Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: EsAWAohMh2pq8bOlOwpZh90k5KZYylDk2sRzBxc98xQ=
Subject key identifier: 86:3C:9C:4B:41:61:CD:5C:47:10:27:9A:F3:76:42:98:72:22:90:BA
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 01A08B682029B4FCAFA5607CAA041D0E3B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 1A53
Signing time: Thu 10 Sep 2026 13:00:52 +0000
Manifest this update: Thu 10 Sep 2026 13:00:52 +0000
Manifest next update: Fri 11 Sep 2026 13:00:52 +0000
Files and hashes: 1: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: RM33MVZrZPXtxGSXucbqOMBsf9bYdcYLPElZCzKIOTU=)
2: u5v1NIr7zCznyDKOfZW5zSM1TZI.roa (hash: 0y7T3YJCDc+2Cz1VFqoKYSn2dXOumotGXs+vkOowx74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:20:29:b4:fc:af:a5:60:7c:aa:04:1d:0e:3b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Sep 10 13:00:52 2026 GMT
Not After : Sep 11 13:00:52 2026 GMT
Subject: CN=863c9c4b4161cd5c4710279af3764298722290ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:92:07:df:1e:09:ba:e7:fc:07:fa:ed:5a:
d5:3c:71:09:4d:46:03:1e:68:1c:94:bc:32:2a:5c:
07:34:e5:ad:33:64:36:11:6f:a3:cc:53:7e:90:be:
65:74:f1:7f:db:fb:b6:af:f9:2c:ac:34:58:83:51:
40:ed:9a:6b:bd:15:24:f7:b4:bf:ff:24:3f:88:36:
b2:7f:cb:0e:b9:54:57:eb:51:2b:80:26:98:07:74:
f6:23:3a:f2:4b:cb:09:c6:d5:44:7d:1a:99:98:46:
e9:75:e2:2d:48:c2:18:ae:35:4d:15:4a:a1:32:c6:
81:00:c0:84:cb:00:cd:e8:bc:44:b1:bd:c8:2d:a0:
8e:e3:91:dd:21:9c:00:bd:84:3d:8e:d3:bd:de:b3:
1e:4c:59:0a:51:f5:3d:77:c6:6e:31:55:d3:5f:21:
58:cc:da:d2:39:9c:df:47:16:4b:0e:a7:44:a1:73:
c1:e3:11:cc:70:66:4c:09:0e:84:82:1f:0c:20:ab:
59:7b:db:07:de:20:f1:9e:ea:d5:d5:bc:6a:b3:52:
35:97:5d:c5:3d:12:58:8c:60:a3:0d:79:53:21:52:
5b:e3:af:d6:e7:6f:38:b5:b1:af:92:c0:92:89:98:
e6:56:de:d0:61:56:22:61:9e:b2:b4:8f:92:81:ee:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3C:9C:4B:41:61:CD:5C:47:10:27:9A:F3:76:42:98:72:22:90:BA
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:20:9c:27:1c:93:cb:d4:8e:d7:68:a1:df:a9:e8:08:ae:7a:
79:2f:ab:05:ef:eb:64:35:4f:a9:01:13:3e:93:f6:06:bb:9a:
14:83:0c:d1:03:8f:b1:f7:69:c3:34:b0:1a:2b:ff:13:d2:33:
9c:f9:58:8d:b6:f0:91:18:64:de:08:6f:e8:43:eb:76:5d:09:
69:aa:3d:a1:56:59:5a:4d:d3:9c:b6:c6:23:c4:a5:bc:bf:a8:
d5:1d:fe:c4:7d:d5:bb:26:88:bc:b4:12:8e:b4:6f:55:18:29:
b8:00:b2:0b:9d:66:c7:13:45:fc:e5:9d:15:7d:a2:ff:11:c3:
fa:6d:fb:35:92:87:d0:22:4c:c0:90:3b:3d:e5:f7:a2:d7:d6:
aa:a7:d4:53:0d:81:41:c3:2d:1b:6c:07:2c:97:07:0f:e8:5f:
30:aa:fc:1e:7f:dd:e4:7e:ee:cb:39:95:c4:18:b9:c9:17:dd:
59:bd:7b:c1:9b:e4:0b:61:87:61:68:af:77:d4:a7:f4:9f:39:
28:37:0a:da:ea:3a:60:49:8e:36:5c:a1:e9:be:7d:79:dc:41:
8a:21:77:16:17:6f:a0:52:78:42:2b:6a:d8:43:2f:99:62:a3:
e8:e8:a9:d2:65:93:b5:43:9c:c3:82:f0:d8:34:1c:8c:69:3d:
fb:9c:d0:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLaCAptPyvpWB8qgQdDjtpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZGE1Yzg3NDM1NGQ4MzgyNmU0M2MyNTM1Yjc2ZTIwZDVi
NjFiMDUwHhcNMjYwOTEwMTMwMDUyWhcNMjYwOTExMTMwMDUyWjAzMTEwLwYDVQQD
Eyg4NjNjOWM0YjQxNjFjZDVjNDcxMDI3OWFmMzc2NDI5ODcyMjI5MGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4WSB98eCbrn/Af67VrVPHEJTUYD
HmgclLwyKlwHNOWtM2Q2EW+jzFN+kL5ldPF/2/u2r/ksrDRYg1FA7ZprvRUk97S/
/yQ/iDayf8sOuVRX61ErgCaYB3T2IzryS8sJxtVEfRqZmEbpdeItSMIYrjVNFUqh
MsaBAMCEywDN6LxEsb3ILaCO45HdIZwAvYQ9jtO93rMeTFkKUfU9d8ZuMVXTXyFY
zNrSOZzfRxZLDqdEoXPB4xHMcGZMCQ6Egh8MIKtZe9sH3iDxnurV1bxqs1I1l13F
PRJYjGCjDXlTIVJb46/W5284tbGvksCSiZjmVt7QYVYiYZ6ytI+Sge4fHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIY8nEtBYc1cRxAnmvN2QphyIpC6MB8GA1UdIwQY
MBaAFAzaXIdDVNg4JuQ8JTW3biDVthsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMt
YzgyZjQyNGI2ZDBkLzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMtYzgyZjQyNGI2ZDBk
LzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCCcJxyT
y9SO12ih36noCK56eS+rBe/rZDVPqQETPpP2BruaFIMM0QOPsfdpwzSwGiv/E9Iz
nPlYjbbwkRhk3ghv6EPrdl0Jaao9oVZZWk3TnLbGI8SlvL+o1R3+xH3VuyaIvLQS
jrRvVRgpuACyC51mxxNF/OWdFX2i/xHD+m37NZKH0CJMwJA7PeX3otfWqqfUUw2B
QcMtG2wHLJcHD+hfMKr8Hn/d5H7uyzmVxBi5yRfdWb17wZvkC2GHYWivd9Sn9J85
KDcK2uo6YEmONlyh6b59edxBiiF3FhdvoFJ4Qitq2EMvmWKj6Oip0mWTtUOcw4Lw
2DQcjGk9+5zQ0w==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:01 2026 by rpki-client