Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier: mNjOijNw1FU/mA5LBL5p+6R3u7uHBA+FFas4samFiuc=
Subject key identifier: 87:76:DE:05:28:F0:3E:B4:4C:34:60:EE:D4:E2:47:2E:1E:0B:78:09
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 01A14571A8D3764D66FDC08C3A820BF45597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number: 0E44
Signing time: Fri 16 Oct 2026 16:00:39 +0000
Manifest this update: Fri 16 Oct 2026 16:00:39 +0000
Manifest next update: Sat 17 Oct 2026 16:00:39 +0000
Files and hashes: 1: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: ALVYV7LbE5+KjQpzFXIhRP0nrYHoGQRnWBPBN2nVQbo=)
2: M5PnGpQYm028ws30MJtZnTaTcpo.roa (hash: /Y8TDD+fi7yLoYjDRGZ16k+8Sg/nu7LlsqZTmrtMrIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 15:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:71:a8:d3:76:4d:66:fd:c0:8c:3a:82:0b:f4:55:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: Oct 16 16:00:39 2026 GMT
Not After : Oct 17 16:00:39 2026 GMT
Subject: CN=8776de0528f03eb44c3460eed4e2472e1e0b7809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:23:af:aa:c0:49:3b:91:45:85:c7:a6:39:
d6:3a:5e:cf:7e:f3:9b:95:f0:52:68:51:f1:34:f0:
54:cb:15:fe:7b:6d:b4:82:84:dc:a8:48:4d:a7:31:
0d:c2:e5:ba:a7:32:83:71:a6:4a:f4:12:b4:20:cf:
b4:6d:0d:59:e9:c2:66:43:50:4b:aa:33:46:8e:8a:
8a:16:27:0c:9a:70:b0:fe:9a:f8:03:04:c2:9f:fe:
6c:d8:f6:7b:0c:31:08:7f:1d:0a:50:43:61:a2:5f:
d7:36:1e:f0:ce:e4:3b:b2:10:69:0f:1a:4e:2d:e3:
2e:05:e9:86:f4:15:ec:0d:ab:dd:b5:27:b1:a3:df:
20:df:db:42:7c:fe:0e:8a:d0:61:a9:0c:9a:6d:6c:
f2:7a:0d:a7:b6:b3:f0:b9:6c:7f:98:9a:5e:b4:7b:
57:7c:33:25:64:0a:f8:dc:b7:45:dc:e7:aa:ff:f1:
f0:6b:39:bb:37:29:98:aa:bc:e9:a7:88:42:bd:5c:
d1:16:be:e9:6f:43:36:14:62:a1:31:35:96:64:43:
69:00:c8:ce:84:83:6f:bb:d7:a1:75:b4:c4:32:28:
27:2d:f8:8e:dc:99:0f:6c:8b:64:93:72:f5:27:3a:
c4:b1:59:51:35:c6:98:d1:5e:97:b4:89:91:1c:97:
33:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:76:DE:05:28:F0:3E:B4:4C:34:60:EE:D4:E2:47:2E:1E:0B:78:09
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:57:0e:c7:e5:90:a4:64:a7:b2:f2:6e:16:b6:c2:ed:77:10:
a9:48:9a:8c:9b:26:39:0f:e3:11:af:ce:24:e4:6c:6a:86:db:
40:c3:59:29:f3:65:73:6a:be:1a:ac:bf:a0:38:e0:d6:75:c8:
fc:93:aa:a4:d2:22:69:52:66:d1:5a:c6:28:d7:2b:a5:12:34:
c8:ba:53:ea:0f:38:e9:8a:5f:cd:11:54:e8:92:f8:27:69:22:
f8:0a:6b:08:e6:2d:ca:c0:89:38:a0:de:2f:3c:0f:59:97:53:
06:57:b5:67:ed:d7:85:92:b8:42:bd:13:fe:bf:f4:0f:2a:80:
d7:df:d6:6b:f8:5f:f3:91:5e:c8:d0:00:14:51:7a:b6:ea:0b:
4f:4e:9e:44:26:76:24:df:fb:92:6b:30:5d:1e:62:c6:3e:4d:
94:1a:4e:7a:68:2c:e9:dd:b9:32:d7:bf:b5:cb:70:3b:27:2c:
12:2d:69:c8:c3:19:4d:d6:c1:af:fe:66:75:ad:6f:93:19:25:
aa:f2:08:c3:b6:7e:e7:88:48:3b:c1:ac:89:93:52:3e:4c:37:
a4:9e:79:43:17:bb:b8:2e:12:67:55:92:34:38:2e:45:3c:c2:
91:51:50:6b:8a:2c:9f:3f:b1:43:ff:05:a2:f4:aa:7e:9d:d4:
a7:5a:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 23:40:21 2026 by rpki-client