Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
File: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft (raw, json)
Hash identifier: Xc7Wpf01ZDXwRvZXnH8XjP2pT72VZwEYc7wvNfvGFmA=
Subject key identifier: 60:D7:82:6F:0D:C6:3A:82:A2:18:DE:03:43:F4:43:2B:5F:04:27:69
Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Certificate serial: 01A1DFF18F6A11A0706B0624260BE0173FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
Manifest number: 1B05
Signing time: Sun 15 Nov 2026 16:01:52 +0000
Manifest this update: Sun 15 Nov 2026 16:01:52 +0000
Manifest next update: Mon 16 Nov 2026 16:01:52 +0000
Files and hashes: 1: DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl (hash: 3r9z2uG2hQ+YJD1LPmUXAiIrKyT5pWmCTgo5/WYYYYs=)
2: Sx0kUX0mdsJc6MeA8GnQWjLYsxw.roa (hash: xlzd7kA5axdXaevzTnhhKGqJUMIeInDgQhQvQ1A+qzM=)
3: tUDulNzj64I5Qq-K79vX3BXlt4Q.roa (hash: PBYY2icryu44OsVqXrI3B3d6ny8DwE4KnzXXRyAF6ls=)
4: uxoBX2tmeZVjQ29keitWoq9xUoQ.roa (hash: 1gcoMG0xFgjZ/0XZ2WNsJIV6br76evfUP3Uy2y4mCNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:8f:6a:11:a0:70:6b:06:24:26:0b:e0:17:3f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Validity
Not Before: Nov 15 16:01:52 2026 GMT
Not After : Nov 16 16:01:52 2026 GMT
Subject: CN=60d7826f0dc63a82a218de0343f4432b5f042769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:9b:ba:11:16:94:f0:8b:7a:34:cb:74:c0:
b6:7f:8d:32:fc:d1:50:d3:29:e1:27:fb:64:57:91:
d7:8e:12:ca:54:c4:33:06:bd:f1:1b:58:83:c2:ad:
f4:34:9e:1a:75:9e:c0:ea:ee:55:df:00:97:f1:7d:
a9:5b:9d:56:4e:0f:46:f3:a6:02:5c:dd:2a:f7:13:
0d:52:37:c6:0b:20:63:26:57:c8:43:e6:b3:28:b4:
9c:8c:3c:5f:6c:b0:95:e1:bc:3e:9a:01:0d:08:a0:
69:83:a2:06:a6:97:21:95:e2:75:e4:c4:bd:0b:d0:
c1:92:0b:58:f6:ba:42:25:9f:c0:c5:c1:dd:7a:ac:
3d:61:7c:e7:10:b5:e1:8e:7b:4b:32:1e:9e:ff:c1:
23:e6:c5:f0:5b:5a:30:7d:5e:d2:1a:f8:e1:f7:2b:
7a:67:f5:22:57:f4:3f:5c:03:84:54:e0:b3:4d:f0:
5a:7f:0c:f3:72:61:b9:30:08:a0:56:d9:bb:60:3f:
8e:d3:0b:21:eb:58:18:98:0f:92:f2:24:cf:27:27:
77:e4:d8:81:5b:c5:83:24:d8:b5:c0:13:f0:54:42:
28:f7:fe:69:dd:0f:f4:e4:19:4e:e0:70:c0:d6:cd:
25:f3:a7:df:39:76:72:91:e8:0d:65:76:d6:47:42:
6a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D7:82:6F:0D:C6:3A:82:A2:18:DE:03:43:F4:43:2B:5F:04:27:69
X509v3 Authority Key Identifier:
keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f6:67:2c:83:ef:84:3c:60:a9:8c:8a:19:cc:5a:c2:34:47:
ba:a3:92:2c:5d:74:3a:64:ba:3d:0e:84:a1:fd:f6:2f:bd:f4:
a0:53:1b:18:31:22:b7:2d:65:ef:02:40:a6:3e:a9:5e:d7:e0:
f0:72:ed:10:b1:b3:8a:8c:d6:d2:03:da:df:f0:e5:27:1c:a3:
f0:54:01:f4:58:21:62:2c:c4:cc:5c:2f:37:a9:a4:3b:dc:a8:
62:70:11:09:cc:e4:37:ed:a4:6f:bc:b6:80:b0:93:67:a3:cc:
cb:ef:3e:a9:f0:60:64:7e:3f:3e:31:9a:7e:33:d0:e9:96:b5:
e8:ae:75:60:2b:2d:f2:02:c6:9c:59:ba:01:dc:85:c8:a2:bd:
88:81:95:55:ea:9f:ee:99:32:92:90:6f:48:f3:86:b7:43:23:
b9:c9:3e:2f:7d:ba:99:99:76:fe:e3:78:5f:fb:c8:47:10:fe:
44:ec:9f:7c:86:11:0a:83:38:18:94:9d:7c:3c:b9:8f:41:d2:
38:d6:d3:7f:ca:9d:59:f1:0b:64:38:57:42:49:92:53:7d:af:
e7:eb:fe:b9:5a:b0:25:c2:c1:4f:23:46:84:6e:ed:de:64:3c:
53:97:d1:ea:d5:15:ea:12:d3:72:7a:85:ba:6a:41:f9:d2:59:
43:51:71:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:00:42 2026 by rpki-client