Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
File: DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft (raw, json)
Hash identifier: kMpyu7r9UB9qtWAaqJU99VyE3P3ls0pKfqpWBiQwDXM=
Subject key identifier: 4E:D4:DB:56:84:43:48:50:3C:3B:CB:51:85:F9:1B:30:53:19:F3:12
Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
Certificate issuer: /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Certificate serial: 01A1DB0161E34EE55BC227E99E90F70512BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
Manifest number: 1AF7
Signing time: Sat 14 Nov 2026 17:01:03 +0000
Manifest this update: Sat 14 Nov 2026 17:01:03 +0000
Manifest next update: Sun 15 Nov 2026 17:01:03 +0000
Files and hashes: 1: DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl (hash: FLkJPoyiWoFBcPQda3UjNhZd0qrLIctyY+LbStN+FoI=)
2: Ty_PZDqaOmeFjLIdr3QFueerKIM.roa (hash: mfeK6p+b2jXbJTu7RkO60pgbrZY/WThNdE0YkaHIazA=)
3: ZK_lplNOHoj8XGWdtaGMmSrc3x0.roa (hash: /qdKs+yTlrC/OXEPfuDp9SEn7i6+ObqNyY75S5FZQO8=)
4: _7jylL9q9B68bc5gOBCT4NAKAwE.roa (hash: udwwApN1RRRAB/0kSZzWjgDibuhxWbwtgPuXqFkvmuE=)
5: cpElJSiXGO7jJAVo9S1jen5uhjQ.roa (hash: jXHD1yWMKx7op/sh3fiD9gaMHojOuxsjiA1ioAXvW84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:01:61:e3:4e:e5:5b:c2:27:e9:9e:90:f7:05:12:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Validity
Not Before: Nov 14 17:01:03 2026 GMT
Not After : Nov 15 17:01:03 2026 GMT
Subject: CN=4ed4db56844348503c3bcb5185f91b305319f312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:53:2b:0e:40:9e:19:97:02:8c:8f:e8:9b:1a:
09:78:5e:f3:b7:53:c6:9d:80:f0:b2:52:27:44:7b:
f2:02:73:46:15:e3:27:d0:a5:12:ad:22:d5:80:e9:
77:88:02:9e:d7:e8:2c:86:c5:bc:08:e3:70:21:3f:
40:2d:ea:dd:90:70:03:08:68:cc:07:94:19:57:57:
ff:d8:ae:54:09:4b:6e:32:b5:77:40:75:8b:e0:b4:
08:ef:0e:5d:89:b4:4c:a2:58:58:99:b4:03:53:ea:
7a:a2:7c:10:36:c9:fa:67:d2:4b:c8:47:ee:26:54:
18:a6:4c:df:22:64:a8:a2:a7:5d:b2:43:b6:6f:91:
e2:3a:47:43:56:1f:1a:49:8d:5d:28:4d:52:50:97:
ee:c4:44:a3:28:5f:c8:b5:80:ac:56:c5:ba:53:7d:
d2:94:c1:51:8b:2f:21:23:bc:d7:34:34:0e:ac:3e:
b2:e6:44:51:35:56:d6:85:cd:09:31:21:a2:84:82:
18:b6:b4:0e:09:3c:f6:0b:c1:95:d8:68:42:96:43:
b1:a4:84:24:50:a7:da:af:23:cb:48:ed:2f:93:ab:
91:4d:5c:7f:fc:62:39:30:9a:54:f2:18:15:e6:12:
21:7b:4d:c7:dd:69:64:5e:97:ce:91:91:10:08:8e:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D4:DB:56:84:43:48:50:3C:3B:CB:51:85:F9:1B:30:53:19:F3:12
X509v3 Authority Key Identifier:
keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:02:f6:f3:39:c9:f6:6b:39:13:33:9a:f3:b6:b8:a1:7b:a7:
f3:1e:bc:64:ab:8d:9a:1a:6b:c3:63:40:46:ef:4f:98:16:67:
6c:f4:2c:d7:d2:dd:49:1e:e5:f8:47:57:09:50:6f:a3:96:70:
8d:1f:fb:52:9b:32:24:83:f5:42:8f:31:21:54:dd:ff:76:cb:
cf:f9:57:aa:ac:07:e0:75:4e:01:2b:78:7c:ef:14:11:0a:a2:
27:19:16:43:a6:95:1a:b9:e6:dc:7a:aa:2c:16:27:9b:30:c0:
8f:8e:6a:37:d0:5b:38:18:21:64:8a:55:48:ba:52:cc:36:ca:
7f:1b:a0:89:30:d0:e3:82:91:c0:94:ad:94:5c:48:b9:97:dc:
8e:4c:c4:71:2a:5b:b7:24:78:51:f9:22:fa:fb:a1:2e:b3:3e:
5a:38:80:d9:66:f3:e5:18:56:66:e0:2b:e8:07:5d:65:f5:a9:
85:52:e9:4a:e0:7e:88:03:2d:b5:02:b6:ce:ec:18:88:b3:4b:
3d:ce:b1:5e:75:e4:7d:f2:15:a4:00:aa:12:5c:ae:ab:af:b1:
22:61:7d:33:54:38:f2:f8:c0:30:8d:85:cc:3c:6a:b6:cf:50:
5b:33:71:45:0c:33:5b:76:3e:9f:62:25:fa:4b:31:12:d1:86:
96:50:bc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:44:34 2026 by rpki-client