Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
File: DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json)
Hash identifier: ioZH4r2pjnCkj8eCiIYeqRFGQ9IXpOd+1ejTPi0SdCU=
Subject key identifier: 4A:A8:E3:5B:72:36:99:15:A2:72:D5:15:77:27:E0:24:2B:6D:F2:27
Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
Certificate issuer: /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Certificate serial: 019E1C4679A4BBA640590186CAFF7F37C090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
Manifest number: 086F
Signing time: Tue 12 May 2026 13:00:41 +0000
Manifest this update: Tue 12 May 2026 13:00:41 +0000
Manifest next update: Wed 13 May 2026 13:00:41 +0000
Files and hashes: 1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: AtZzWhx0tNyVjU+fwunuIYwNwCXRpPejBnoVerSXloc=)
2: ItFf5mGxUD7KxGy789UtNATPKKo.roa (hash: q6yJcUukZanUDWbF7+j0aEo4I20oQqnK0aRmb9zfRQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:79:a4:bb:a6:40:59:01:86:ca:ff:7f:37:c0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Validity
Not Before: May 12 13:00:41 2026 GMT
Not After : May 13 13:00:41 2026 GMT
Subject: CN=4aa8e35b72369915a272d5157727e0242b6df227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:da:c2:02:19:65:29:e5:a3:83:38:f3:47:
b9:a5:3a:a6:62:da:bd:e6:93:e4:c0:ed:50:84:43:
28:13:25:0c:be:1f:d5:7e:7d:e5:0b:ae:36:b9:bd:
7a:57:c2:99:9e:7e:da:31:14:ac:d2:34:80:b0:61:
04:5d:ad:a2:9c:3e:0d:7c:49:cb:e4:f4:c9:8d:94:
e9:d1:f7:98:17:ff:3f:c1:94:f5:f5:d3:7b:d6:d4:
5c:e7:72:3a:4a:02:a0:14:19:81:57:34:c6:6e:a0:
ff:c0:55:00:5a:81:08:63:64:9d:46:a5:d7:61:ba:
07:53:08:66:e8:ec:c0:74:b0:ee:cd:c5:73:c6:94:
0e:df:9d:f3:c4:4e:87:a6:72:16:a1:4f:c8:76:1c:
a0:b2:f6:4a:60:b4:b5:a3:ae:54:2c:c3:f4:cf:19:
81:11:c4:e4:7d:5d:7c:2b:bb:93:fa:40:38:bb:11:
4c:cc:28:73:1f:75:8c:02:ec:c5:91:fa:86:3a:71:
f8:59:38:d5:12:94:33:50:00:da:fa:e1:17:eb:ef:
f5:28:ba:32:55:8c:72:c3:52:c3:52:aa:24:68:83:
f4:b6:fb:82:3e:3b:c0:a1:a9:24:91:4c:fb:bf:67:
2a:1c:ea:fb:63:63:db:d5:53:4f:ec:37:c4:a3:c6:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A8:E3:5B:72:36:99:15:A2:72:D5:15:77:27:E0:24:2B:6D:F2:27
X509v3 Authority Key Identifier:
keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3b:4f:0a:d5:b0:76:1e:fc:21:44:7f:fb:cf:85:13:b6:07:
19:2f:e6:b3:6c:08:fa:f0:17:e9:b5:e3:b0:1b:eb:7a:13:7c:
24:6a:fe:49:ed:71:73:1d:b9:cb:18:6d:9b:e9:d8:e3:82:99:
05:1e:16:45:ee:2f:1e:70:60:cf:06:ba:b2:61:fa:68:9c:aa:
04:2a:af:d1:20:db:ba:8e:66:5b:dd:3f:91:d0:7f:ff:80:0a:
bb:91:36:e7:60:ff:77:56:ec:74:52:07:0a:3c:d1:57:5c:71:
65:0a:cc:26:8d:7d:14:10:2b:32:19:38:d6:2a:f1:3c:ff:e7:
fa:17:a7:a8:c7:30:4c:57:19:96:d5:a6:43:7d:fb:07:6a:00:
e3:9b:cd:7c:01:8f:ce:a0:ff:ae:ee:6f:b5:b5:de:36:a3:77:
ec:71:0c:ab:00:2a:f4:49:b1:d1:f9:07:ad:4f:3c:a8:e8:c7:
3c:29:1c:04:95:b8:aa:df:48:05:b5:3c:c6:d5:47:1f:3a:9a:
9f:b1:df:8f:6d:a9:94:f8:a4:45:fc:56:be:cd:f5:bd:bf:b2:
ff:4e:5c:92:08:34:f2:78:a1:e7:41:b4:0e:f4:ad:b8:17:cb:
4f:1d:14:f5:3f:a1:4b:83:a3:64:bd:a1:30:00:1a:b6:77:b1:
9a:51:45:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:02:57 2026 by rpki-client