
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
File: DNszEee1KoxC8GUP9DwPyE0yDxY.mft (raw, json)
Hash identifier: T1HtK2e427WoM5PtA37v5R2sBI1ArU94bMacx++nVEE=
Subject key identifier: 90:D8:93:A4:38:A4:6F:B1:71:05:6D:7E:9C:61:49:4E:79:CC:19:80
Authority key identifier: 0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
Certificate issuer: /CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Certificate serial: 019F111BD97781AC97C04E3EFF705428700B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
Manifest number: 01D6
Signing time: Mon 29 Jun 2026 02:01:05 +0000
Manifest this update: Mon 29 Jun 2026 02:01:05 +0000
Manifest next update: Tue 30 Jun 2026 02:01:05 +0000
Files and hashes: 1: DNszEee1KoxC8GUP9DwPyE0yDxY.crl (hash: DBAq6Bd5TQdzn1bOwIr/nRdT4a+TXSghJAW3MDdjb1s=)
2: KkZ9T-InsQon19zi2pp0iLPe7uw.asa (hash: PxN+SD6/SnkXuWBprhfsz0XFK1K5PUh2KfS43HH5dtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1b:d9:77:81:ac:97:c0:4e:3e:ff:70:54:28:70:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Validity
Not Before: Jun 29 02:01:05 2026 GMT
Not After : Jun 30 02:01:05 2026 GMT
Subject: CN=90d893a438a46fb171056d7e9c61494e79cc1980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3d:e5:3e:73:0a:80:0b:71:23:b1:af:8d:4a:
03:38:55:3e:c6:ca:8e:8a:45:c5:84:27:99:05:e0:
93:ea:d6:a8:3d:d6:4e:af:6f:7f:7e:f6:ab:7e:2b:
3a:19:e2:10:c9:d7:5b:c8:9b:dd:d7:8f:56:6d:9f:
cd:92:0f:9f:b7:df:bc:c5:64:dd:39:fa:f8:13:4a:
e1:e6:88:75:77:5f:ca:89:33:9e:2e:36:fb:63:4c:
b1:f5:f0:5c:1a:f8:56:b4:b8:ea:34:77:50:6a:0f:
55:bf:ec:0e:4d:fc:0a:47:30:a4:58:86:5a:40:5d:
0c:34:df:0f:ee:60:fa:de:7b:e9:c8:e1:a4:7b:42:
74:c4:43:eb:0a:16:20:34:90:4b:02:33:d7:b0:f9:
46:26:65:ef:9b:00:c7:b7:49:bf:14:cd:ad:97:66:
5a:b4:0f:12:c5:06:bc:ea:f4:7a:b2:9b:6b:6f:69:
05:dc:7c:d4:5b:be:14:6f:64:29:b1:d4:6c:17:24:
1d:9e:eb:d8:3c:82:cd:13:7d:7e:44:7d:f8:22:7f:
29:2c:19:ec:bb:f8:a4:d9:c1:01:ae:81:25:8a:10:
fb:2f:60:72:bd:46:7b:17:f2:e6:a9:13:d3:e5:00:
99:cf:d9:c8:1d:46:f7:c3:87:b0:44:9a:c5:b5:e9:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D8:93:A4:38:A4:6F:B1:71:05:6D:7E:9C:61:49:4E:79:CC:19:80
X509v3 Authority Key Identifier:
keyid:0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:74:3e:68:cb:c4:9c:7b:93:2a:9b:47:3f:71:9e:4c:fb:56:
83:93:ba:02:5d:dc:3c:f6:cf:4e:7d:e8:1a:e0:76:49:88:1b:
99:09:f5:8a:22:38:4a:d5:7f:36:9e:2a:a4:e8:2d:ea:3a:91:
75:8a:da:a8:72:c7:13:28:1f:ca:aa:54:4c:b6:d0:d5:08:3a:
c5:cb:4c:c5:5b:15:51:26:53:ed:9b:85:53:a8:a0:33:93:95:
f7:40:18:b2:39:a7:7b:0a:04:38:66:87:c5:a5:51:2b:9b:2b:
a3:fc:25:ce:87:1b:9a:35:ad:95:22:de:14:46:de:40:6d:5d:
cf:19:10:a2:1c:72:7d:a2:0d:b8:75:a0:3c:aa:e1:e3:b1:ff:
4a:15:b5:4d:15:82:7b:99:16:ca:62:b6:43:5b:2c:d1:a4:73:
a8:d6:18:db:2a:8e:43:90:6d:44:d0:34:59:54:7a:79:68:8d:
62:e9:cf:a6:46:fb:45:30:52:d7:c2:64:98:06:66:bc:4a:bc:
20:7c:79:43:5e:6e:53:bb:a6:8a:2d:a4:18:2a:e4:d9:14:ef:
66:53:d3:ba:d7:f2:18:5d:64:87:7f:15:73:1a:53:1d:1c:06:
65:d3:77:fe:fd:6f:b8:bc:5e:e8:f5:90:00:69:60:83:c4:09:
51:de:f1:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RG9l3gayXwE4+/3BUKHALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZGIzMzExZTdiNTJhOGM0MmYwNjUwZmY0M2MwZmM4NGQz
MjBmMTYwHhcNMjYwNjI5MDIwMTA1WhcNMjYwNjMwMDIwMTA1WjAzMTEwLwYDVQQD
Eyg5MGQ4OTNhNDM4YTQ2ZmIxNzEwNTZkN2U5YzYxNDk0ZTc5Y2MxOTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6T3lPnMKgAtxI7GvjUoDOFU+xsqO
ikXFhCeZBeCT6taoPdZOr29/fvarfis6GeIQyddbyJvd149WbZ/Nkg+ft9+8xWTd
Ofr4E0rh5oh1d1/KiTOeLjb7Y0yx9fBcGvhWtLjqNHdQag9Vv+wOTfwKRzCkWIZa
QF0MNN8P7mD63nvpyOGke0J0xEPrChYgNJBLAjPXsPlGJmXvmwDHt0m/FM2tl2Za
tA8SxQa86vR6sptrb2kF3HzUW74Ub2QpsdRsFyQdnuvYPILNE31+RH34In8pLBns
u/ik2cEBroElihD7L2ByvUZ7F/LmqRPT5QCZz9nIHUb3w4ewRJrFten7OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDYk6Q4pG+xcQVtfpxhSU55zBmAMB8GA1UdIwQY
MBaAFAzbMxHntSqMQvBlD/Q8D8hNMg8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xYTc5OGYtOTQ4OS00ZTFmLWI4Yjct
MWM5Y2VmOWQ4ODJmLzEvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8xYTc5OGYtOTQ4OS00ZTFmLWI4YjctMWM5Y2VmOWQ4ODJm
LzEvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXQ+aMvE
nHuTKptHP3GeTPtWg5O6Al3cPPbPTn3oGuB2SYgbmQn1iiI4StV/Np4qpOgt6jqR
dYraqHLHEygfyqpUTLbQ1Qg6xctMxVsVUSZT7ZuFU6igM5OV90AYsjmnewoEOGaH
xaVRK5sro/wlzocbmjWtlSLeFEbeQG1dzxkQohxyfaINuHWgPKrh47H/ShW1TRWC
e5kWymK2Q1ss0aRzqNYY2yqOQ5BtRNA0WVR6eWiNYunPpkb7RTBS18JkmAZmvEq8
IHx5Q15uU7umii2kGCrk2RTvZlPTutfyGF1kh38VcxpTHRwGZdN3/v1vuLxe6PWQ
AGlgg8QJUd7xdQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:46 2026 by rpki-client