Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: oZulcCEAvjZxmhtqHhSGNXpPXXtNG1fyaTC2g1KSE2Q=
Subject key identifier: 51:F2:92:12:A8:C5:13:B6:8A:7B:33:75:F4:E4:33:14:A1:87:CC:30
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 019FA3A970AB2FC9C06160EEF0C76BFB31FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 19DB
Signing time: Mon 27 Jul 2026 13:00:18 +0000
Manifest this update: Mon 27 Jul 2026 13:00:18 +0000
Manifest next update: Tue 28 Jul 2026 13:00:18 +0000
Files and hashes: 1: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: 16wlWEMZLejciRu8NgNxLnz229YNIwJp6E5p0yfLQ8Q=)
2: u5v1NIr7zCznyDKOfZW5zSM1TZI.roa (hash: 0y7T3YJCDc+2Cz1VFqoKYSn2dXOumotGXs+vkOowx74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:a9:70:ab:2f:c9:c0:61:60:ee:f0:c7:6b:fb:31:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Jul 27 13:00:18 2026 GMT
Not After : Jul 28 13:00:18 2026 GMT
Subject: CN=51f29212a8c513b68a7b3375f4e43314a187cc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:72:7a:c2:91:a0:e2:0e:53:b7:4c:fa:fe:
42:5f:37:f6:94:06:94:7f:8e:c5:00:a5:3e:23:5f:
97:e8:e8:0a:06:37:86:ee:2e:dd:5a:70:5c:89:a5:
60:6f:46:66:f1:7b:7a:97:b7:fd:b0:68:5c:a5:98:
0f:bd:e1:a8:d9:98:09:a8:e0:21:cb:ba:9b:fd:d5:
9a:3b:f7:e6:97:b1:72:5a:01:53:84:55:2c:d8:7c:
ae:c5:8e:08:59:c2:5b:2f:30:8b:db:4d:dc:2f:8e:
29:9b:ea:96:5b:4f:16:91:94:26:c7:71:34:14:52:
c9:9f:cb:32:f8:65:c0:ee:6c:80:7c:86:f9:cd:b9:
63:fa:ce:ba:29:46:f9:53:2d:2c:44:5f:d2:fb:a2:
ab:27:62:8a:ab:ee:fd:4a:f8:a6:45:53:5b:ea:dc:
21:ca:fb:19:c8:df:ee:17:55:11:dc:97:f8:d8:f4:
f1:4a:1f:8a:19:42:2b:ee:39:c3:a2:77:12:75:47:
12:ac:22:40:80:c2:af:e9:3b:76:1a:da:49:c0:9e:
dd:27:20:ad:59:6e:d2:f1:24:48:f8:d3:86:02:92:
87:d8:5e:9d:ad:e0:e5:38:40:53:8f:1b:9a:3d:d4:
eb:a3:f5:bf:95:97:db:01:35:a5:89:b0:18:8d:2c:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F2:92:12:A8:C5:13:B6:8A:7B:33:75:F4:E4:33:14:A1:87:CC:30
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a3:d3:46:21:0f:ce:7d:4e:1f:a8:36:e1:cf:1c:3a:a5:b1:
b0:cc:03:9c:3a:8f:f4:f0:d0:7f:41:d8:d4:63:84:f7:6e:8e:
94:11:ad:9b:07:46:27:38:bb:e9:54:18:f0:63:70:15:28:d5:
6d:d1:b5:11:69:03:23:dd:b5:4f:54:99:18:cf:84:21:f6:3b:
e0:89:9e:c2:7c:ef:60:f4:fb:3d:59:fd:d6:d2:27:91:1b:8c:
e8:49:39:50:eb:57:ab:d4:4e:5a:d4:44:bc:29:f9:df:a4:0d:
05:e2:99:86:98:1a:38:c4:92:e9:d7:c4:93:c6:86:28:cc:17:
b4:98:5d:85:d1:57:e7:06:19:4b:dd:02:69:9b:14:ba:ca:27:
fa:2c:f8:a2:77:c9:5f:1a:8a:ec:a0:4c:67:eb:d9:82:19:ae:
d0:7b:d3:44:4b:3c:48:17:2a:4e:e9:23:33:c8:5a:d0:20:e5:
77:7b:98:67:de:8a:21:14:94:af:38:0f:be:4c:55:56:f8:4a:
66:b3:a1:8a:68:28:6d:52:c3:84:14:a7:94:cf:a7:68:00:82:
f8:fa:8a:f5:99:8e:c7:b4:ce:3d:0d:40:b2:20:a1:ae:16:8e:
99:c3:6a:c3:cd:90:81:57:0d:42:8a:e9:b2:20:f2:7e:d4:2a:
8a:2a:32:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jqXCrL8nAYWDu8Mdr+zH+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZGE1Yzg3NDM1NGQ4MzgyNmU0M2MyNTM1Yjc2ZTIwZDVi
NjFiMDUwHhcNMjYwNzI3MTMwMDE4WhcNMjYwNzI4MTMwMDE4WjAzMTEwLwYDVQQD
Eyg1MWYyOTIxMmE4YzUxM2I2OGE3YjMzNzVmNGU0MzMxNGExODdjYzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1plyesKRoOIOU7dM+v5CXzf2lAaU
f47FAKU+I1+X6OgKBjeG7i7dWnBciaVgb0Zm8Xt6l7f9sGhcpZgPveGo2ZgJqOAh
y7qb/dWaO/fml7FyWgFThFUs2HyuxY4IWcJbLzCL203cL44pm+qWW08WkZQmx3E0
FFLJn8sy+GXA7myAfIb5zblj+s66KUb5Uy0sRF/S+6KrJ2KKq+79SvimRVNb6twh
yvsZyN/uF1UR3Jf42PTxSh+KGUIr7jnDoncSdUcSrCJAgMKv6Tt2GtpJwJ7dJyCt
WW7S8SRI+NOGApKH2F6dreDlOEBTjxuaPdTro/W/lZfbATWlibAYjSx31wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHykhKoxRO2inszdfTkMxShh8wwMB8GA1UdIwQY
MBaAFAzaXIdDVNg4JuQ8JTW3biDVthsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMt
YzgyZjQyNGI2ZDBkLzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMtYzgyZjQyNGI2ZDBk
LzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqPTRiEP
zn1OH6g24c8cOqWxsMwDnDqP9PDQf0HY1GOE926OlBGtmwdGJzi76VQY8GNwFSjV
bdG1EWkDI921T1SZGM+EIfY74ImewnzvYPT7PVn91tInkRuM6Ek5UOtXq9ROWtRE
vCn536QNBeKZhpgaOMSS6dfEk8aGKMwXtJhdhdFX5wYZS90CaZsUuson+iz4onfJ
XxqK7KBMZ+vZghmu0HvTREs8SBcqTukjM8ha0CDld3uYZ96KIRSUrzgPvkxVVvhK
ZrOhimgobVLDhBSnlM+naACC+PqK9ZmOx7TOPQ1AsiChrhaOmcNqw82QgVcNQorp
siDyftQqiioyZw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 16:24:40 2026 by rpki-client