Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
File: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json)
Hash identifier: Nd+jkttEGZcICGOrkAhcV8aIWZl0B/8V7Ch1irjCGdE=
Subject key identifier: C4:9B:AA:A6:94:21:29:75:8E:E2:D5:D4:A3:0B:86:74:5F:56:4A:85
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Certificate issuer: /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial: 019E3117732B8E9FB4091EDA03688BAD896B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
Manifest number: 0D4F
Signing time: Sat 16 May 2026 14:01:20 +0000
Manifest this update: Sat 16 May 2026 14:01:20 +0000
Manifest next update: Sun 17 May 2026 14:01:20 +0000
Files and hashes: 1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: JwVB5wZyx24qZGZydfVfPLP4ZGnc0m/6bZY2SsYjUes=)
2: DxAIf_G4bsCHSuF3mUqxe5pwn4w.roa (hash: QSb3YvRlfaog1Dj3+gzS3BBfYETY8z0tkMgWbxsJbyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:73:2b:8e:9f:b4:09:1e:da:03:68:8b:ad:89:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Validity
Not Before: May 16 14:01:20 2026 GMT
Not After : May 17 14:01:20 2026 GMT
Subject: CN=c49baaa6942129758ee2d5d4a30b86745f564a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:72:62:f2:a3:04:80:3c:29:20:61:c0:11:
43:ad:13:6a:b5:8d:7a:72:02:97:2a:db:d1:c4:ab:
a0:4b:0c:12:d9:49:85:8d:a3:50:01:83:45:70:d5:
77:f1:bc:3e:82:d4:ed:e8:84:0c:49:17:51:d9:90:
12:df:e9:2e:37:a5:5e:b3:78:2c:8d:bf:f9:02:9a:
a7:9f:ea:0e:9e:a7:b1:e9:c3:2a:44:04:37:62:52:
f1:32:3f:fc:04:7a:1b:0b:67:3c:c7:b2:ec:b0:69:
b5:5b:c9:b8:2d:29:b0:1e:10:dd:32:84:17:7b:42:
80:34:86:f1:f0:91:9a:eb:e6:36:7e:b5:6c:4a:42:
fe:3f:07:ab:d7:1a:40:ee:b5:88:8b:d6:51:b7:f3:
3a:3b:39:ac:3a:26:03:10:e7:19:b7:1a:55:8a:09:
2b:56:f6:43:bc:83:4f:3c:33:e2:15:72:35:6a:82:
b3:c0:1a:46:de:6e:1e:31:b1:8f:f7:ac:a2:d3:16:
f1:b0:76:b3:53:2e:70:29:80:e2:fd:29:3e:93:67:
52:65:3b:11:26:6d:82:43:36:48:e8:fe:f0:ff:f1:
a6:ee:a0:6c:67:28:32:97:2a:20:d1:1b:46:6c:db:
4b:c8:3a:18:e7:e3:ed:d6:68:77:e2:e3:28:89:5b:
3c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9B:AA:A6:94:21:29:75:8E:E2:D5:D4:A3:0B:86:74:5F:56:4A:85
X509v3 Authority Key Identifier:
keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:89:c5:74:f6:7c:85:9f:a0:d1:6d:c9:be:d5:e1:51:27:60:
da:4d:00:54:24:21:d3:83:08:e3:9c:69:05:2b:fd:b7:e7:e0:
ae:0d:e0:e2:22:7f:d3:fc:1a:29:c7:06:97:c5:a1:8b:e4:59:
58:7c:cf:99:f9:0e:a9:55:1c:68:83:4d:19:5a:9b:fd:49:70:
e3:45:0e:b3:89:19:ec:96:69:82:6b:17:7e:14:ad:72:3b:60:
b2:53:c9:19:10:76:d4:91:33:b0:76:76:79:62:ec:54:c7:41:
6b:83:bd:6f:c6:f2:16:7c:57:59:d7:83:05:76:4b:6a:16:d5:
ff:b0:e9:5d:2c:16:fb:d2:e4:8c:07:9c:11:09:55:b4:0b:cc:
4f:07:62:80:0c:ef:5e:6b:61:60:92:9e:8c:bf:5e:a5:85:e4:
09:45:40:23:ea:d8:c7:48:4a:20:de:9f:53:6b:8f:fd:d3:6d:
b9:05:c7:6f:49:0c:b5:0b:49:56:4e:44:72:cb:48:ed:9d:2e:
39:58:54:7e:31:62:f8:59:55:07:5b:ff:0c:3d:09:34:0c:fd:
dd:e7:ce:c9:25:b8:1e:38:c4:e7:f5:72:22:28:0d:dd:b7:a9:
f1:58:f8:ef:7e:71:92:70:51:d4:c6:a2:4e:cc:5d:87:f5:78:
99:c9:b8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:41 2026 by rpki-client