Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File: DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier: 0glqoFRUwx12VxBmhQ2dKkVM6hfsOyxAVXjfEbtyoGo=
Subject key identifier: 09:EA:66:7B:15:4C:C8:D4:7E:2F:88:60:DF:BD:EF:A0:03:60:F1:18
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial: 01A167226D9CE4D544961B5FEB2B792938D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number: 13C6
Signing time: Fri 23 Oct 2026 05:01:11 +0000
Manifest this update: Fri 23 Oct 2026 05:01:11 +0000
Manifest next update: Sat 24 Oct 2026 05:01:11 +0000
Files and hashes: 1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: NYLMN3HMhjhk006jFM60s5B/T810z3S/JfsCPOmoKeM=)
2: SxljHk2cGiaCqx7oBYorH1FyNLM.roa (hash: X0K5Gb0sXyJIajhaLNptLUdlUrzJv1KHea1ZlF2NI+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:22:6d:9c:e4:d5:44:96:1b:5f:eb:2b:79:29:38:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Validity
Not Before: Oct 23 05:01:11 2026 GMT
Not After : Oct 24 05:01:11 2026 GMT
Subject: CN=09ea667b154cc8d47e2f8860dfbdefa00360f118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:ec:31:0f:3a:77:94:6b:65:a0:6c:cd:3f:
72:8c:34:e9:2b:d7:ba:81:df:fb:5c:cd:7f:d2:dc:
4b:b4:9b:b5:85:d8:b4:a3:26:53:74:d4:b0:f1:24:
2f:e4:52:fb:4e:92:33:e5:da:d4:10:c1:c0:44:00:
6c:16:3c:42:c4:e5:30:5a:6d:49:41:e6:20:dc:79:
02:8d:6e:be:4d:93:f4:8e:b6:69:91:23:52:cf:a2:
a4:28:88:61:00:d9:b6:d3:b4:13:0d:9f:bd:6e:3c:
72:a7:f2:e8:fc:69:ba:bc:f8:d1:93:3a:35:fa:ac:
a7:3f:c7:b8:20:9a:98:56:26:45:bd:fc:57:20:e4:
40:5c:5a:c2:9b:6b:15:80:47:a8:00:00:13:a6:0b:
0c:a3:88:33:3b:55:78:48:9e:72:d0:d2:c9:09:69:
2c:9f:96:f4:2a:bd:37:6e:5b:3b:cf:5b:6f:bf:e4:
46:f3:76:a2:9a:66:14:1e:03:a7:f1:ba:db:8f:99:
32:64:2f:af:d5:34:aa:48:21:98:94:ca:45:5c:c4:
9b:3e:67:93:6a:6a:29:61:6c:9e:e4:37:68:9f:4e:
04:2b:14:40:ed:97:fc:e3:ca:71:85:3f:a6:7d:11:
1d:85:ea:d9:e5:8e:99:f2:35:46:98:ce:73:c4:0d:
96:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EA:66:7B:15:4C:C8:D4:7E:2F:88:60:DF:BD:EF:A0:03:60:F1:18
X509v3 Authority Key Identifier:
keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ee:76:68:c2:ec:11:00:e3:f7:d7:3f:08:dd:8f:72:de:3b:
0e:05:4a:1d:63:64:51:3f:1b:23:63:b2:28:a1:ee:56:91:0d:
5b:71:a4:0a:8c:5d:d8:ba:6f:4d:eb:0c:0d:42:39:8a:c4:8c:
2e:b7:8f:2f:9d:05:9d:72:b4:b9:5e:4e:2d:b4:b5:27:77:26:
5f:e7:f0:ad:91:9f:97:c3:d1:9a:4f:3b:d0:b8:7b:0a:b3:9e:
14:9b:ce:5e:d5:5e:ca:a4:17:4c:69:b7:13:0c:c9:e7:f8:37:
de:5a:7d:a8:f6:60:44:d0:3a:32:f1:68:57:ba:b8:ed:2b:2e:
60:4b:ca:f7:9a:e3:60:c4:fd:a9:64:ed:1a:09:18:4b:ec:c2:
1e:84:fb:31:77:b8:76:7e:fa:a5:b1:d9:67:63:6b:f6:cd:48:
af:f1:76:73:c2:6c:e1:ac:e4:5a:8e:4c:d2:46:2e:eb:55:51:
13:10:5c:93:7a:63:cc:ff:d4:70:2d:27:f5:0f:34:59:7c:37:
6e:f5:20:a3:73:1f:1c:02:1f:8a:78:94:56:39:1b:54:c2:19:
c2:bf:04:2e:3d:a9:b9:3b:77:9b:d9:1f:80:7c:9c:4c:66:3b:
73:4c:92:6d:fa:be:18:a1:9c:25:ac:a4:de:d3:5f:cd:4b:c1:
f9:d5:45:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:43:32 2026 by rpki-client