Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
File: DNCWnknJrnyl6POE4ZEvxzauwx0.mft (raw, json)
Hash identifier: yZb4JZIJ2Lg3fFmfeM91KlZcc5oJCTFJev23x1tR1v8=
Subject key identifier: 26:2B:7E:C4:3B:91:E8:C1:23:D9:2A:44:CF:3A:91:45:8F:58:81:25
Authority key identifier: 0C:D0:96:9E:49:C9:AE:7C:A5:E8:F3:84:E1:91:2F:C7:36:AE:C3:1D
Certificate issuer: /CN=0cd0969e49c9ae7ca5e8f384e1912fc736aec31d
Certificate serial: 019FA0E10BFFDF802989D63C0A5554532E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:02:10 +0000
Manifest this update: Mon 27 Jul 2026 00:02:10 +0000
Manifest next update: Tue 28 Jul 2026 00:02:10 +0000
Files and hashes: 1: DNCWnknJrnyl6POE4ZEvxzauwx0.crl (hash: rtbkvcx6PNNwqgAyBExBd+lJJicibVpBrrickyaAvng=)
2: QL2RZ2Q7sMvqAmtDAtbRFFttDqQ.roa (hash: 4wHUxK0fzTcnu97RI6Dg3YXNgmexEtc/7w7Ys0gTVow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e1:0b:ff:df:80:29:89:d6:3c:0a:55:54:53:2e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd0969e49c9ae7ca5e8f384e1912fc736aec31d
Validity
Not Before: Jul 27 00:02:10 2026 GMT
Not After : Jul 28 00:02:10 2026 GMT
Subject: CN=262b7ec43b91e8c123d92a44cf3a91458f588125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a4:cc:14:5e:f0:9f:b4:b9:17:f8:cb:e5:18:
ce:97:39:20:49:63:f5:b4:62:0c:4b:74:2b:41:49:
a2:d2:15:e5:35:f7:29:8d:04:2a:85:61:42:3f:19:
0a:f0:26:a4:1f:3a:67:b7:b0:9f:ee:2b:48:3c:bf:
eb:fb:25:0b:e1:99:87:25:8c:82:32:a9:eb:29:ee:
49:d4:83:d8:3e:be:6a:b6:6d:eb:a9:ff:00:ad:a8:
57:a5:f0:70:d0:97:4f:2d:da:42:2b:0a:20:8d:12:
a8:87:01:3c:11:c7:36:16:c7:d4:14:16:ad:fd:a6:
d4:2c:33:95:f4:b4:64:9c:f4:d0:3a:ba:06:2a:06:
d6:cf:fa:f9:5c:c6:f6:2d:a6:6f:ab:fa:5b:f8:09:
f3:0a:d0:93:e6:fe:cb:1b:9e:b5:89:dd:5c:6d:bc:
0a:71:54:84:c1:4c:0f:f6:9c:ad:f7:a1:7a:f9:5c:
10:cb:99:59:e3:c1:9d:fe:24:e9:68:35:69:c8:5d:
de:a5:d5:4b:e2:c4:a7:a9:e3:1d:9f:00:99:db:23:
c6:15:54:17:8c:0b:d7:35:a7:e0:73:b0:b0:4a:4c:
39:29:ac:a2:71:91:32:99:ae:52:02:47:ba:f7:41:
6c:a4:43:46:75:6e:3b:c9:b7:5a:50:da:d8:1e:1f:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2B:7E:C4:3B:91:E8:C1:23:D9:2A:44:CF:3A:91:45:8F:58:81:25
X509v3 Authority Key Identifier:
keyid:0C:D0:96:9E:49:C9:AE:7C:A5:E8:F3:84:E1:91:2F:C7:36:AE:C3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a1:9d:b5:8e:e6:3c:55:7d:af:28:e2:be:2c:26:f2:8c:68:
c8:7a:2d:10:6a:bf:0f:4c:6f:da:19:81:6d:5f:ec:04:1f:33:
6b:bc:31:7d:64:ac:90:8e:90:1b:0e:6e:10:f1:0e:a5:68:54:
fe:0e:8a:6b:05:c9:5a:49:28:2f:d5:2f:f8:58:4b:47:51:0f:
7f:38:1d:c1:e9:d0:6a:40:7a:1a:0b:3c:0c:dc:18:c0:39:1b:
bf:47:4c:52:16:77:3c:13:21:49:c1:ab:be:91:61:f6:ab:b8:
24:91:d4:b3:14:63:7c:32:5a:b9:61:cb:6d:34:bf:d9:fd:cf:
72:8f:2b:52:42:2b:65:4b:26:14:1d:73:d4:d9:ef:ef:10:92:
69:82:67:c9:74:79:d2:54:9f:f8:12:1b:07:d0:6c:90:4d:e8:
77:7d:ed:f7:98:1b:80:9b:3a:32:6c:ac:9c:0b:a7:34:6f:e1:
7c:cc:ef:81:f9:5d:fd:e7:da:b5:ab:17:58:12:ec:3d:32:7a:
05:1b:7a:75:06:89:0a:0f:f1:0d:19:48:59:6c:7f:2d:8a:aa:
4e:4d:89:1e:45:ae:38:40:00:1c:61:09:a7:43:16:f6:41:cb:
a4:35:aa:44:4f:fa:de:0b:e9:f2:51:57:0a:89:9c:37:7c:83:
af:19:6c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:57:23 2026 by rpki-client