Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
File: DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft (raw, json)
Hash identifier: CFdIsoIqS4TpI+fHksnJPD/l3k9AysqoSlAf6JMM9oE=
Subject key identifier: 3B:AB:01:2C:71:1E:72:BD:BA:3D:33:99:18:AD:54:23:61:F0:02:DC
Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
Certificate issuer: /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Certificate serial: 019DA754DDB1023D295B6620744D08A109AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 20:00:49 +0000
Manifest this update: Sun 19 Apr 2026 20:00:49 +0000
Manifest next update: Mon 20 Apr 2026 20:00:49 +0000
Files and hashes: 1: DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl (hash: gGoQ6G7km06nzJyFXWdgwEOzKetyIroCiopbA8Ij1YQ=)
2: Ty_PZDqaOmeFjLIdr3QFueerKIM.roa (hash: mfeK6p+b2jXbJTu7RkO60pgbrZY/WThNdE0YkaHIazA=)
3: ZK_lplNOHoj8XGWdtaGMmSrc3x0.roa (hash: /qdKs+yTlrC/OXEPfuDp9SEn7i6+ObqNyY75S5FZQO8=)
4: _7jylL9q9B68bc5gOBCT4NAKAwE.roa (hash: udwwApN1RRRAB/0kSZzWjgDibuhxWbwtgPuXqFkvmuE=)
5: cpElJSiXGO7jJAVo9S1jen5uhjQ.roa (hash: jXHD1yWMKx7op/sh3fiD9gaMHojOuxsjiA1ioAXvW84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:54:dd:b1:02:3d:29:5b:66:20:74:4d:08:a1:09:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Validity
Not Before: Apr 19 20:00:49 2026 GMT
Not After : Apr 20 20:00:49 2026 GMT
Subject: CN=3bab012c711e72bdba3d339918ad542361f002dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:74:68:10:bb:05:a5:34:3a:d2:a0:e0:1a:
32:cb:d7:a6:be:32:95:32:6f:d5:6a:4c:09:cb:6b:
9c:64:32:b6:14:0d:00:41:72:12:cf:1a:f9:0b:c2:
74:23:de:da:4d:b2:a9:36:96:da:18:a1:91:2a:cd:
60:71:92:b2:b4:e2:7c:a8:fe:32:74:dd:ee:bb:5b:
e8:51:0d:fd:91:32:b7:0e:8f:2e:c2:90:2e:e5:5c:
24:ec:d9:37:41:2a:0a:86:d1:4b:95:b7:ae:60:fd:
08:20:bf:c6:9a:ef:f9:bf:79:ac:19:c9:89:06:9b:
88:1a:96:8f:c0:98:27:5c:9f:64:c8:f0:3e:04:44:
89:6b:75:94:95:c7:fa:b3:f3:29:ca:34:cb:a6:5e:
77:0b:68:9c:df:f1:65:57:18:8c:4b:26:33:f7:8a:
e8:97:cf:a1:a6:12:7a:4b:18:fe:a7:61:d9:93:97:
d1:64:06:6c:e3:80:95:78:87:29:04:e0:6b:81:e4:
89:bb:c2:bd:63:97:83:28:07:e6:bb:01:97:b6:b5:
70:3d:85:c5:7e:62:9c:97:f2:ae:b2:a6:b3:a6:0c:
4b:f9:b7:80:a9:f9:0e:2c:9a:b4:83:77:89:9a:d1:
de:33:c9:d2:24:98:d0:71:90:36:52:ed:0a:57:ac:
dc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AB:01:2C:71:1E:72:BD:BA:3D:33:99:18:AD:54:23:61:F0:02:DC
X509v3 Authority Key Identifier:
keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:87:d9:50:93:54:7d:27:8e:92:3b:85:fd:00:e3:97:83:be:
34:0a:85:5b:97:2c:ae:2d:f4:57:30:53:e5:c2:43:1c:aa:66:
c0:b2:a5:ff:53:53:1c:01:28:fe:38:5d:c7:bb:75:42:82:bd:
ee:9c:c2:8f:18:c6:0c:77:a1:91:af:7e:b9:6a:70:60:bc:ea:
33:d5:90:b1:88:e5:7c:6e:ed:4b:ea:9e:95:6b:cf:ff:61:42:
b5:fe:b4:fb:dc:31:cc:e4:6d:ea:c2:5b:43:d0:03:81:4d:d8:
71:d0:d0:ad:eb:16:0b:b0:03:73:d3:a9:16:d4:50:88:2d:55:
1f:9e:ae:34:dd:d0:fa:c3:af:1a:63:6f:4e:38:5f:15:f1:68:
39:3d:73:b2:c5:1a:02:7d:39:c0:bc:72:72:cb:fd:7a:00:21:
e5:1f:2a:e3:6f:66:bb:f4:ad:b1:d3:85:d3:15:03:12:20:5a:
39:24:65:30:5e:94:bc:55:da:6a:a7:ac:3d:cf:9b:32:51:36:
22:45:fd:97:f0:73:de:33:aa:d1:fb:00:96:a5:86:8e:22:6c:
17:0d:3e:29:80:4f:78:aa:28:84:38:0c:46:c6:6d:69:30:5e:
ad:89:b4:aa:5d:c2:4d:fe:a6:2b:f5:24:62:5f:5d:b3:e5:66:
f8:f1:35:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:26:08 2026 by rpki-client