Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
File: DNCWnknJrnyl6POE4ZEvxzauwx0.mft (raw, json)
Hash identifier: gr0Mq2IuBTLygPbKxUrVEaQzpMYFva+aEubNSGbC0+c=
Subject key identifier: B5:12:70:14:C7:C3:2E:68:B1:21:2D:EE:1B:F5:54:D1:E8:D7:0B:02
Authority key identifier: 0C:D0:96:9E:49:C9:AE:7C:A5:E8:F3:84:E1:91:2F:C7:36:AE:C3:1D
Certificate issuer: /CN=0cd0969e49c9ae7ca5e8f384e1912fc736aec31d
Certificate serial: 01A198EB2505664F8D79E52E0BD189E61E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
Manifest number: 014D
Signing time: Sun 01 Nov 2026 21:01:49 +0000
Manifest this update: Sun 01 Nov 2026 21:01:49 +0000
Manifest next update: Mon 02 Nov 2026 21:01:49 +0000
Files and hashes: 1: DNCWnknJrnyl6POE4ZEvxzauwx0.crl (hash: msiieCGvwb/YKy53s8V7NIGBpav7So5fC1uwKf7LBKc=)
2: QL2RZ2Q7sMvqAmtDAtbRFFttDqQ.roa (hash: 4wHUxK0fzTcnu97RI6Dg3YXNgmexEtc/7w7Ys0gTVow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:eb:25:05:66:4f:8d:79:e5:2e:0b:d1:89:e6:1e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd0969e49c9ae7ca5e8f384e1912fc736aec31d
Validity
Not Before: Nov 1 21:01:49 2026 GMT
Not After : Nov 2 21:01:49 2026 GMT
Subject: CN=b5127014c7c32e68b1212dee1bf554d1e8d70b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:fd:bd:23:82:02:fb:4c:d0:8b:18:6f:de:
84:d4:1b:fc:b1:b8:6b:ef:26:bb:ea:9a:a1:60:cc:
80:8b:84:e8:ba:3d:39:4b:42:17:46:fd:12:88:76:
c7:aa:10:16:91:5c:2d:6d:12:d8:70:d4:ea:13:42:
c6:21:e0:39:37:09:d2:e6:0f:cd:7a:34:65:64:37:
0a:df:38:26:48:eb:a0:f3:bd:61:8b:38:38:a6:fc:
86:f6:63:0f:15:e2:a4:5c:e8:7c:5c:c7:63:6a:df:
24:df:d9:5c:c8:34:f2:94:82:1f:89:b3:f8:4b:cc:
aa:9d:0f:f2:8d:7a:52:cb:82:3f:37:1a:ad:fd:30:
27:1d:98:8f:c9:31:84:e1:a9:09:14:e5:5f:e4:ad:
3b:a9:c2:e4:e2:4c:d5:cf:fc:db:d6:46:49:30:cd:
b9:49:fb:b4:b3:b2:7d:1d:2b:24:44:b8:32:36:a9:
f7:e0:3e:24:e8:0e:82:80:35:b5:fd:6a:4b:b3:e5:
1b:eb:5e:fd:0d:10:b0:1c:99:2e:89:13:27:a9:79:
53:77:4f:ba:0d:3b:b4:85:52:33:ab:b9:fd:96:66:
7e:dc:86:43:11:fb:d3:73:3d:b8:7f:28:76:66:6f:
5c:2a:c0:81:29:1d:4d:db:c8:85:6c:9d:e2:b7:34:
36:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:12:70:14:C7:C3:2E:68:B1:21:2D:EE:1B:F5:54:D1:E8:D7:0B:02
X509v3 Authority Key Identifier:
keyid:0C:D0:96:9E:49:C9:AE:7C:A5:E8:F3:84:E1:91:2F:C7:36:AE:C3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:10:05:e4:96:2b:22:ba:c4:1f:16:b1:53:bf:19:24:7e:55:
