Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: IYK3L3dRahqoCYN58ing+OSW7UQLwryzmfFWrIUKzr4=
Subject key identifier: 46:D3:6C:FC:E3:AA:61:E9:94:0E:D9:77:03:0B:00:17:61:5A:24:A6
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 019F1943F8CE1C5A6FDFC8F4EB624C4F0F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 16:01:52 +0000
Manifest this update: Tue 30 Jun 2026 16:01:52 +0000
Manifest next update: Wed 01 Jul 2026 16:01:52 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: hQsrsmkrGDFr0DJV9Wb4IORXECf39gq5hFGC/08AYnM=)
2: NxS44xqtw9wnJjtyrxmTBDUCj5c.roa (hash: HUNSDs/gJPWUN3iy9W3sRGZH+ajPQ9ZIuVJ3VIFyz4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:f8:ce:1c:5a:6f:df:c8:f4:eb:62:4c:4f:0f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Jun 30 16:01:52 2026 GMT
Not After : Jul 1 16:01:52 2026 GMT
Subject: CN=46d36cfce3aa61e9940ed977030b0017615a24a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:da:95:cc:23:48:ec:c1:27:81:3e:ee:46:f6:
0e:cc:3e:46:b4:ae:c6:90:91:83:5d:c8:39:af:63:
a3:e8:21:3c:48:4c:17:fe:b2:f5:64:cb:5b:99:1b:
81:82:24:a8:5e:ee:f6:44:78:59:8a:90:98:19:b0:
ae:cd:05:e9:36:dc:aa:d0:9c:11:d5:a9:53:e9:f0:
26:68:ef:29:c4:d5:e5:8c:ff:11:51:12:c6:5e:8a:
d0:48:22:55:1d:d4:e7:b9:10:cb:6f:67:33:6b:c0:
eb:79:9e:77:c4:6b:0b:67:1e:f5:7c:c8:38:5e:9b:
6b:2a:36:be:0c:af:fb:f8:8a:99:5f:44:3b:66:1f:
26:e4:ac:ba:64:30:9e:1c:55:a1:66:83:85:7a:a2:
76:8d:1e:7d:70:53:ae:90:db:8f:57:4d:95:d8:dd:
ce:99:aa:e7:3d:47:69:b1:df:d4:40:66:74:68:fd:
62:94:a0:8f:3d:a9:c8:40:1f:a0:5b:b0:7e:f4:c7:
66:e4:a2:0b:74:6c:12:65:e4:8e:6e:f7:a6:70:f2:
46:00:1f:ff:f6:8a:17:e5:72:92:ac:f2:f9:e3:53:
a0:8f:9b:85:ce:e2:36:d0:60:f4:6c:5b:79:c5:12:
e1:84:56:a8:97:67:1e:34:2c:6c:86:29:aa:9f:48:
00:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D3:6C:FC:E3:AA:61:E9:94:0E:D9:77:03:0B:00:17:61:5A:24:A6
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d5:86:22:d7:bd:a6:db:e6:2a:c1:de:57:d8:23:d0:ec:91:
e0:1e:13:c6:fa:93:e7:5e:d9:22:76:41:8e:00:f7:0f:06:fb:
88:8a:58:5c:64:75:d3:f6:06:a9:c2:9e:b6:78:8f:85:63:a1:
0a:22:87:98:c6:6d:cc:88:bd:d8:d9:05:7d:09:94:7d:49:43:
52:28:76:f4:1a:85:82:46:f5:07:7c:07:58:32:76:b9:bf:5e:
3e:4e:b8:67:2b:c6:15:c9:50:a7:ad:05:ab:18:1b:74:ae:f6:
f8:7c:5b:78:5a:22:36:c2:00:91:dd:b0:c9:97:82:a3:49:db:
20:43:54:1d:92:7d:06:a3:80:10:ab:b0:a4:7f:ee:c5:29:80:
a1:67:38:14:f8:91:2b:a6:e9:da:ff:4a:c7:ae:e3:34:36:0d:
1e:35:44:40:52:6b:7d:92:25:f1:d9:0e:aa:46:76:ae:1a:2b:
bc:33:20:95:a6:93:e5:a6:26:83:82:ad:4e:da:11:c7:32:20:
96:36:f2:ec:cb:80:89:b8:64:b8:f5:e6:e4:2d:e4:35:d0:f4:
c7:a3:33:c1:4e:ed:e7:d4:c4:0b:4d:d8:da:f9:7e:83:36:79:
05:b5:7b:e8:0f:74:55:ca:c9:fd:50:7a:fe:64:56:a4:c3:34:
a4:17:28:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:41 2026 by rpki-client