Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier: r0hy0N5HXaN2J1EGQA7zrYm2or4T81Z6cTPJi+S5Iks=
Subject key identifier: AF:C4:26:F3:1A:9C:0E:C9:AD:14:ED:01:36:F8:B5:D9:7C:7E:9F:CF
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial: 019E303B28BC26A6E1910576F3CAD5CC6C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number: 190D
Signing time: Sat 16 May 2026 10:00:43 +0000
Manifest this update: Sat 16 May 2026 10:00:43 +0000
Manifest next update: Sun 17 May 2026 10:00:43 +0000
Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: cc4/YZzRxhP1Rl57w107ycAhrrZwbZxDLc/1yiLLMzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:28:bc:26:a6:e1:91:05:76:f3:ca:d5:cc:6c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Validity
Not Before: May 16 10:00:43 2026 GMT
Not After : May 17 10:00:43 2026 GMT
Subject: CN=afc426f31a9c0ec9ad14ed0136f8b5d97c7e9fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ed:b1:7e:f6:e7:f2:5b:26:8e:4a:70:4c:24:
1b:c6:87:a0:27:63:41:79:f0:be:15:c3:99:85:3b:
78:b5:b1:d8:50:15:bb:c5:5f:96:ee:b5:31:0d:52:
e6:aa:3e:68:39:4a:dc:da:df:8a:db:d2:9a:10:89:
9c:b4:2e:ab:69:5d:c3:96:b3:4b:07:97:46:c9:10:
cd:a9:8f:4b:53:ff:d3:66:0c:92:1d:85:81:80:f4:
94:29:63:d8:1b:ff:2f:ee:4f:e6:d3:b5:a2:27:cc:
c2:b2:36:67:17:8f:76:02:44:92:9e:ad:22:7c:38:
06:e8:85:fd:f9:6e:c7:93:b9:4f:ca:c1:91:9e:ff:
1a:e1:b1:e3:0a:5d:ff:4a:95:af:01:64:b3:11:2b:
3d:00:1a:e3:1d:1a:44:bf:54:ac:3a:dc:20:82:8d:
4a:75:87:60:3b:94:ee:66:45:84:cc:52:91:45:a0:
1b:5e:01:4b:6a:d5:55:86:96:4a:89:0b:4c:e4:ae:
04:46:4c:e4:b8:1b:ed:ac:e1:72:77:1b:72:14:14:
d9:27:e1:03:07:02:e9:5b:95:ae:9d:e6:6c:a9:ec:
d4:b1:2b:d5:7a:05:00:78:65:e3:53:c4:4b:70:a0:
bd:e4:57:e0:8d:b6:b4:39:cf:6f:c4:a3:d7:cc:9a:
c1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C4:26:F3:1A:9C:0E:C9:AD:14:ED:01:36:F8:B5:D9:7C:7E:9F:CF
X509v3 Authority Key Identifier:
keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e3:ca:47:b2:83:02:9a:2f:25:77:22:2c:b3:a7:d1:87:da:
7b:22:9f:8a:e3:5d:f7:8a:11:da:84:43:34:3f:b8:a5:fb:8b:
8e:65:cb:ca:31:0a:05:a0:d6:29:4a:c3:1c:c9:d0:35:7a:82:
68:ab:74:46:e9:4b:ac:9b:37:57:6c:37:5a:60:47:60:9f:d1:
7e:26:80:d6:97:4b:c6:19:d4:be:09:4d:be:da:21:82:4a:98:
b3:77:e4:3e:c4:de:d1:5b:8e:f9:e2:f7:c6:09:83:30:26:ee:
da:75:8f:a8:38:1f:86:a4:2e:36:cc:90:76:ee:6b:6c:bb:80:
da:3d:f2:17:99:b3:cb:fe:23:2f:b1:0b:62:e5:9e:84:13:04:
68:79:8f:7f:73:32:22:9e:9a:e6:ef:a3:d3:b1:91:14:47:c6:
f5:be:d6:de:33:2a:4d:4f:00:16:11:d9:1c:f6:f4:8e:06:15:
cd:4d:02:1e:fd:0c:11:dc:c5:d6:6b:92:bc:63:60:98:ae:91:
bf:75:c5:4f:6d:f8:e3:6d:3c:4b:9b:ca:fb:1c:44:cc:a9:3d:
c5:11:95:a6:d9:4a:d6:f4:21:9e:cd:24:b0:99:61:56:9c:a4:
45:9f:1b:02:22:b1:72:26:e3:fa:25:41:9b:d9:ce:83:0c:3b:
32:07:e7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:56 2026 by rpki-client