Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: UJwEr6oMFj4gol1uZlb0ZvHrmHxwPpEofrP8RGEY9Ic=
Subject key identifier: E3:AE:3F:DE:46:02:8F:36:51:64:1D:6B:B4:E8:8F:ED:64:E1:35:05
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 019EEEC7C97C1AE6D757DA9B74F6E950C7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 1976
Signing time: Mon 22 Jun 2026 10:02:11 +0000
Manifest this update: Mon 22 Jun 2026 10:02:11 +0000
Manifest next update: Tue 23 Jun 2026 10:02:11 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: PaZeZ9im+Df65M96yPN4flN7UbuZ/JiFGuCdcXQtaVw=)
2: xRmmdqH1-j--sEXPtnNY3Z-R5Zo.roa (hash: 3OUa7VjiPRdUyQdSMo547+vkOocCdI86key02w1U7/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:c7:c9:7c:1a:e6:d7:57:da:9b:74:f6:e9:50:c7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Jun 22 10:02:11 2026 GMT
Not After : Jun 23 10:02:11 2026 GMT
Subject: CN=e3ae3fde46028f3651641d6bb4e88fed64e13505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:ef:b1:68:9b:bd:1a:60:bf:00:79:f5:c5:
0e:41:54:d1:64:21:44:9b:76:3e:b3:6d:26:f8:58:
52:59:46:9d:61:45:d5:88:19:45:8e:dd:4b:60:0f:
69:a0:58:2d:c7:08:7f:71:f9:52:37:01:34:06:68:
45:c9:81:fc:d9:2e:4d:79:94:2f:ae:79:28:ab:41:
c0:ee:47:a3:fd:fe:66:4f:c1:ad:37:59:bf:b8:a7:
d0:0c:7c:97:67:31:85:38:7e:ff:73:c7:87:e5:9c:
48:9f:d4:c9:e3:4c:1e:7a:cb:73:b2:c0:12:5e:54:
53:6e:c3:b8:af:43:73:f3:4f:96:3d:2a:04:b9:e9:
85:62:66:d0:e7:3c:63:2a:d1:e4:2d:42:4b:a9:ee:
17:b6:1f:55:f5:28:5b:cc:64:37:a5:e3:44:e0:79:
2c:9a:0b:9a:4c:f0:70:41:02:76:b0:63:09:96:37:
c6:28:6b:42:15:5e:b0:34:c8:80:c3:da:76:b2:9a:
e4:34:f7:e8:16:ec:a7:b5:e8:1d:7b:cf:d8:44:e4:
ae:8e:f3:0a:17:f3:2e:f2:89:72:bb:68:84:09:93:
f9:4e:f2:ad:33:e4:94:74:5f:9a:4c:1a:30:eb:00:
c4:eb:8f:30:52:41:35:4e:69:cf:b5:cf:6b:ba:4e:
09:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AE:3F:DE:46:02:8F:36:51:64:1D:6B:B4:E8:8F:ED:64:E1:35:05
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c2:a7:9c:e7:b4:15:68:60:f6:56:a0:4b:13:c9:76:bb:bf:
99:ac:0e:27:27:98:0f:cf:00:c5:d9:1c:c6:0f:cc:48:2b:fc:
47:90:10:fa:97:df:eb:22:7b:12:4e:09:49:14:c6:26:dd:90:
a6:d4:0d:78:92:37:90:b3:d8:af:c3:0e:d8:6b:1d:2a:0c:3c:
2c:72:e7:1e:0b:ab:12:87:26:a5:af:18:ce:47:48:11:8f:ef:
57:c1:78:4b:11:ae:ea:4f:c4:d7:ca:1f:02:38:4b:28:15:b7:
ac:fc:19:ab:47:09:fb:7d:5d:2f:96:6b:c3:ea:c0:ce:2c:78:
f1:1c:01:cf:d9:f0:b2:b9:0f:7f:e2:58:a8:25:4e:ee:bd:c8:
8a:f3:49:8d:6e:71:7c:57:e3:d9:ff:1e:fa:32:20:b2:22:20:
75:12:60:28:07:81:69:a3:2a:3c:ba:25:56:f8:06:e2:3e:94:
9f:2e:30:ad:1d:02:46:62:a1:98:33:31:ea:36:62:99:b3:d8:
4b:b4:88:6b:1f:e5:63:03:5f:04:ef:14:f0:90:5e:0a:00:5f:
8f:76:38:2f:cf:38:fa:f0:63:0e:45:44:5b:f1:8b:a5:7f:06:
a3:5a:76:13:94:73:39:a4:f6:ac:8d:9c:c0:32:df:d6:af:9f:
94:0c:11:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 14:04:39 2026 by rpki-client