Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: zMpSPfKy57BwaqWesqXZ7Ry6LWVyfy/kUmWgck1NcNw=
Subject key identifier: D9:3B:8E:99:F4:91:D5:EC:25:0D:47:65:0B:EB:F8:A7:4A:A4:F1:37
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 019E30E011199058BC5D2771EF5D635CC9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 05F3
Signing time: Sat 16 May 2026 13:00:51 +0000
Manifest this update: Sat 16 May 2026 13:00:51 +0000
Manifest next update: Sun 17 May 2026 13:00:51 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: Qs0MPbeuU+dG81E8CfQa9fdMGqUsHErx5wuHbTkjpjk=)
2: d-dWQuydMoCZtytzQ81CyqKGHF8.roa (hash: rHhhXAeBGXlacTL0skc5ZpbciDYSLDNez3YfIDsP5dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:11:19:90:58:bc:5d:27:71:ef:5d:63:5c:c9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: May 16 13:00:51 2026 GMT
Not After : May 17 13:00:51 2026 GMT
Subject: CN=d93b8e99f491d5ec250d47650bebf8a74aa4f137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:ce:1b:0f:59:6d:3d:c8:49:67:ae:89:bf:
9b:a8:b2:b7:ce:1d:d7:71:f5:33:b4:f6:39:28:81:
38:2e:4d:bc:bf:70:88:8a:44:6d:69:39:18:81:b4:
9f:a1:b4:a7:38:1f:b5:b5:96:5b:fa:45:3f:c3:b5:
1d:94:d4:71:1f:81:f2:30:63:c8:28:b2:42:91:14:
f1:76:b1:5b:64:71:08:d9:41:9d:cc:ee:dc:5f:47:
d6:c4:f5:77:5a:1d:d3:1c:c0:4d:06:8c:58:43:01:
5c:f2:d3:43:12:4a:9b:1d:c1:c4:ea:24:c3:5e:c3:
d6:3d:0e:ac:5c:f6:19:ea:9b:a4:aa:06:26:cb:97:
6a:21:b4:e8:bd:da:2e:fe:30:d0:6f:eb:16:6b:53:
5f:64:c3:14:5f:4d:21:ce:ef:41:9c:c7:ad:66:a4:
a0:73:89:1b:0d:6d:69:8f:6c:66:e1:db:bd:0c:5e:
12:51:b4:78:89:fe:af:f5:30:9d:16:3e:f2:81:b8:
7a:53:0d:da:cc:fa:ff:23:11:00:db:a4:cc:09:2a:
2e:ae:5d:34:0f:ec:84:e6:cf:7c:6d:93:5c:af:14:
1d:37:8b:fd:90:57:23:1b:16:11:4c:36:6d:0d:84:
d8:b0:4d:58:29:ab:24:de:1e:98:ef:a9:8b:bd:46:
a9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3B:8E:99:F4:91:D5:EC:25:0D:47:65:0B:EB:F8:A7:4A:A4:F1:37
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3b:0f:da:ce:dc:d4:dc:1f:21:b1:d2:92:74:6f:31:32:8c:
57:de:76:2a:59:78:fa:86:bd:24:a2:b3:8d:04:01:59:41:c6:
34:2a:63:e0:08:fe:02:de:49:a8:c1:98:6c:c9:27:7b:28:72:
7e:52:0c:1e:5a:af:c2:1c:92:9e:62:8d:03:48:aa:80:3e:15:
b0:c7:64:19:e2:ae:09:9d:64:25:59:9c:65:a8:72:ee:0e:86:
55:87:58:3d:0b:aa:24:61:e3:ff:5d:48:e0:97:34:dd:f7:c7:
9c:b4:78:d4:9a:57:76:52:e4:60:27:73:14:7d:d2:e8:84:75:
31:62:4f:c5:e8:a9:e9:f3:1b:01:47:0b:f9:e4:49:9c:f0:55:
5d:22:87:e5:58:78:e9:c8:00:f3:6f:43:d6:46:07:07:f8:f2:
7c:92:d1:00:18:e9:5b:e1:b9:a7:58:aa:7b:2f:63:51:68:30:
d0:3c:a9:b3:53:cf:93:b1:52:b5:ce:1c:5f:7f:9d:b6:ea:31:
45:9b:e4:d6:2b:fd:09:5a:4b:2d:f0:f9:1a:47:c4:e7:4c:04:
bd:09:b1:ef:74:f3:c1:2a:f9:74:45:9e:a0:70:2d:30:d3:da:
ae:62:8a:0b:2a:c0:8a:d3:bf:cf:d3:2f:73:b4:8e:cc:22:e3:
42:df:b5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:42 2026 by rpki-client