3:84:E1:91:2F:C7:36:AE:C3:1D
Certificate issuer: /CN=0cd0969e49c9ae7ca5e8f384e1912fc736aec31d
Certificate serial: 01A1329060F1D4F890349CEE7FB9049119BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
Manifest number: 0118
Signing time: Tue 13 Oct 2026 00:01:25 +0000
Manifest this update: Tue 13 Oct 2026 00:01:25 +0000
Manifest next update: Wed 14 Oct 2026 00:01:25 +0000
Files and hashes: 1: DNCWnknJrnyl6POE4ZEvxzauwx0.crl (hash: FqwQUynrSAbG6BbW4ZTh9Qf+nR6RsUIDJ+DtlS09/V0=)
2: QL2RZ2Q7sMvqAmtDAtbRFFttDqQ.roa (hash: 4wHUxK0fzTcnu97RI6Dg3YXNgmexEtc/7w7Ys0gTVow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:90:60:f1:d4:f8:90:34:9c:ee:7f:b9:04:91:19:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd0969e49c9ae7ca5e8f384e1912fc736aec31d
Validity
Not Before: Oct 13 00:01:25 2026 GMT
Not After : Oct 14 00:01:25 2026 GMT
Subject: CN=e41a54f5c34466ca863e8a2a3cba10d5383c6205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:dd:be:c1:a1:ad:60:01:ab:7f:02:ae:82:
df:48:88:b2:da:17:30:91:1e:c4:1f:39:01:78:9f:
79:c5:d3:a3:9f:b2:b0:f7:2f:cd:b5:cf:7d:0d:fe:
d7:ad:8a:83:74:fc:a8:99:48:bc:61:dc:2b:41:e9:
29:68:aa:82:0e:49:d0:12:93:a0:5b:40:57:ea:f6:
94:83:fc:e8:f7:a6:83:6e:82:72:43:4f:cf:29:7f:
8a:ca:1d:cb:46:3d:d8:dc:80:3e:5d:35:2e:52:8e:
22:66:0a:5b:88:bb:99:81:44:ae:4b:01:76:d5:5d:
5c:f8:da:20:b6:a7:11:86:12:3c:1a:6c:29:24:aa:
b7:de:ea:7f:a3:06:48:37:06:4b:c7:1e:43:ce:4f:
b2:c7:52:78:10:a8:59:50:55:24:a8:45:36:c5:e4:
17:db:3d:f3:35:fa:d1:4f:76:a3:52:34:9e:5a:30:
a3:55:66:0f:03:80:8a:f7:c7:bb:4f:2f:fb:70:0e:
10:b5:d6:3b:c7:d4:c3:8b:5e:08:17:c3:b0:4f:9f:
cf:4b:66:9f:de:c0:72:c5:67:a1:1b:d3:96:91:e3:
ef:20:70:a4:82:f7:0a:37:25:c6:b3:54:1d:ce:6f:
8f:4d:94:b0:46:4f:41:4f:63:8c:ad:04:09:cf:4f:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1A:54:F5:C3:44:66:CA:86:3E:8A:2A:3C:BA:10:D5:38:3C:62:05
X509v3 Authority Key Identifier:
keyid:0C:D0:96:9E:49:C9:AE:7C:A5:E8:F3:84:E1:91:2F:C7:36:AE:C3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:03:1e:a6:e5:99:be:b3:6c:17:6f:26:d5:d7:aa:13:9b:a1:
7f:c6:81:d1:43:22:ba:d4:be:b5:f1:32:15:69:a5:c2:4f:98:
f0:cb:df:12:ec:00:da:b9:0f:c6:38:61:f1:25:17:c3:bd:a1:
eb:1c:e8:ff:e8:d2:bf:90:3f:4d:3e:0f:2c:08:3f:98:67:69:
15:6f:6d:02:10:95:75:b0:fa:01:0b:75:d6:d5:d5:7f:ae:b7:
2e:bf:79:af:3d:6a:1d:f2:7d:db:ae:45:73:16:81:05:7b:0f:
f4:46:d4:e6:ae:9f:54:2b:03:2a:94:3a:8f:5a:04:e5:3b:46:
4e:0d:d3:19:7c:ed:7a:d2:0f:0b:04:cd:7d:22:e7:7e:19:f1:
0a:5f:59:2e:f2:f6:ea:84:57:56:cc:67:a5:35:42:3e:07:37:
40:3a:45:0e:26:31:f1:26:e1:5c:df:d0:84:2b:ba:ee:f6:29:
c6:a9:3a:33:d7:3f:c8:f4:d4:fa:40:43:db:9d:12:82:d5:60:
c1:b4:93:ca:ea:5f:7d:0d:90:76:7b:43:2e:2b:a1:ae:5e:c3:
20:ce:58:01:43:81:45:e5:9a:97:8b:25:d0:5d:28:d5:8b:ad:
3b:48:9d:a4:ca:5c:04:2b:68:15:e6:db:9f:24:0d:c4:18:3d:
b4:34:a2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:08:04 2026 by rpki-client