Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
File: DNszEee1KoxC8GUP9DwPyE0yDxY.mft (raw, json)
Hash identifier: XgtwPLnjIME231ASLJxLRvD4Vl2N2U5/6GU8yNW+c0s=
Subject key identifier: 22:55:B7:51:07:A6:39:E1:7D:93:26:F2:62:11:D9:2C:E9:22:2C:73
Authority key identifier: 0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
Certificate issuer: /CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Certificate serial: 019D37F711FC92CB0677EF4DB6D33A3BFF51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
Manifest number: E1
Signing time: Sun 29 Mar 2026 05:00:31 +0000
Manifest this update: Sun 29 Mar 2026 05:00:31 +0000
Manifest next update: Mon 30 Mar 2026 05:00:31 +0000
Files and hashes: 1: DNszEee1KoxC8GUP9DwPyE0yDxY.crl (hash: tdQf0dGhBgyPizVWeZTZNjY/j2mmJ0Yu8MCC7Rc36qg=)
2: KkZ9T-InsQon19zi2pp0iLPe7uw.asa (hash: PxN+SD6/SnkXuWBprhfsz0XFK1K5PUh2KfS43HH5dtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:11:fc:92:cb:06:77:ef:4d:b6:d3:3a:3b:ff:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Validity
Not Before: Mar 29 05:00:31 2026 GMT
Not After : Mar 30 05:00:31 2026 GMT
Subject: CN=2255b75107a639e17d9326f26211d92ce9222c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:d8:ae:87:37:d9:37:72:73:9b:cd:1b:68:
67:e6:bc:18:24:d1:86:bf:de:76:48:81:d9:68:65:
fd:9b:b9:e1:52:74:5a:18:42:3a:eb:91:ad:52:70:
2e:06:8a:7d:4e:95:7f:a4:8d:a0:35:fd:34:f6:ea:
7d:7b:96:10:1f:d2:7c:01:b9:fd:f3:8f:a8:7f:85:
8f:45:b4:f4:1e:cb:5e:c8:56:a2:4f:59:ae:d4:cd:
a4:25:0a:0b:77:a2:1d:c7:e8:3d:2d:cd:4f:c3:24:
32:0a:7f:e2:db:cd:c0:40:17:16:29:59:73:ae:16:
86:08:64:73:fb:f8:79:ed:fb:a2:bc:29:01:99:86:
bd:35:6a:29:3d:52:37:52:af:b4:76:24:05:c5:60:
00:59:65:4e:e5:57:d2:2e:3f:79:55:60:95:c7:fa:
73:b0:be:12:3b:a2:23:ad:15:93:f9:79:20:63:d8:
b2:6e:18:08:81:62:ec:21:4c:6a:c0:28:7c:6c:50:
48:13:3f:b3:6c:9a:68:90:a0:44:0d:e4:02:71:12:
35:a9:76:98:ec:da:5a:63:90:e0:21:3f:49:02:c6:
e6:45:e3:a9:10:d5:54:27:38:d4:9e:5e:dc:ad:4d:
65:3c:1a:07:0b:95:bd:53:8b:1d:87:88:76:04:eb:
3a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:55:B7:51:07:A6:39:E1:7D:93:26:F2:62:11:D9:2C:E9:22:2C:73
X509v3 Authority Key Identifier:
keyid:0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:57:ad:59:28:17:f1:d0:51:0e:29:1d:bd:af:ae:2f:5a:df:
a8:f7:05:a9:c0:eb:19:2c:05:45:e0:4b:87:1f:26:fa:18:94:
53:16:58:38:19:f0:ef:e7:c0:4a:bc:ab:0c:5b:3a:1f:87:41:
c1:a5:fa:8f:64:7e:af:7e:9f:8e:2b:d7:7e:c0:17:d8:7c:0b:
a4:85:cb:04:03:e1:4f:62:da:98:a6:7b:4a:9e:6c:4d:a2:b4:
8a:a5:8c:fc:07:24:82:8e:4f:43:77:c4:52:89:b9:91:5f:87:
b0:9a:b4:dd:bd:88:55:f4:d8:d0:bb:ef:49:3d:32:c2:21:11:
ab:85:cc:3c:1d:52:7f:d8:b0:83:72:9b:90:b8:5a:bc:fa:68:
5c:67:6e:49:da:af:4e:1b:17:02:40:56:ed:42:fd:cb:b4:7a:
86:19:57:89:88:1d:4d:b5:b9:f2:2a:aa:0d:15:3a:81:b3:8b:
2c:0a:63:8f:2e:1e:dd:02:1c:ba:92:85:49:3d:4a:ab:14:df:
de:43:0e:fb:ea:a9:4b:33:e7:ac:55:cf:05:16:07:57:ba:86:
52:aa:4a:d8:9d:05:8f:a6:96:37:55:88:78:cf:4a:01:a5:69:
fd:81:a9:71:7f:f4:ba:65:54:cf:8c:d8:f6:2a:fd:65:23:a9:
0b:d7:6d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:03 2026 by rpki-client