Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
File: DcnBtxcVahijTZMjtnoKA-2oWsk.mft (raw, json)
Hash identifier: 9dPsj+nrs5aHahv5H8WDtN5+JFBES3mhGDsJW4xWGr8=
Subject key identifier: 73:BF:F1:CC:FF:5D:A1:67:2B:BC:03:70:33:E1:49:2C:37:9A:23:75
Authority key identifier: 0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
Certificate issuer: /CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Certificate serial: 019EB921B2211ECEB909C5A22052D913ADD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
Manifest number: 1954
Signing time: Fri 12 Jun 2026 00:00:53 +0000
Manifest this update: Fri 12 Jun 2026 00:00:53 +0000
Manifest next update: Sat 13 Jun 2026 00:00:53 +0000
Files and hashes: 1: DcnBtxcVahijTZMjtnoKA-2oWsk.crl (hash: 92IH5k9otUZGDq1uqQLJuOrlNO9T+Hivk+D+Ytwv/Po=)
2: oCylTxdWStUJKd43isiQRqgUx2I.roa (hash: BA+lkIFGOjmKiy8Zq7wyWqkb5r7mqiejaQ24ZYtS4FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:b2:21:1e:ce:b9:09:c5:a2:20:52:d9:13:ad:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Validity
Not Before: Jun 12 00:00:53 2026 GMT
Not After : Jun 13 00:00:53 2026 GMT
Subject: CN=73bff1ccff5da1672bbc037033e1492c379a2375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:11:4a:21:f2:a9:35:c8:4b:d9:6d:91:4b:
2c:0d:ea:03:b2:6b:f8:e7:cf:b1:c4:36:1a:2d:da:
b9:30:99:bd:ad:78:50:90:a3:98:39:7d:23:2d:8a:
a2:77:7f:c1:ed:e2:7d:5a:f6:fb:37:50:80:56:d0:
40:30:6c:42:be:56:fd:ae:a1:a6:d9:a6:4a:45:27:
55:3c:4d:20:b6:90:64:69:81:9e:93:ba:92:f7:a4:
5d:b0:76:e9:c0:51:b9:78:85:1b:fe:72:69:ea:c1:
c6:10:6d:a4:40:bb:ed:cc:a2:0a:57:79:9f:52:63:
e9:d5:0c:82:81:5c:b2:0a:90:8f:07:a6:da:97:de:
b8:39:35:a8:96:78:bf:dd:92:72:2d:85:6b:80:31:
d0:46:f0:2a:4f:58:5e:bb:8e:13:97:53:1c:3d:24:
53:05:34:2d:3e:d1:7c:11:61:97:a0:86:f5:1e:63:
af:ea:e3:29:06:b8:43:1f:58:92:b6:e2:45:20:19:
ee:7f:93:d7:5c:1b:4e:72:7a:bc:94:43:69:5c:c0:
10:b4:56:b9:d9:80:6c:e9:5a:32:d4:61:06:e6:f5:
51:cc:9a:3a:65:0f:5d:73:b5:da:35:06:df:a6:4a:
4c:37:0f:9b:ee:4b:60:1a:99:76:17:5a:74:f8:27:
0b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BF:F1:CC:FF:5D:A1:67:2B:BC:03:70:33:E1:49:2C:37:9A:23:75
X509v3 Authority Key Identifier:
keyid:0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fe:06:08:36:ac:40:02:e2:4a:f3:39:a4:82:98:1f:2b:82:
b3:57:2d:51:c0:45:7f:30:96:e8:d4:97:14:77:68:a8:a4:25:
05:44:8b:1f:5d:bc:7a:2a:4b:c4:ab:0d:57:e2:8d:70:d4:2d:
b4:04:04:09:50:8e:b7:a4:ff:8a:06:52:5d:2c:bc:7e:ad:55:
98:8a:66:1d:bd:4a:0c:85:8c:42:08:f2:6f:90:43:33:5a:90:
e9:49:7b:c5:02:fb:53:6e:f2:f2:a8:a5:c9:83:70:91:36:a0:
e7:33:cf:ed:3e:f1:cb:21:f7:06:6a:59:04:fd:a2:77:f5:e9:
20:6a:7e:28:e9:4d:91:e2:92:49:e1:01:31:e9:97:c6:8e:6a:
27:8d:7a:3e:d2:40:20:8f:13:b0:d5:67:0c:77:d1:79:ad:22:
72:8e:ba:24:36:e5:b4:7c:ca:81:7d:5e:31:34:f8:98:71:2c:
0d:07:37:6a:cd:e0:6f:78:08:7d:45:6d:ca:42:45:45:04:2c:
d2:48:01:31:66:ef:66:a5:42:7f:60:5c:2a:4c:f2:37:33:51:
1b:b7:26:8c:b7:3e:df:af:f9:02:c8:ed:79:6f:8b:85:37:8c:
c0:a1:d9:f3:73:e7:a6:be:0d:5a:7b:7a:28:3a:49:9e:a1:7a:
9f:ab:58:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:30:39 2026 by rpki-client