Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier: Su6nMr4lcDwF4iwrqMpE4UiRLyg+3VNsZST0JuESZME=
Subject key identifier: E6:42:5B:70:56:CE:64:03:E9:06:AD:59:EA:F3:D3:D8:3B:67:97:31
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 019D2703EF24E5AC3621C2545DB444B87CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number: 0C22
Signing time: Wed 25 Mar 2026 22:01:02 +0000
Manifest this update: Wed 25 Mar 2026 22:01:02 +0000
Manifest next update: Thu 26 Mar 2026 22:01:02 +0000
Files and hashes: 1: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: 1ERtTqDghXataWJggOYvFre7r2oW7w7qvuL18ZtVqUc=)
2: M5PnGpQYm028ws30MJtZnTaTcpo.roa (hash: /Y8TDD+fi7yLoYjDRGZ16k+8Sg/nu7LlsqZTmrtMrIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ef:24:e5:ac:36:21:c2:54:5d:b4:44:b8:7c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: Mar 25 22:01:02 2026 GMT
Not After : Mar 26 22:01:02 2026 GMT
Subject: CN=e6425b7056ce6403e906ad59eaf3d3d83b679731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:b7:75:53:37:e0:31:37:57:0d:ea:bf:04:
89:49:89:74:55:97:c1:18:f5:88:06:27:d0:3a:26:
61:88:e4:e8:e4:58:ef:d6:b2:54:e9:c0:96:f3:c8:
0f:c4:d8:da:0e:e3:90:87:19:22:25:0d:db:6d:fb:
0a:a8:96:e2:51:74:39:cc:a1:88:8d:b8:f2:38:0b:
a7:56:39:74:80:ff:f8:96:30:57:63:2e:e8:3b:f3:
49:68:81:11:e8:d0:ee:e7:43:ea:37:50:7f:e6:5b:
f5:af:c4:55:49:dc:38:e3:6e:95:d1:a6:1c:a8:c5:
1a:8b:2a:ee:7a:07:0b:91:c5:5a:a0:07:82:5d:42:
88:9d:8a:22:99:01:1b:7d:e2:35:6d:4e:41:a3:5a:
eb:78:b8:a2:18:21:24:f5:d8:1b:f7:ca:86:7c:54:
36:61:5a:e4:eb:77:f4:0c:46:d6:db:49:74:44:e1:
77:ea:8b:fd:14:fb:1f:a9:52:85:00:b7:ad:8a:e6:
ba:e2:67:0c:6b:d3:3d:ca:f0:36:c7:67:e5:0b:a0:
65:a7:68:d0:bd:db:b1:de:ea:ad:2c:6d:d3:53:f5:
a7:3f:5b:c2:d7:a3:99:eb:ee:3f:75:2c:ae:7e:e6:
c8:d9:b5:1f:42:ba:ea:7b:1e:7e:38:31:32:2c:57:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:42:5B:70:56:CE:64:03:E9:06:AD:59:EA:F3:D3:D8:3B:67:97:31
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:09:00:24:c4:b9:b3:f2:2d:36:8f:9f:95:c5:be:b2:49:23:
50:7a:b6:81:58:d0:a2:0d:1c:98:3b:15:96:c2:ff:b2:01:c4:
08:af:5c:eb:01:fb:6f:11:03:16:cc:f5:28:7f:2b:56:5b:f1:
b6:63:26:8d:8a:46:c2:9f:e6:9c:38:c0:af:c9:3f:29:49:f1:
87:66:8c:b0:3b:2b:87:96:89:43:15:df:bf:c1:de:54:6c:07:
86:2e:f9:af:bc:8b:be:96:e6:a2:59:c8:21:5c:89:cc:ee:26:
ca:e2:df:1c:d3:9c:5f:7b:8b:63:58:9f:8a:71:49:b6:2b:15:
2d:24:73:97:b9:cc:fd:20:7d:62:02:63:be:02:d2:b6:8b:ea:
1a:d7:b0:6e:5e:ed:93:d5:33:fe:6e:9c:94:ac:b2:7e:94:8b:
09:0a:6a:f1:67:7f:2e:25:f6:bb:70:29:e6:cc:5a:83:01:5f:
24:6e:d2:02:62:b5:10:88:70:bb:5a:7a:d1:37:ed:d3:f9:f2:
4c:57:02:53:d5:b7:2c:47:15:8c:8a:51:c9:85:ef:54:d7:c2:
44:ed:d0:ce:53:4d:c6:02:48:bc:a2:74:76:ad:7b:c9:a2:a0:
05:96:70:f0:43:c8:dc:0c:61:84:52:28:a2:43:0a:71:ba:61:
56:c7:7b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:11 2026 by rpki-client