Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
File: DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft (raw, json)
Hash identifier: ISWiiTHAX0MBNiiVuCs/olufR22+y0a7e//mk5PSuLA=
Subject key identifier: 83:74:B1:93:E1:42:AC:E3:B9:01:73:D6:77:91:9A:EC:80:11:47:00
Authority key identifier: 0D:91:DC:30:C5:9E:AB:15:30:5E:C3:C8:BE:4E:52:CB:44:06:A9:2B
Certificate issuer: /CN=0d91dc30c59eab15305ec3c8be4e52cb4406a92b
Certificate serial: 01A1DC14BF82E9120048A2187CB1AB75C593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
Manifest number: 0129
Signing time: Sat 14 Nov 2026 22:01:49 +0000
Manifest this update: Sat 14 Nov 2026 22:01:49 +0000
Manifest next update: Sun 15 Nov 2026 22:01:49 +0000
Files and hashes: 1: DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl (hash: DGP4i5U4Avq09saQakvbPdmWKMv7gJYQpWt6SpC60IY=)
2: G-iHoe7mwWpGmZKyDftprKnS8pg.roa (hash: 8M86BXdsas21dJjs/WQbp6DYixMlHiokbVFdj5Dah24=)
3: zg5WlcC4NX4gmrZjUBDsq1SjIJY.roa (hash: RBJVe3dHTZ47Sn+AGjBXy4sIQT9e7Zb35xuSCKcJGSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:14:bf:82:e9:12:00:48:a2:18:7c:b1:ab:75:c5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dc30c59eab15305ec3c8be4e52cb4406a92b
Validity
Not Before: Nov 14 22:01:49 2026 GMT
Not After : Nov 15 22:01:49 2026 GMT
Subject: CN=8374b193e142ace3b90173d677919aec80114700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:c2:e3:07:99:80:d4:fa:d4:9d:0e:5c:3e:
d0:e9:21:9c:86:98:d7:bd:91:a7:88:be:d8:37:b0:
c4:06:a9:d2:a6:fe:93:0c:40:20:f0:16:85:ca:41:
05:45:32:c4:01:d1:fb:a3:88:b8:59:c8:55:26:ae:
69:85:de:31:fd:80:21:df:d5:a6:05:cc:b8:d2:f6:
34:c3:50:28:1d:f3:26:7d:ce:b7:89:f1:b1:3b:5e:
b4:61:e0:e6:15:dc:3f:c2:d3:f4:33:9c:52:74:b7:
25:a8:fb:de:b6:c8:86:4b:e1:ca:a9:24:c9:0c:46:
72:be:1b:36:5c:e3:73:9a:17:6e:c0:b2:fa:37:79:
71:f0:81:26:8b:21:a2:43:cc:b6:f2:5a:8b:88:3b:
17:e2:a9:e8:8b:34:58:be:59:2e:32:74:c1:76:c8:
f9:51:d3:a8:c7:1a:f8:1f:70:6b:d1:28:b0:49:4b:
86:ed:86:6a:7a:1c:23:e2:50:2f:6c:d9:63:13:ab:
b6:65:60:63:f9:53:ca:b0:54:04:88:da:b0:ff:2f:
a0:fd:3c:39:3d:87:dc:4d:95:f8:55:c9:be:97:89:
6b:d7:68:d9:4f:fa:40:16:8f:92:5a:f9:41:f7:b1:
54:44:64:41:b8:07:6b:71:d3:a6:0f:43:ff:5d:ac:
a2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:74:B1:93:E1:42:AC:E3:B9:01:73:D6:77:91:9A:EC:80:11:47:00
X509v3 Authority Key Identifier:
keyid:0D:91:DC:30:C5:9E:AB:15:30:5E:C3:C8:BE:4E:52:CB:44:06:A9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9e0940-a47f-455f-bb8b-a829305cc1a1/1/DZHcMMWeqxUwXsPIvk5Sy0QGqSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:81:09:fa:f6:43:86:a1:14:2e:f9:f4:e7:70:8c:12:ae:1b:
f5:09:ea:d0:f9:b6:f0:4d:62:ed:9a:7b:5f:7e:5f:54:2b:e4:
f2:a1:eb:e5:df:57:1f:83:d6:83:1d:4d:0a:39:e7:45:b8:86:
81:76:2a:4c:2e:57:3a:c9:16:ae:33:66:fe:95:32:c9:e5:21:
84:43:6c:bc:a9:98:eb:8f:c3:05:3c:93:3f:7f:98:cf:c9:e3:
f4:3b:21:29:8d:bd:86:bf:32:4d:c8:4f:9f:5e:ed:58:12:47:
c7:ed:af:83:05:0d:90:77:41:ee:5e:f6:43:f1:a9:cb:ca:66:
a3:7e:db:12:8d:ae:1b:1a:0f:3f:c2:9c:1f:bc:41:ae:8d:5f:
66:44:e7:16:76:21:20:cf:28:a4:38:0a:72:95:fb:d3:d6:1a:
25:6b:52:d7:2c:e0:01:39:29:af:bf:58:c8:d5:5d:a7:84:a6:
ac:8e:d7:3e:80:f3:f7:b7:7d:e8:c9:5f:de:1c:fe:3e:b4:52:
26:53:59:f1:9d:c8:a2:2c:77:e3:43:9d:4f:7a:b4:d8:f9:12:
b9:52:09:3d:54:a1:de:8b:28:c1:ce:25:b6:82:0e:98:ee:61:
f0:92:34:f1:ca:78:d9:6e:de:8c:5d:5b:1f:0a:b9:4d:a5:3b:
e5:2e:e9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:37:49 2026 by rpki-client