Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: 5lwaXTaf0UF2dLj3ChgsShhi/RYn3+UdgF2ZeIMZLQI=
Subject key identifier: D5:BC:F8:B7:B5:D7:6F:21:52:58:55:94:8A:0F:98:85:AE:1F:FD:62
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 01A17CCECEDB9BA58617390ECFB4C96F5427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 1AD0
Signing time: Tue 27 Oct 2026 10:01:30 +0000
Manifest this update: Tue 27 Oct 2026 10:01:30 +0000
Manifest next update: Wed 28 Oct 2026 10:01:30 +0000
Files and hashes: 1: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: N7Z4tkS4GmrPRTPD229qgH+Ts86JaoLbv2y7sPsQ+d0=)
2: u5v1NIr7zCznyDKOfZW5zSM1TZI.roa (hash: 0y7T3YJCDc+2Cz1VFqoKYSn2dXOumotGXs+vkOowx74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:ce:db:9b:a5:86:17:39:0e:cf:b4:c9:6f:54:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Oct 27 10:01:30 2026 GMT
Not After : Oct 28 10:01:30 2026 GMT
Subject: CN=d5bcf8b7b5d76f21525855948a0f9885ae1ffd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:4a:ac:e5:23:b2:11:f0:fa:80:a4:50:3f:
f7:88:cd:f0:dc:4c:43:90:2b:70:72:e3:98:ae:17:
8e:f1:d9:ce:11:12:06:e0:f2:1b:03:b9:ed:a4:42:
95:72:f4:28:e7:1f:a5:05:5d:0a:fe:94:31:15:9b:
a2:ce:d9:36:47:86:1e:90:18:7b:db:62:b1:63:61:
d6:aa:f0:5a:33:4e:24:7c:68:f6:7b:43:06:36:f9:
ae:dd:08:f8:13:22:80:4c:37:d2:d1:2c:6b:28:56:
57:9d:35:39:86:0a:85:cb:e7:d4:55:89:3e:c2:50:
45:d8:04:83:dd:91:56:92:58:c9:34:41:32:89:84:
f7:ff:7b:3d:c0:ec:95:8f:a9:e5:9d:7a:0d:0c:40:
24:88:07:f5:c5:5c:60:3b:8c:fc:33:69:ad:4b:c7:
80:ad:db:82:9f:d8:af:3e:de:de:88:fe:1f:be:05:
cc:c6:fe:9f:6c:88:5c:02:5c:01:c4:c1:40:72:8e:
7a:39:eb:79:ee:c3:3e:6d:25:71:bb:f1:8b:4d:67:
b2:30:c0:b3:64:5f:87:46:78:65:c5:8a:9c:da:74:
c3:f4:b9:83:24:ae:57:8a:12:2d:21:a2:6e:56:0b:
a3:8b:4a:fe:23:df:01:f2:6a:cb:06:3c:e2:9f:75:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BC:F8:B7:B5:D7:6F:21:52:58:55:94:8A:0F:98:85:AE:1F:FD:62
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c2:4f:89:35:ad:bf:14:dd:31:65:f7:d7:7c:af:b1:90:a4:
d8:4e:ff:89:76:e8:4a:1f:e3:d7:0a:bd:62:2c:c3:c0:08:10:
9e:b2:89:ce:91:06:a2:f0:c8:91:5d:dc:f9:de:4f:91:a1:36:
48:8a:01:32:94:c1:0c:e9:4e:d4:29:c2:a6:ff:1d:f8:a0:42:
a0:03:9c:3a:30:52:a5:b6:68:7f:44:86:5f:dd:09:e4:c6:dc:
05:32:13:00:66:93:15:b3:76:cb:2c:76:71:fc:1f:f0:13:9a:
e2:2e:68:c0:d8:3d:66:78:c0:a9:70:ac:f8:86:b1:1c:54:f9:
22:aa:b2:5d:ef:d0:58:16:c0:62:c3:89:bd:3d:3e:73:d1:1c:
d1:b6:44:f0:b1:eb:1a:2b:dc:1b:cb:ec:8d:59:13:fd:6f:e4:
e0:bd:93:b6:61:e2:06:d1:ee:6f:23:1e:76:17:24:32:b1:f3:
b1:3d:b1:92:ef:db:16:81:07:39:05:9b:ca:b0:32:1a:f8:92:
50:60:29:2a:e7:1a:fc:53:8d:5b:88:99:22:3a:6e:08:99:11:
d6:a0:01:77:2f:59:b1:70:53:15:02:30:26:0a:36:58:d7:83:
53:ac:36:17:09:2e:12:88:8e:28:cc:ed:c9:a8:bb:f0:62:34:
2f:d5:5b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 19:11:13 2026 by rpki-client