Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: 7qCP+fQWxXcj4PQuMH2hj2fmw5tl+H6HIXP6EUQ3uIc=
Subject key identifier: 7A:E4:66:02:72:50:8B:E5:AE:35:68:80:1D:F2:C9:91:7B:A7:6E:64
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 019E2F96C98FE3464231A88D5D09AE2BB52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 15AD
Signing time: Sat 16 May 2026 07:01:11 +0000
Manifest this update: Sat 16 May 2026 07:01:11 +0000
Manifest next update: Sun 17 May 2026 07:01:11 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: s6ar0WyS7yfoHBntrRMetKWUpyJgOLEYSk3Zs2nnkoY=)
2: iYtloRWl9kFypd8JJUfmPgfj4cA.roa (hash: S73CmXUZ6HVY4mwA83JVTETkq549rHQpfRMzqNjQiJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:c9:8f:e3:46:42:31:a8:8d:5d:09:ae:2b:b5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: May 16 07:01:11 2026 GMT
Not After : May 17 07:01:11 2026 GMT
Subject: CN=7ae4660272508be5ae3568801df2c9917ba76e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:02:ab:00:2a:5b:b4:28:1c:3e:88:92:a0:45:
31:c8:af:da:24:2d:ea:cc:ed:f3:45:cd:cc:c8:e3:
94:7f:11:eb:17:22:14:bb:3a:02:9c:4c:83:38:2f:
c2:27:bb:03:f3:a9:67:df:57:62:54:93:a0:2b:09:
65:ae:cb:2f:49:76:df:69:85:2b:54:c7:4d:22:47:
ab:b5:31:18:79:be:28:00:0d:b2:2f:86:d6:ba:4a:
8a:84:fb:94:e7:3a:de:54:97:c1:a1:9e:56:b1:24:
7a:78:d1:12:ca:e4:73:81:fe:1e:c3:0c:5e:b0:a6:
4d:a8:40:3c:cf:52:4c:de:0b:76:94:99:12:29:4c:
72:dd:b6:a2:3a:ae:29:0d:2f:2c:7c:2e:dd:16:b8:
22:fd:88:7b:ca:66:b9:de:15:ef:52:a7:a4:91:f5:
67:82:b8:67:43:65:e7:9c:fa:d9:7f:b3:74:5b:1f:
81:d0:7f:47:a2:7f:ca:4c:97:9a:73:9a:d5:e1:96:
36:1b:4c:c6:24:f3:15:9c:e8:79:8e:00:6c:cc:2e:
51:b8:9e:38:7a:d8:b4:d5:ec:d3:9d:84:ea:b4:9f:
b3:65:35:b3:a5:31:7a:ec:75:34:18:54:47:dd:f2:
e9:82:f9:79:a7:42:3a:68:61:94:5a:c9:aa:27:ce:
12:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E4:66:02:72:50:8B:E5:AE:35:68:80:1D:F2:C9:91:7B:A7:6E:64
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:23:7d:d6:79:78:ec:05:f6:d3:6c:aa:dc:25:8c:15:45:f0:
08:31:0d:93:06:fe:dc:26:46:58:b2:a8:3a:5a:93:c8:eb:8f:
6a:56:41:28:bd:d5:36:3b:3b:a9:f4:ec:35:ec:a3:27:09:cf:
63:db:0e:db:45:07:22:e6:b0:0d:59:c9:d1:14:e5:8e:63:f4:
d7:0f:49:1f:3d:aa:c5:3e:a3:3d:1f:82:3d:1b:4e:8c:ae:81:
e1:ab:39:93:92:b4:fd:37:d3:1e:0a:0c:a5:e0:63:45:f9:1d:
a3:00:96:7c:70:b7:22:98:b3:34:4e:71:ea:4e:4d:ac:4e:18:
a3:76:91:d6:11:51:47:21:90:2d:92:61:33:ff:d9:86:00:ad:
55:10:13:c9:88:59:78:df:c4:44:a5:d8:44:19:42:3b:80:75:
d9:0e:6d:65:5a:75:94:96:00:24:62:27:36:0b:98:ed:35:05:
5b:24:7d:e9:c5:9d:0f:84:d1:10:33:a5:34:2a:1b:b5:84:7d:
8a:79:82:99:91:85:18:27:4a:9e:6f:7d:7f:f3:c6:f7:c2:61:
73:af:a7:cb:1b:ab:e0:a9:67:04:41:bf:80:9d:ab:95:41:c3:
27:2c:aa:dd:56:6b:bd:e6:c2:95:30:be:f2:04:84:3b:62:0d:
a1:9e:1e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:25 2026 by rpki-client