5a:c5:ef:33:14:2b:b4:0b:3c:61:6b:20:98:52:90:a7:3a:73:
34:6b:a1:2f:ff:c7:cf:2a:d8:5f:9b:2f:9c:95:8f:a3:ce:35:
ab:68:16:9a:8c:75:b9:04:79:42:ed:c1:81:de:0c:d9:7d:8f:
1c:5b:7e:3a:20:81:38:07:c4:2c:51:b4:fd:d6:45:e9:20:d8:
b0:13:15:5a:cf:eb:b0:f5:5a:a0:04:bd:90:0d:d6:1f:48:07:
2f:c7:52:e4:4d:20:ce:1f:2f:bd:68:fa:f4:53:b7:04:41:f6:
9a:27:73:52:25:53:a1:0e:c1:b3:cb:d8:71:87:d7:b7:05:e4:
9f:8e:32:5f:45:17:23:11:cf:c7:13:8c:8d:7c:24:2c:36:23:
86:55:4f:38:a4:92:7b:a2:89:ff:53:97:44:0f:48:99:38:5f:
4e:27:9b:6f:a7:35:e8:e5:a9:01:8f:1f:50:1b:e0:42:2a:19:
e0:94:d8:1b:ba:b7:40:56:22:1d:b0:0b:eb:06:58:2e:cd:cc:
6a:3f:ce:a9:eb:75:96:98:df:24:22:31:ad:7b:90:5e:ff:61:
88:2a:cf:ef:36:a9:69:97:0d:1d:d8:4f:f0:01:16:c2:49:e8:
d2:c1:a5:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGY6yUFZk+NeeUuC9GJ5h4lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZDA5NjllNDljOWFlN2NhNWU4ZjM4NGUxOTEyZmM3MzZh
ZWMzMWQwHhcNMjYxMTAxMjEwMTQ5WhcNMjYxMTAyMjEwMTQ5WjAzMTEwLwYDVQQD
EyhiNTEyNzAxNGM3YzMyZTY4YjEyMTJkZWUxYmY1NTRkMWU4ZDcwYjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiv9vSOCAvtM0IsYb96E1Bv8sbhr
7ya76pqhYMyAi4Touj05S0IXRv0SiHbHqhAWkVwtbRLYcNTqE0LGIeA5NwnS5g/N
ejRlZDcK3zgmSOug871hizg4pvyG9mMPFeKkXOh8XMdjat8k39lcyDTylIIfibP4
S8yqnQ/yjXpSy4I/Nxqt/TAnHZiPyTGE4akJFOVf5K07qcLk4kzVz/zb1kZJMM25
Sfu0s7J9HSskRLgyNqn34D4k6A6CgDW1/WpLs+Ub6179DRCwHJkuiRMnqXlTd0+6
DTu0hVIzq7n9lmZ+3IZDEfvTcz24fyh2Zm9cKsCBKR1N28iFbJ3itzQ2HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUScBTHwy5osSEt7hv1VNHo1wsCMB8GA1UdIwQY
MBaAFAzQlp5Jya58pejzhOGRL8c2rsMdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5DV25rbkpybnlsNlBPRTRaRXZ4emF1d3gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NzFlNzctYzY0OS00N2YzLTk5YTgt
ZGJmYWMwMGZiMGVmLzEvRE5DV25rbkpybnlsNlBPRTRaRXZ4emF1d3gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NzFlNzctYzY0OS00N2YzLTk5YTgtZGJmYWMwMGZiMGVm
LzEvRE5DV25rbkpybnlsNlBPRTRaRXZ4emF1d3gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRAF5JYr
IrrEHxaxU78ZJH5VWsXvMxQrtAs8YWsgmFKQpzpzNGuhL//HzyrYX5svnJWPo841
q2gWmox1uQR5Qu3Bgd4M2X2PHFt+OiCBOAfELFG0/dZF6SDYsBMVWs/rsPVaoAS9
kA3WH0gHL8dS5E0gzh8vvWj69FO3BEH2midzUiVToQ7Bs8vYcYfXtwXkn44yX0UX
IxHPxxOMjXwkLDYjhlVPOKSSe6KJ/1OXRA9ImThfTiebb6c16OWpAY8fUBvgQioZ
4JTYG7q3QFYiHbAL6wZYLs3Maj/Oqet1lpjfJCIxrXuQXv9hiCrP7zapaZcNHdhP
8AEWwkno0sGlCw==
-----END CERTIFICATE-----
Generated at Mon Nov 2 07:28:47 2026 by rpki-client