Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
File: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft (raw, json)
Hash identifier: CX07tL59/4pgxXP5QKIvCC9dEU9Jq4MVQcW/FOYw0BI=
Subject key identifier: F0:62:05:D1:02:4D:74:CB:AD:18:B6:C6:98:79:E3:AB:FD:A1:66:49
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial: 019F17F9FCE9BB48A5B6626138CAA25C7A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 10:01:26 +0000
Manifest this update: Tue 30 Jun 2026 10:01:26 +0000
Manifest next update: Wed 01 Jul 2026 10:01:26 +0000
Files and hashes: 1: DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl (hash: JAaCb7RJ3DoKJFIE4R1TTMe4d7+thYd3LQl42COnRsA=)
2: qopqpOjSigcAgnh4q3o38zGjwNA.roa (hash: EBQgdsC6JJfdJnKh94uu6CL6R7A3pzSO9sS4FBZtJ/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:fc:e9:bb:48:a5:b6:62:61:38:ca:a2:5c:7a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
Validity
Not Before: Jun 30 10:01:26 2026 GMT
Not After : Jul 1 10:01:26 2026 GMT
Subject: CN=f06205d1024d74cbad18b6c69879e3abfda16649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:37:75:51:08:e5:60:4b:00:71:6d:de:b2:
a8:f2:f6:38:b3:4f:1c:a3:27:52:d7:0e:f9:f6:17:
48:98:84:02:66:51:0a:ed:5a:e2:2e:81:6d:06:9c:
74:ab:b6:52:a2:93:1d:39:46:7e:38:8b:57:0c:7f:
83:c4:d3:42:ed:d7:87:87:c6:1b:09:9c:86:c3:f8:
bf:f4:7d:ad:43:0a:16:a9:b7:c1:65:e1:81:0d:63:
78:65:79:98:aa:28:e4:bf:94:25:95:64:1c:60:09:
c3:a1:f6:b0:a6:9c:02:87:bf:66:2d:c4:d6:64:51:
19:91:6f:78:8f:71:37:3a:63:22:93:f5:08:7d:5f:
a0:26:b9:d0:b4:00:0b:33:cd:07:cf:cf:4c:b6:d3:
98:42:ac:ec:d2:3b:f1:f7:7a:8e:32:a9:e6:87:b4:
b9:14:45:20:ed:ec:c4:14:9a:c6:f4:cf:d0:f0:48:
c9:eb:73:18:46:3a:bb:e4:76:b9:3d:c1:93:65:31:
5a:1f:0f:f2:cf:2d:63:b0:c5:17:0f:4b:13:28:31:
96:84:9e:47:b3:08:a9:6c:ce:ac:6a:68:fc:e4:b7:
dc:d8:33:c0:91:bd:b7:b6:5f:ca:02:50:6c:48:1c:
56:94:4f:6f:f4:da:4b:b0:09:94:f4:e1:0f:b8:0e:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:62:05:D1:02:4D:74:CB:AD:18:B6:C6:98:79:E3:AB:FD:A1:66:49
X509v3 Authority Key Identifier:
keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2a:a7:60:d2:4a:e0:b6:cf:0b:87:d0:5d:dd:c2:60:5c:28:
8c:1c:62:68:4f:76:8a:4b:e3:a8:ce:60:79:37:b3:e3:93:2d:
cb:f7:be:b3:af:4f:e9:e5:42:70:5b:c0:23:ec:96:cd:f7:bc:
73:29:e9:5b:4d:00:96:d4:e9:70:76:9d:c9:05:2a:90:de:fa:
99:6d:05:f5:54:36:61:dc:6f:ec:01:ea:3e:1e:02:d1:cc:3e:
0d:85:14:bd:4f:ef:ef:1b:b1:2c:f4:4e:25:97:23:bd:b7:c2:
0a:90:be:cf:34:90:67:be:de:b8:02:e0:6e:77:77:00:f5:3b:
ac:23:3c:02:da:87:f8:1d:e6:c3:c9:c0:e7:0a:7b:77:5b:14:
d4:91:90:80:19:88:67:78:91:fa:75:23:f3:37:02:d9:47:56:
04:fa:b0:a8:72:60:50:57:96:3e:e6:51:86:9f:a7:50:4f:14:
e1:20:cb:5b:ea:59:11:be:e3:0b:31:14:95:73:be:03:c9:39:
53:00:b4:07:4b:22:7f:48:15:29:b9:25:fc:c9:d2:de:da:37:
ef:23:ad:df:34:2f:70:62:ec:a1:a7:af:bb:13:19:18:b9:86:
80:c1:2f:d1:52:54:c6:17:77:15:96:e2:a5:d4:08:f0:4a:18:
05:bb:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:13:00 2026 by rpki-client