Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
File: DNScoZAd8CCTDOlx9lzBgKP8voE.mft (raw, json)
Hash identifier: sl+uvWmehK7EgwMj0PgC4iFCkuiyingUtXc0qHHolMc=
Subject key identifier: 7F:BB:13:3F:56:46:D2:EB:24:2F:52:7A:2F:18:41:5A:D8:10:1E:9E
Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Certificate serial: 019E1C478ADDF16221C35AC2C2C1A8731380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 13:01:51 +0000
Manifest this update: Tue 12 May 2026 13:01:51 +0000
Manifest next update: Wed 13 May 2026 13:01:51 +0000
Files and hashes: 1: DNScoZAd8CCTDOlx9lzBgKP8voE.crl (hash: q9uGYyo4zZ5ZZXsaH5YZjNOOdZn4/oumuc1TE5A7fwY=)
2: R1HqNhBgcIe-3oW62MxdKjDKqQw.roa (hash: qEknwbkXeioT3cO8P3jelWto+d9dLLFAHoISR08x8Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:8a:dd:f1:62:21:c3:5a:c2:c2:c1:a8:73:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81
Validity
Not Before: May 12 13:01:51 2026 GMT
Not After : May 13 13:01:51 2026 GMT
Subject: CN=7fbb133f5646d2eb242f527a2f18415ad8101e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:5b:c7:4a:a2:b7:39:51:c8:da:2a:63:da:
83:40:ff:aa:21:c2:7c:24:6b:b6:46:8f:5a:d1:d7:
49:48:29:cd:4b:63:34:e0:5a:39:56:7d:8c:47:d7:
f6:4d:23:b3:cd:27:fd:90:16:06:8c:5a:be:d5:c9:
ce:d0:12:fc:b3:4d:d4:70:ac:42:2b:5e:2c:84:a8:
95:60:32:94:62:9e:07:2f:42:d1:de:6c:f6:dc:35:
3d:6d:94:25:85:1b:49:29:f7:8c:63:bd:75:ca:7a:
44:f5:c7:8f:3e:b9:eb:56:07:67:3b:43:ea:9c:e4:
fe:43:fc:24:8f:88:71:dd:e5:51:d6:ab:20:03:e9:
6e:12:66:2c:a7:e6:ba:09:8c:a4:25:26:29:5f:6d:
29:9b:61:12:65:f3:39:0a:a2:df:64:cf:99:70:1e:
7a:ed:68:b2:6d:29:5f:08:ca:d9:6f:9b:6a:02:9a:
d9:a8:f1:92:2d:69:ea:3e:a0:0f:9c:bb:44:b1:e6:
ed:49:a5:fa:2c:71:d8:9b:a0:00:b3:bc:a7:c9:63:
f7:37:e2:60:5c:88:35:5d:cc:12:1d:f4:83:f4:53:
40:f1:62:26:78:e7:a1:fa:c1:49:35:bd:ef:0c:c5:
9e:23:13:9b:9c:96:ab:26:85:dd:03:8a:7a:3c:89:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BB:13:3F:56:46:D2:EB:24:2F:52:7A:2F:18:41:5A:D8:10:1E:9E
X509v3 Authority Key Identifier:
keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ee:64:24:7b:3b:55:e1:37:57:9b:50:eb:43:49:a5:11:9e:
c8:e1:ee:49:5c:4b:5e:33:f3:30:05:c4:6b:5b:9c:3b:ac:fa:
ba:93:2a:46:3d:58:16:95:6e:f0:10:1d:a4:24:b4:21:2a:e4:
6f:f8:58:3b:43:99:e5:86:27:73:71:2c:cc:a8:06:c4:88:06:
d8:bf:43:36:73:e5:1d:08:f7:61:5e:2b:a0:80:73:a3:c9:d5:
17:c3:0f:cd:e3:55:90:2c:f4:90:6d:ab:93:39:23:12:e7:b4:
42:c5:20:86:86:62:12:d9:6b:84:dd:1e:88:64:98:59:ef:60:
e5:73:1a:67:96:df:9f:9b:5b:94:fe:98:ea:e5:4d:2d:93:77:
dc:e1:c9:b4:dc:07:1a:cd:99:6b:ac:83:73:c6:b6:88:b7:aa:
74:49:9f:b4:0c:2c:dd:7d:b6:15:cd:1f:cc:2b:ec:c9:54:56:
33:a1:51:bf:2f:02:de:69:33:7d:25:89:4c:21:17:5f:7d:58:
2f:c4:5a:14:02:62:fb:b4:3c:72:9b:7d:8d:d4:b6:fb:78:19:
47:21:63:98:cf:ae:2d:06:b2:8d:7d:fa:3e:0b:37:ec:01:e8:
1d:09:85:94:6e:d1:42:a4:0a:37:86:35:71:dd:2b:63:74:a1:
1f:13:d4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:28 2026 by rpki-client