Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
File: DNszEee1KoxC8GUP9DwPyE0yDxY.mft (raw, json)
Hash identifier: YGSLesgrb8zS292wC0nzJJkQWmqY1VRSdx2YBLTqCvA=
Subject key identifier: E3:D6:17:BB:CA:3B:80:69:1A:0F:08:76:BA:2C:F5:F6:18:73:9C:1E
Authority key identifier: 0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
Certificate issuer: /CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Certificate serial: 019F927EE2103C35A56836D8DB1E5D0C40C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
Manifest number: 0219
Signing time: Fri 24 Jul 2026 05:00:16 +0000
Manifest this update: Fri 24 Jul 2026 05:00:16 +0000
Manifest next update: Sat 25 Jul 2026 05:00:16 +0000
Files and hashes: 1: DNszEee1KoxC8GUP9DwPyE0yDxY.crl (hash: 1vl9IHDHmmXgpMOqKjiv3albroNCttoRFolFOjscBcs=)
2: KkZ9T-InsQon19zi2pp0iLPe7uw.asa (hash: PxN+SD6/SnkXuWBprhfsz0XFK1K5PUh2KfS43HH5dtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:e2:10:3c:35:a5:68:36:d8:db:1e:5d:0c:40:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Validity
Not Before: Jul 24 05:00:16 2026 GMT
Not After : Jul 25 05:00:16 2026 GMT
Subject: CN=e3d617bbca3b80691a0f0876ba2cf5f618739c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:3b:c0:da:8d:6f:88:20:f6:b8:8c:d9:6e:
fa:96:8d:e4:64:07:55:bc:ca:7f:5e:58:f5:1c:1c:
24:7e:11:4c:5a:ad:33:67:a4:88:ce:ee:e5:65:9c:
8f:7a:70:83:36:22:be:ec:cc:a5:df:5c:92:7e:ac:
89:6c:d1:db:f2:fd:76:9c:37:81:b0:24:d8:9f:7b:
1d:08:a1:2c:89:2f:93:55:a8:05:2b:80:da:ab:c8:
de:8d:c3:fa:bf:0b:d7:ad:51:d4:98:cc:f0:b4:27:
6b:c6:d7:20:ff:26:ec:0a:6a:47:95:90:d6:28:2b:
95:65:14:c8:1f:4a:18:e3:84:42:20:81:79:01:2b:
d1:c4:2e:d4:37:01:9d:6e:ed:b1:b1:b9:71:09:f5:
d3:33:60:bf:59:1c:cc:ff:36:4d:37:a7:45:a8:45:
86:58:b1:f0:7a:8c:42:bd:93:93:a5:1a:31:83:69:
3d:05:4b:7d:49:5e:87:e3:9e:2c:8f:3e:01:d4:b1:
ae:be:00:da:37:8e:11:dd:1d:9f:5f:1c:af:12:39:
9e:0c:5c:cc:c1:a5:a0:b1:3c:0f:09:af:25:4c:75:
f6:f7:6c:58:f0:4a:48:ab:69:19:6d:9b:ca:37:d1:
2f:f9:e5:77:d1:5e:99:84:0c:ac:4b:3c:55:a5:f1:
fd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D6:17:BB:CA:3B:80:69:1A:0F:08:76:BA:2C:F5:F6:18:73:9C:1E
X509v3 Authority Key Identifier:
keyid:0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e1:cb:a2:e8:6a:f5:3d:fd:28:c8:28:90:6c:24:4b:ea:86:
62:c1:f3:c7:69:37:05:ce:49:d9:b1:28:8a:96:9a:dc:10:64:
59:6e:9b:5f:09:23:54:74:76:f9:ab:e2:50:47:8d:2f:f4:b1:
e8:24:52:8a:33:31:fd:32:ed:9e:cf:fd:43:44:c3:71:da:b2:
e7:9c:32:ea:64:04:a9:b7:e4:8e:d0:44:93:dc:63:50:eb:a6:
34:51:5d:37:6d:03:ef:03:e5:29:1e:0d:79:86:38:09:43:96:
64:a8:24:d6:9f:ff:05:a6:b1:dc:87:61:17:4b:d7:f3:a0:9b:
f0:a5:6c:26:6f:0f:5e:81:c2:89:46:d2:7c:50:ab:e8:aa:2b:
6e:3d:3f:02:47:c6:5b:e7:dd:2b:62:5f:ce:1c:7c:61:28:ea:
00:ed:4b:5b:b1:21:c8:ee:d9:b4:0a:c0:4f:e3:9b:ce:78:dc:
17:2e:c9:2d:da:4b:a8:bf:52:c0:3f:8d:0b:9d:93:a3:57:c3:
0d:d9:23:e0:64:9d:46:52:f9:b6:6b:a4:d0:db:0a:d5:af:b7:
4d:bf:2b:51:4d:ca:cd:9d:1e:c2:60:fc:8f:fc:29:0b:a1:04:
ec:94:99:ba:dd:2e:ab:a8:c7:20:ca:68:11:9a:13:57:9c:56:
a0:26:3b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:38:38 2026 by rpki-client