Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: xn2zpv/IG+o8cP06yvcNXOmJhnwHSMuZzt+tDqtDMcY=
Subject key identifier: 00:35:2D:4F:A2:01:D2:74:7D:69:66:CF:24:F6:B4:E0:D2:FF:3E:6A
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 019F943753C0277A6AF1B1A2C1963491FD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 19D3
Signing time: Fri 24 Jul 2026 13:01:21 +0000
Manifest this update: Fri 24 Jul 2026 13:01:21 +0000
Manifest next update: Sat 25 Jul 2026 13:01:21 +0000
Files and hashes: 1: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: zlUDJDjDHynivMVJ+YEYYco7r6gELFNDg3PO5LxnBrs=)
2: u5v1NIr7zCznyDKOfZW5zSM1TZI.roa (hash: 0y7T3YJCDc+2Cz1VFqoKYSn2dXOumotGXs+vkOowx74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:53:c0:27:7a:6a:f1:b1:a2:c1:96:34:91:fd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Jul 24 13:01:21 2026 GMT
Not After : Jul 25 13:01:21 2026 GMT
Subject: CN=00352d4fa201d2747d6966cf24f6b4e0d2ff3e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d1:09:52:5a:49:ca:ef:61:59:0f:0f:44:5f:
7f:97:7c:08:78:94:5b:c9:74:c4:d5:81:95:03:58:
c9:69:ca:18:67:5b:ed:6b:99:a3:87:67:36:84:50:
a7:b8:b6:79:96:1d:0e:7e:05:69:e7:4d:b3:01:91:
2b:9a:bd:c5:25:a0:47:08:5f:71:9d:48:24:15:65:
90:6c:01:32:ad:3a:33:26:60:80:f2:a3:39:77:a5:
cd:ef:22:92:0a:ee:81:8d:9f:60:f1:b2:d2:a6:0c:
62:87:1f:0d:67:25:f7:fb:37:77:c8:b6:76:a7:65:
6c:54:1f:77:d5:2d:cd:f4:dc:dc:db:cb:07:77:4b:
f4:fa:98:34:90:5b:4a:99:20:84:40:49:c9:5d:5b:
e4:ae:7a:eb:f6:e7:ef:49:99:86:36:55:24:7b:64:
80:52:81:af:b2:42:5b:27:9e:c5:e2:00:64:a4:16:
3b:24:b3:8c:95:37:e9:90:a4:ab:b7:c4:1f:ec:30:
3e:13:d8:c6:f0:0d:80:70:d8:7f:b3:bb:70:e7:51:
72:40:77:f3:75:80:12:ad:67:56:51:15:4a:83:e3:
36:ee:85:3d:17:20:cf:31:b2:7a:e0:e6:bd:cd:12:
cc:43:5f:ff:e4:4d:9f:1d:69:5b:f0:04:6f:3a:60:
0a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:35:2D:4F:A2:01:D2:74:7D:69:66:CF:24:F6:B4:E0:D2:FF:3E:6A
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f0:db:d3:2a:ba:8c:85:ac:5a:36:ad:a7:e3:14:7d:c1:5f:
be:55:2e:91:c6:7e:5f:25:9c:f8:90:e8:ed:18:93:d3:2a:0c:
3e:ac:64:8b:9a:0b:69:59:e5:d2:1f:fb:94:82:9e:1c:f2:da:
e9:c9:9e:d4:af:f9:02:97:4c:a7:22:b5:48:8c:5c:1f:9b:9d:
b3:07:8f:6c:bc:98:86:11:e1:f8:6f:39:b6:80:f5:30:f7:a7:
56:05:12:11:93:d5:6c:be:d8:15:cf:f0:e8:0f:f3:01:75:d7:
82:37:c2:7a:5f:80:70:30:c3:db:cb:ad:02:b0:b9:43:ee:6a:
9f:fc:88:ee:78:15:b8:0e:d1:6f:cf:d9:7d:83:38:3a:f2:90:
93:5a:cb:b3:7e:9e:25:6a:78:1d:05:d4:30:25:66:8a:c5:09:
48:ff:fb:b1:be:64:38:08:66:4d:d9:18:f6:bb:24:fc:2c:78:
bd:6a:c2:bf:8d:08:1b:6b:2d:1d:5d:72:48:de:5d:3d:b4:9d:
31:77:8d:12:bd:2c:50:2c:34:77:9a:16:8f:67:a5:a6:05:5e:
80:66:c8:e7:62:6b:9b:a7:32:bb:51:7f:02:f0:3e:60:b2:64:
ce:1f:d3:57:2f:64:64:6b:a1:60:bc:2a:c9:03:0f:d3:ab:06:
ff:df:c1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:34 2026 by rpki-client