Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier: WNfZy9A0uC0hysNqZCbyJTl0/obmJvbfkuzePqFUx2s=
Subject key identifier: C1:3A:DA:56:73:3F:A4:56:9E:AF:67:E0:59:50:0F:86:4B:16:E2:A6
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial: 019E30A90C04BC82D74A1891F2814F04C668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number: 13A7
Signing time: Sat 16 May 2026 12:00:45 +0000
Manifest this update: Sat 16 May 2026 12:00:45 +0000
Manifest next update: Sun 17 May 2026 12:00:45 +0000
Files and hashes: 1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: KIOq7OnCtidTKqabgqpxA8MIwF4R2iLBXybBnS2GjOM=)
2: KRcQChyIkdk17z-o88DTXwkNu_Y.roa (hash: k4ZBkPTraQNZ31kK5NnaOy56WVAVKO/c8Q/xt3FDIoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:0c:04:bc:82:d7:4a:18:91:f2:81:4f:04:c6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Validity
Not Before: May 16 12:00:45 2026 GMT
Not After : May 17 12:00:45 2026 GMT
Subject: CN=c13ada56733fa4569eaf67e059500f864b16e2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:95:b5:1d:6a:9d:48:c5:3b:6c:31:98:5b:
5a:9b:17:c0:56:a2:cf:70:ba:47:f7:e1:0e:f5:cc:
8b:f1:44:bd:1c:fb:37:a9:35:24:6f:c3:24:2c:14:
a2:c7:0d:9f:24:e6:58:a8:6a:7e:65:e9:2e:4f:0f:
2b:f7:c5:c0:fd:6f:6e:35:03:88:03:6d:80:09:74:
ee:9f:2a:a9:1a:eb:62:77:85:a2:ff:f2:98:eb:1c:
90:b8:ba:86:e2:e7:f5:b3:d3:4e:16:3a:63:8e:70:
b5:cc:b6:b7:ef:34:de:e4:b5:e8:bf:e4:84:cd:35:
2b:92:b1:3a:40:ad:9c:93:97:d9:4e:64:50:f6:cd:
31:04:b3:b8:07:cb:81:e9:54:55:28:04:7b:db:2d:
66:4b:c9:17:63:c7:f1:4b:38:5a:8d:d0:c1:13:cb:
14:5f:dc:0a:c2:81:54:db:ce:db:45:91:fe:06:13:
79:6d:cf:45:dc:3e:29:b9:64:57:42:25:34:6d:da:
fb:cb:78:4c:e6:6e:ad:9c:c8:ec:cc:67:f7:d1:d4:
5c:e0:1d:a0:63:15:5f:6c:bf:69:99:59:ae:ca:42:
eb:bc:0c:be:3b:30:eb:71:f1:16:ca:b4:44:6a:71:
ef:8d:9f:4b:90:f6:79:62:02:85:43:25:27:65:9a:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3A:DA:56:73:3F:A4:56:9E:AF:67:E0:59:50:0F:86:4B:16:E2:A6
X509v3 Authority Key Identifier:
keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3c:29:50:dd:3b:01:fb:1f:25:4f:11:8e:c0:c7:26:4c:f1:
fc:05:49:ca:bc:26:bd:4f:39:e5:74:96:21:e7:40:81:68:0b:
a5:dd:50:cd:da:eb:29:ba:4a:ce:13:3e:c4:c7:66:86:f0:15:
c5:28:ac:fe:be:3a:99:06:28:52:2d:10:73:a9:1b:57:3c:64:
5b:76:0c:08:54:9a:6a:b3:52:a9:6c:46:a4:4c:b7:3b:3b:47:
de:4c:d4:ed:e0:87:70:31:1a:8c:ac:d1:c0:8e:e1:5b:c6:80:
05:0b:61:f3:2f:b1:77:0a:ad:d4:d4:9c:07:da:e5:ec:41:8b:
d2:a0:ee:3a:f0:92:ef:87:d8:1d:80:aa:f7:73:ab:d6:46:9c:
12:b8:c6:b4:a6:4b:87:ae:d6:68:27:5f:49:9f:50:d5:73:09:
13:29:36:ba:ea:33:00:f8:70:97:ac:69:6e:bd:1e:68:b9:6a:
b1:ce:da:b3:16:61:e7:9b:f8:2b:5b:7f:01:1c:7d:8b:7f:a9:
a1:6a:8f:2d:22:61:35:01:69:7d:69:4b:bb:c0:0b:13:26:8a:
6f:76:73:5e:7f:af:41:b9:ff:c4:63:dd:13:7e:c1:94:47:c0:
00:5f:0b:7e:6b:3c:cc:25:69:9b:e8:1d:2e:16:80:df:f8:50:
08:8c:d6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:58 2026 by rpki-client