Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier: 91CEzpiesH0pog7rZ8vPp1y8OZ7NrTBDUgN+mha9EIA=
Subject key identifier: EA:23:C2:0C:1A:06:79:30:BC:BA:A4:06:42:2D:F8:1A:7D:17:7A:10
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 019E20243F3443B6E280CDFDC9E2E96CFE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number: 0CA3
Signing time: Wed 13 May 2026 07:01:46 +0000
Manifest this update: Wed 13 May 2026 07:01:46 +0000
Manifest next update: Thu 14 May 2026 07:01:46 +0000
Files and hashes: 1: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: Qd3dUoGy52DuOEbVqkDekbTSVKU3+y7qYjZqr550Gbs=)
2: M5PnGpQYm028ws30MJtZnTaTcpo.roa (hash: /Y8TDD+fi7yLoYjDRGZ16k+8Sg/nu7LlsqZTmrtMrIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:3f:34:43:b6:e2:80:cd:fd:c9:e2:e9:6c:fe:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: May 13 07:01:46 2026 GMT
Not After : May 14 07:01:46 2026 GMT
Subject: CN=ea23c20c1a067930bcbaa406422df81a7d177a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:ab:7c:05:e0:56:69:98:0b:c5:73:25:08:
74:b1:1c:7b:20:4c:ba:2d:05:7d:04:fe:94:e7:2e:
88:3b:dd:3c:74:6e:76:76:1b:08:96:38:11:55:85:
7c:90:95:c0:4b:da:ef:f9:f1:64:a1:f8:28:95:21:
99:fc:7d:08:52:9e:66:85:34:04:09:49:bc:59:ce:
62:9b:6e:f9:da:9f:f2:83:27:27:b1:fa:a7:16:73:
d1:98:1c:73:e8:35:de:4b:d0:09:40:85:e1:23:cd:
4c:4e:95:a2:25:e6:70:23:67:6a:81:85:10:25:44:
72:d2:52:fb:0c:ff:f8:5f:a2:98:88:8f:3d:e7:98:
e0:b2:5d:d2:26:4b:0a:73:f7:4f:17:01:54:98:cc:
e6:2b:34:96:e7:00:40:98:51:67:98:6e:99:66:fb:
22:ca:f0:f8:fb:e1:4d:d5:19:e4:ab:29:b8:f6:cf:
50:1b:71:7a:ec:3b:53:dc:dd:19:d2:77:75:e8:3a:
40:7e:4c:7f:9e:a4:77:bb:a6:06:07:fe:08:5a:bb:
44:76:58:a0:86:4b:bd:46:32:66:e0:fb:bd:3f:ce:
e9:c1:28:a8:07:37:2a:1b:53:61:82:ba:45:36:41:
66:64:01:fa:c4:1f:6f:79:4d:d5:90:b0:bd:c1:75:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:23:C2:0C:1A:06:79:30:BC:BA:A4:06:42:2D:F8:1A:7D:17:7A:10
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b8:c5:39:b6:b0:ab:0a:e8:aa:a7:ea:d5:c6:52:08:f3:68:
38:58:17:28:d8:f4:2e:c7:40:39:2e:ba:bf:18:26:c7:32:54:
5e:82:5c:4d:47:66:87:b0:40:12:25:92:5b:41:85:d9:4b:91:
9b:90:36:a9:ce:69:af:a3:a6:ce:82:30:51:2f:96:5e:39:82:
ce:46:d4:aa:3d:fe:ba:90:61:49:74:0a:79:93:bb:ae:9e:0f:
f9:a8:93:e9:65:ab:43:36:bf:fc:2c:d4:3f:03:db:ac:1d:e3:
cb:37:b3:15:a1:b0:10:4c:12:09:ad:e2:c7:f6:42:ce:d4:cf:
2a:8b:c4:ef:c8:f8:34:82:5f:31:76:ba:75:4c:35:1a:77:a6:
2d:62:02:ac:87:ce:ec:56:84:eb:0e:99:06:38:f7:fb:7a:03:
6c:e3:6f:18:15:b8:ea:a5:ba:8c:e8:c4:47:65:26:c0:0d:bb:
7e:6a:79:63:4b:ad:a8:0b:aa:f9:5b:bb:38:17:40:1e:58:9a:
b8:a0:6a:d0:06:97:33:0e:7c:9e:b0:f7:f9:b6:be:7d:12:e0:
5d:0b:ee:56:86:fe:f1:59:72:c6:6d:62:a3:7f:09:e5:88:64:
71:f9:ac:d6:37:95:17:70:07:e7:e8:5a:cb:56:ef:c3:e1:70:
db:b2:be:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:57:59 2026 by rpki-client