Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
File: DNCWnknJrnyl6POE4ZEvxzauwx0.mft (raw, json)
Hash identifier: ynopazqKhkrY01LI1av+xEqr2/kab3vhjjHyVwlfmG4=
Subject key identifier: C1:5E:DD:00:4C:DD:1A:F2:30:7C:1A:4C:17:09:D2:7C:55:3C:B5:74
Authority key identifier: 0C:D0:96:9E:49:C9:AE:7C:A5:E8:F3:84:E1:91:2F:C7:36:AE:C3:1D
Certificate issuer: /CN=0cd0969e49c9ae7ca5e8f384e1912fc736aec31d
Certificate serial: 01A08A8C8C4208CBB996AAF0CEA7076144BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:01 +0000
Manifest this update: Thu 10 Sep 2026 09:01:01 +0000
Manifest next update: Fri 11 Sep 2026 09:01:01 +0000
Files and hashes: 1: DNCWnknJrnyl6POE4ZEvxzauwx0.crl (hash: 4BvRk9K4mMpsGPgvmvnZupMJ7+tYCKMKbGwYc+avkn4=)
2: QL2RZ2Q7sMvqAmtDAtbRFFttDqQ.roa (hash: 4wHUxK0fzTcnu97RI6Dg3YXNgmexEtc/7w7Ys0gTVow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:8c:42:08:cb:b9:96:aa:f0:ce:a7:07:61:44:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd0969e49c9ae7ca5e8f384e1912fc736aec31d
Validity
Not Before: Sep 10 09:01:01 2026 GMT
Not After : Sep 11 09:01:01 2026 GMT
Subject: CN=c15edd004cdd1af2307c1a4c1709d27c553cb574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:70:d4:71:f9:0b:78:04:66:4f:de:c0:ab:
a1:7d:07:79:61:7e:6d:bd:f6:3b:ca:63:93:9b:d3:
bb:69:44:65:59:ee:81:f7:a4:2f:74:a5:a6:e6:f0:
f8:09:8a:3c:78:b3:51:6b:26:7b:b4:ac:d1:8b:03:
b3:93:5d:57:6b:26:a1:29:a6:5d:06:99:2f:93:67:
f0:27:27:cf:6c:84:39:f9:aa:f7:92:8b:8f:6e:80:
27:63:07:fe:3a:7a:ed:e5:17:8a:15:bb:c9:1f:e6:
10:f9:8a:9e:23:cc:0e:33:0b:4f:2e:64:40:1b:c0:
24:b0:5d:ee:60:04:9a:a0:46:d3:8c:ad:79:d4:5b:
eb:5d:83:f8:8c:99:df:69:08:cc:f1:53:14:94:70:
ff:fe:8a:98:ac:3f:48:f2:e3:83:a4:64:7f:56:77:
a7:c0:1c:e0:73:59:5c:92:f5:92:07:06:31:8a:de:
34:da:dd:b9:32:86:cb:1a:aa:37:97:b3:c8:af:b1:
cf:fb:ae:c2:28:7b:ec:27:d8:32:e1:74:36:64:64:
1a:90:46:20:b8:cf:bf:0a:41:ba:a2:00:c4:de:f9:
0b:bc:d6:73:10:cf:3c:81:ab:72:46:ea:98:6f:02:
d3:c9:d9:9b:e9:75:6a:b7:4c:86:65:0b:fe:25:ec:
2a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5E:DD:00:4C:DD:1A:F2:30:7C:1A:4C:17:09:D2:7C:55:3C:B5:74
X509v3 Authority Key Identifier:
keyid:0C:D0:96:9E:49:C9:AE:7C:A5:E8:F3:84:E1:91:2F:C7:36:AE:C3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:73:28:bc:53:6b:1e:89:48:12:d1:1c:c6:2b:5c:93:ee:f9:
8f:fc:34:d7:d2:5f:ca:82:3c:1f:3e:07:52:ad:7a:7d:39:7e:
4e:01:0d:97:cc:db:55:83:16:7b:40:2a:5b:c2:f7:60:09:35:
22:15:0a:63:67:e7:b8:d9:05:c9:57:bf:15:3c:1b:78:58:81:
9a:bd:f9:43:c6:a5:83:49:9a:a2:58:27:c9:5b:80:20:30:3b:
03:f4:ee:87:d9:b7:be:b4:2e:b9:6a:06:0f:23:06:6b:89:6c:
25:8d:c6:a0:05:9f:d1:fb:ed:07:c2:60:af:03:72:d8:2b:f8:
31:b3:70:de:8f:68:0e:a6:85:22:a5:cc:bb:88:71:a4:60:4c:
34:94:be:4f:9e:64:bd:09:15:74:45:23:5d:08:a0:7a:45:69:
8e:b7:3c:0d:8c:f0:57:2c:d6:9f:7d:9e:d1:01:6a:e6:f0:d6:
7c:23:a3:aa:29:e7:6f:5d:c0:ad:57:f7:de:eb:fc:50:9c:a8:
82:9c:44:9f:b3:bb:e0:22:78:87:78:72:4c:e6:8c:54:44:7b:
df:a2:57:51:b7:93:ae:8a:67:9f:06:51:6e:9b:c2:41:84:19:
60:da:2f:a8:8b:d1:d8:cb:06:47:fa:ee:92:9c:29:64:7d:48:
57:45:fd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:04:15 2026 by rpki-client