Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json)
Hash identifier: qLx4BZPvcBQQbNKHwAKLnVWIxJNLoS4VqmbyticmTV0=
Subject key identifier: D2:BB:AA:A4:C2:A1:9C:6E:21:55:34:29:2D:59:49:60:E4:D1:FE:52
Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Certificate serial: 019E2F9744C21FD5AF32B081040B3B0A5B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
Manifest number: 0CAB
Signing time: Sat 16 May 2026 07:01:43 +0000
Manifest this update: Sat 16 May 2026 07:01:43 +0000
Manifest next update: Sun 17 May 2026 07:01:43 +0000
Files and hashes: 1: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: gkjcxPIIXvogfohGipjWhrbemLt8mPlIsF0kc7BshmA=)
2: M5PnGpQYm028ws30MJtZnTaTcpo.roa (hash: /Y8TDD+fi7yLoYjDRGZ16k+8Sg/nu7LlsqZTmrtMrIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:44:c2:1f:d5:af:32:b0:81:04:0b:3b:0a:5b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085
Validity
Not Before: May 16 07:01:43 2026 GMT
Not After : May 17 07:01:43 2026 GMT
Subject: CN=d2bbaaa4c2a19c6e215534292d594960e4d1fe52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:1d:5d:a6:16:b8:9a:ba:79:28:cc:f9:e1:
51:bb:ef:e0:75:3b:e8:75:0d:70:79:df:ea:75:bd:
f6:5d:2e:60:e6:50:9f:c2:c9:2a:4e:a8:d0:f1:54:
48:3b:15:28:72:43:0d:4b:87:11:d9:ea:63:0f:59:
6b:8d:de:46:d4:3e:df:3f:91:54:1f:53:c3:0f:fd:
12:58:97:8f:06:f8:5b:c8:8f:02:96:b5:76:89:05:
55:58:53:18:ff:8b:c1:59:65:9d:fc:1f:8e:bf:2a:
6b:6c:ac:54:f7:d6:88:d6:a1:d4:8d:c6:f8:1e:69:
78:a5:2f:c9:b3:04:9c:23:d0:44:b4:8e:f8:4b:13:
46:ac:60:39:66:08:24:91:9f:f0:ad:08:de:0a:b7:
d6:02:81:89:1e:1b:2d:04:28:85:db:5e:ec:6f:b7:
1d:b0:a0:37:7b:bc:60:fc:05:ca:fc:16:ba:c3:4e:
cc:22:33:60:44:d9:fc:9b:78:3d:4c:14:76:93:8d:
43:53:7c:f6:31:e2:f3:d5:eb:c5:53:1d:07:4c:cf:
c5:1e:2c:6b:34:c1:49:79:42:87:86:d7:c9:a5:32:
2f:17:77:37:eb:92:fd:2c:b8:d0:62:ce:4d:ac:a6:
0c:71:7c:d1:cc:03:ab:26:b4:b6:bb:00:8b:96:87:
bc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BB:AA:A4:C2:A1:9C:6E:21:55:34:29:2D:59:49:60:E4:D1:FE:52
X509v3 Authority Key Identifier:
keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:bb:9d:f1:73:14:0b:74:0b:9f:b0:14:3f:8f:63:f9:ee:d9:
c2:37:6e:c1:4a:48:4c:6c:70:d1:03:8e:11:6d:b8:35:ce:17:
4f:57:db:ad:ce:06:3b:d3:b2:39:b6:27:ed:68:69:11:40:8a:
c3:1d:58:72:ba:45:6c:02:6d:a0:51:72:ae:d4:ad:5e:76:67:
18:d3:99:21:87:9f:66:c0:9b:c1:da:de:81:bc:a9:14:5f:55:
1e:60:b7:2d:03:a5:56:b6:92:a7:08:ed:7f:41:8d:87:3e:63:
9e:c2:c5:ad:54:28:35:31:22:d0:d4:d9:b1:b5:ee:79:5f:48:
3a:7b:27:3c:a8:14:1c:0f:0b:4e:72:e5:21:a9:1b:ed:eb:1c:
17:37:d7:fd:53:3b:8d:56:2d:c5:2e:a5:8d:2f:29:2a:dc:e1:
d3:cd:1e:26:d5:e1:10:ba:be:6b:12:30:cf:5a:e3:ef:2c:16:
95:95:03:89:41:32:f3:b0:66:a0:ae:61:71:04:0c:ec:f9:c4:
fc:2e:50:39:0e:92:19:39:3f:8a:fb:52:02:68:ea:12:a0:8a:
8b:9e:37:e4:80:fe:18:2c:b8:65:1a:ed:cd:9f:3e:d1:4c:17:
ae:cd:02:47:c8:65:0f:94:18:02:73:ac:be:0d:ca:b9:24:7c:
79:e4:94:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vl0TCH9WvMrCBBAs7CltyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOTgwZDhjYTQ2NGFlNDQzMzBjMDJkNjA5N2QxYjNlMzQ2
N2UwODUwHhcNMjYwNTE2MDcwMTQzWhcNMjYwNTE3MDcwMTQzWjAzMTEwLwYDVQQD
EyhkMmJiYWFhNGMyYTE5YzZlMjE1NTM0MjkyZDU5NDk2MGU0ZDFmZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJMdXaYWuJq6eSjM+eFRu+/gdTvo
dQ1wed/qdb32XS5g5lCfwskqTqjQ8VRIOxUockMNS4cR2epjD1lrjd5G1D7fP5FU
H1PDD/0SWJePBvhbyI8ClrV2iQVVWFMY/4vBWWWd/B+OvyprbKxU99aI1qHUjcb4
Hml4pS/JswScI9BEtI74SxNGrGA5ZggkkZ/wrQjeCrfWAoGJHhstBCiF217sb7cd
sKA3e7xg/AXK/Ba6w07MIjNgRNn8m3g9TBR2k41DU3z2MeLz1evFUx0HTM/FHixr
NMFJeUKHhtfJpTIvF3c365L9LLjQYs5NrKYMcXzRzAOrJrS2uwCLloe8LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNK7qqTCoZxuIVU0KS1ZSWDk0f5SMB8GA1UdIwQY
MBaAFA2YDYykZK5EMwwC1gl9Gz40Z+CFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUt
ZjZmZjI4MWZiYzMyLzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUtZjZmZjI4MWZiYzMy
LzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7ud8XMU
C3QLn7AUP49j+e7ZwjduwUpITGxw0QOOEW24Nc4XT1fbrc4GO9OyObYn7WhpEUCK
wx1YcrpFbAJtoFFyrtStXnZnGNOZIYefZsCbwdregbypFF9VHmC3LQOlVraSpwjt
f0GNhz5jnsLFrVQoNTEi0NTZsbXueV9IOnsnPKgUHA8LTnLlIakb7escFzfX/VM7
jVYtxS6ljS8pKtzh080eJtXhELq+axIwz1rj7ywWlZUDiUEy87BmoK5hcQQM7PnE
/C5QOQ6SGTk/ivtSAmjqEqCKi5435ID+GCy4ZRrtzZ8+0UwXrs0CR8hlD5QYAnOs
vg3KuSR8eeSUUA==
-----END CERTIFICATE-----
Generated at Sat May 16 16:27:15 2026 by rpki-client