Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
File: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json)
Hash identifier: 2UEMuyK6N+j9hkOoeIDDEYIp+SejkbzpMMPn9F+eX0g=
Subject key identifier: CD:19:80:AB:EC:37:51:52:20:AC:51:C9:16:00:F1:12:4B:3B:3D:11
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial: 01A13E5D21838B56EB2C25F5B625BD02BF23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 07:00:52 +0000
Manifest this update: Thu 15 Oct 2026 07:00:52 +0000
Manifest next update: Fri 16 Oct 2026 07:00:52 +0000
Files and hashes: 1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: GZ6bWpAjev1+aqrewrgo6l40vc1P+4t6YLV/sOdrm04=)
2: qopqpOjSigcAgnh4q3o38zGjwNA.roa (hash: EBQgdsC6JJfdJnKh94uu6CL6R7A3pzSO9sS4FBZtJ/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5d:21:83:8b:56:eb:2c:25:f5:b6:25:bd:02:bf:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
Validity
Not Before: Oct 15 07:00:52 2026 GMT
Not After : Oct 16 07:00:52 2026 GMT
Subject: CN=cd1980abec37515220ac51c91600f1124b3b3d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4d:10:5a:69:8a:99:a8:3f:71:06:f0:b1:02:
41:bb:d0:89:ca:0a:a8:fe:4b:c3:f6:c2:8d:8d:27:
3c:5a:06:5c:60:ac:72:be:6e:83:68:bd:27:00:b5:
78:f0:b5:05:00:56:92:e1:ba:77:dc:d6:a3:fe:f8:
86:f9:ca:ea:51:ef:60:61:a9:59:16:36:d6:1b:f9:
94:36:e4:63:9b:81:51:8c:ec:fe:a1:56:dd:fe:68:
4f:2d:89:d3:36:5b:5e:5d:9d:2a:03:b0:be:ed:93:
3c:68:9f:b3:d2:b0:8a:d9:64:1f:51:3b:98:bc:bf:
bd:4e:d6:74:62:04:f8:98:9b:ce:2f:05:ac:0c:32:
28:67:22:33:e2:7d:5e:03:6d:f2:97:64:ac:1c:e8:
c8:77:4c:97:46:8d:0e:10:54:f3:ba:f4:d1:31:a8:
47:d8:be:1b:eb:55:88:87:ba:e2:8b:a6:d8:dc:be:
40:8c:3b:e3:ac:f5:45:9a:a2:a7:6a:36:68:4f:e3:
90:60:cb:a8:69:82:d3:41:0e:ae:49:b2:bc:57:60:
c8:2c:84:22:67:1c:4a:4a:83:f6:b9:ee:ff:25:4c:
05:85:c4:26:7c:4a:89:49:38:ba:14:dc:68:dc:8e:
f3:ef:00:0f:f9:92:77:fa:a4:ae:3e:c6:44:89:05:
5e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:19:80:AB:EC:37:51:52:20:AC:51:C9:16:00:F1:12:4B:3B:3D:11
X509v3 Authority Key Identifier:
keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ff:63:1d:e9:61:b9:78:a3:a5:72:b6:d3:22:a8:c2:19:fa:
4f:2d:fe:69:56:5e:02:94:98:7a:f4:c9:35:e8:17:98:a6:2c:
69:bb:47:7c:9b:52:39:ec:a6:e4:7c:13:f0:ce:f9:60:3b:9b:
9f:77:80:e9:34:23:fe:7d:84:ba:90:64:5a:54:36:a8:44:f0:
de:dc:5b:fb:11:c1:5b:17:4b:a9:c4:87:c3:70:75:4d:d7:78:
de:f9:0e:d9:75:40:65:76:0c:58:1a:e9:59:e7:e3:91:5e:1e:
15:9e:64:4f:12:11:32:2d:41:d7:3b:6f:9c:c0:bc:49:f4:0d:
b6:8d:6f:fc:11:91:78:a5:dc:14:d9:83:f2:1b:ad:0e:35:0e:
67:56:6f:3f:c8:7f:9e:2d:13:4f:99:9f:de:6c:bd:36:78:45:
9f:c3:f9:79:05:dc:97:9d:e6:b2:b3:a6:af:fc:e1:eb:0e:9f:
82:b4:c8:b8:be:17:c4:96:8d:e9:53:75:e7:e6:9f:79:bd:8e:
c6:25:3c:4d:52:c8:6b:da:65:ab:34:d3:19:5c:00:c9:ab:6d:
6f:ac:49:e9:cc:a6:bd:34:7a:df:58:5f:16:57:04:85:e3:5f:
59:66:78:8a:f4:13:6c:1b:31:73:d6:6d:f4:2c:1d:3d:85:b6:
e0:92:bf:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:56:46 2026 by rpki-client