Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
File: DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json)
Hash identifier: VmYee+6q39980uxk7w3ZwBo2dENVWoxcHht3XiPNKLM=
Subject key identifier: 96:0D:6E:BB:D8:60:FE:38:8A:BD:85:61:30:42:23:A0:82:F9:DB:5F
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Certificate issuer: /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial: 019D26CD5B7C1A5C2B27AB591ECDEE3611C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
Manifest number: 1062
Signing time: Wed 25 Mar 2026 21:01:25 +0000
Manifest this update: Wed 25 Mar 2026 21:01:25 +0000
Manifest next update: Thu 26 Mar 2026 21:01:25 +0000
Files and hashes: 1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: 9sYKVO/q/XtMJ52cBMeGyl/ekx+wcjA5oJoXfcMyFow=)
2: DiPUcYeYMMKBJ6pco8Genqou5P4.roa (hash: k19Q1QHBDALtzKkWkQIrCed59UccTXEghHZXW9Dj4JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:5b:7c:1a:5c:2b:27:ab:59:1e:cd:ee:36:11:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Validity
Not Before: Mar 25 21:01:25 2026 GMT
Not After : Mar 26 21:01:25 2026 GMT
Subject: CN=960d6ebbd860fe388abd8561304223a082f9db5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:de:22:73:91:8a:99:a1:a6:5e:ed:cb:70:
4f:ad:9d:9b:7f:60:b3:1a:df:1c:ed:36:36:7b:c8:
cd:8e:15:4e:6e:1d:65:6c:af:19:81:b4:53:ef:4c:
eb:5a:0a:9d:8e:69:ef:4a:1e:49:6a:e8:37:b5:4d:
45:15:90:18:3c:a8:bc:5c:c7:c6:b2:53:08:52:07:
6c:d8:2d:a1:a0:ae:a3:fc:59:da:81:d8:a0:12:c8:
68:c8:aa:fa:a3:bd:ce:90:b1:fd:e3:52:7b:1e:55:
b3:01:62:5b:ef:03:bc:63:6f:f4:79:dc:98:7c:c6:
40:39:18:04:3c:08:ba:9f:0a:e7:22:12:7a:91:d9:
79:1a:0f:ef:9f:8b:0c:b6:63:bb:07:c7:8e:6a:38:
13:d6:6a:80:d6:55:6e:9f:44:66:02:a9:4d:7c:e1:
eb:a9:f9:c8:96:41:1e:f9:ea:e7:cf:fa:b0:c1:6c:
67:80:f4:af:4b:2a:f9:67:f7:96:7a:df:db:d2:70:
8c:bc:ff:2b:67:da:88:54:da:75:a3:4a:99:f4:c8:
8e:c1:91:1d:2f:b1:dc:aa:f7:3e:8a:45:89:af:d4:
eb:fa:3e:34:eb:8b:25:76:7f:34:c3:67:2b:f0:42:
05:c6:fb:e7:23:7c:c1:e1:54:1e:0a:34:11:f3:da:
43:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0D:6E:BB:D8:60:FE:38:8A:BD:85:61:30:42:23:A0:82:F9:DB:5F
X509v3 Authority Key Identifier:
keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3e:ab:d1:ac:60:6f:80:65:a3:15:97:e3:f4:52:1c:5e:ae:
dc:53:df:fc:78:38:fd:7b:30:a7:40:b4:cf:29:d0:6a:32:d8:
41:1a:45:19:aa:41:f3:07:2b:58:ef:33:dd:ff:a4:fa:00:94:
53:e9:3c:e2:fb:dc:1b:31:df:aa:9c:61:a2:26:6d:62:c6:79:
fb:79:70:6e:8b:5d:b5:68:3f:aa:23:d6:33:b6:4d:d4:6d:55:
51:f2:17:dd:3a:d0:64:fd:b7:4f:98:63:a2:d7:96:df:42:b6:
07:b4:e3:04:f4:0b:66:52:40:43:29:2a:5c:76:f0:07:52:4d:
23:a7:d8:a6:a5:24:24:b4:e5:e5:f5:cd:a9:21:f3:01:89:97:
50:df:76:45:2f:b2:bb:8c:fe:a5:e5:3c:98:c0:55:75:0b:ac:
b5:1f:7e:49:28:23:c7:13:6e:93:06:72:c1:5a:ac:2c:cd:ca:
5a:c2:05:80:de:9c:b9:d1:57:bc:cb:b8:74:a1:a9:ae:01:f5:
47:ba:eb:e2:db:db:8b:68:aa:20:ba:f9:c8:f0:0e:46:ae:99:
c5:1b:b5:d1:80:25:50:36:c5:24:ad:e1:cb:d6:fa:11:eb:49:
66:31:18:6f:8d:f1:b2:11:58:1e:34:77:d0:fd:50:1c:f9:ac:
fb:82:05:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:37 2026 by rpki-client