Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
File: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft (raw, json)
Hash identifier: mFAJ+wacLMost+LulYwmMizzqUa7NYOQwSP/j7QC8RY=
Subject key identifier: CE:D5:05:1B:1C:10:6D:BE:B1:07:09:2D:08:64:DB:CF:54:8D:24:59
Authority key identifier: 0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
Certificate issuer: /CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Certificate serial: 019E2F5F6ED508B4944A54FB76D57DA9474B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
Manifest number: 0E1A
Signing time: Sat 16 May 2026 06:00:43 +0000
Manifest this update: Sat 16 May 2026 06:00:43 +0000
Manifest next update: Sun 17 May 2026 06:00:43 +0000
Files and hashes: 1: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl (hash: 37ixURFPsaCIO8dG2kVA42Qeypqth0fDG73Bm/RbLE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:6e:d5:08:b4:94:4a:54:fb:76:d5:7d:a9:47:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Validity
Not Before: May 16 06:00:43 2026 GMT
Not After : May 17 06:00:43 2026 GMT
Subject: CN=ced5051b1c106dbeb107092d0864dbcf548d2459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:59:ee:b6:1d:bf:96:ac:20:43:42:71:c4:
d1:11:5c:5f:7a:a6:6e:22:11:4c:7f:24:f0:8a:ff:
89:b8:6f:36:4b:20:76:e3:a8:e6:63:88:51:7d:46:
1c:77:9b:a7:db:3c:7b:35:7c:b8:54:ce:23:20:7d:
9e:70:7c:8b:17:dc:dd:ce:c8:12:59:69:13:90:e2:
5f:00:cd:78:dd:45:9b:b6:4d:87:f6:61:ee:fe:49:
27:b8:80:ef:dc:e9:5d:ed:2c:57:47:f9:eb:5b:0a:
ff:24:f3:97:e7:a0:e0:27:98:d3:b2:63:86:8f:95:
6b:2a:98:91:f1:56:cc:b5:ea:f5:14:2a:3f:98:b4:
c8:37:63:fe:d9:0b:f6:82:e4:4e:a1:04:f1:e4:8b:
93:57:ca:0e:76:36:cb:1f:e8:2a:9b:ae:e7:54:48:
f8:71:ae:be:52:2a:9c:b4:17:6b:fb:46:50:8b:55:
ff:1b:57:da:ed:37:f0:a4:45:fb:70:33:50:25:0f:
cf:47:ba:79:1d:2c:89:e9:34:29:68:fc:d8:b6:c5:
ca:c8:46:dd:d8:89:42:15:ed:97:21:63:08:85:d8:
57:83:dd:62:32:2a:e2:1b:e3:8d:8f:76:ea:e9:d8:
43:c2:82:18:d5:e6:40:f7:e9:34:22:d4:c7:1b:46:
f5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D5:05:1B:1C:10:6D:BE:B1:07:09:2D:08:64:DB:CF:54:8D:24:59
X509v3 Authority Key Identifier:
keyid:0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:71:40:e2:f0:00:f4:b2:08:33:de:bb:9b:67:b8:23:af:42:
57:92:a5:3a:01:4c:06:d4:6d:e3:e7:83:a1:17:59:b0:17:13:
ea:a0:14:a5:dc:df:96:28:ff:06:01:db:12:66:71:fb:5c:6b:
ed:5a:ff:9f:51:11:5b:b7:6c:9d:e5:67:98:9f:e3:6b:78:45:
aa:2c:4e:b9:a2:70:11:ad:db:a3:2b:07:f4:6b:5d:aa:8e:06:
46:cf:ef:39:64:33:dc:c0:f3:8e:5a:ad:b0:57:57:bc:ce:ee:
6e:2a:39:0e:42:41:12:43:f3:12:e1:08:f2:49:95:25:f1:10:
c5:85:2f:b2:5c:e6:ef:86:93:c2:ed:46:10:8c:b6:f6:6a:d2:
58:55:fb:3a:93:c7:00:9a:1a:9d:a0:63:31:5c:29:45:ed:a1:
7a:ea:25:09:b1:37:19:3e:07:31:2e:0f:13:ec:cc:9c:fb:63:
ed:30:6d:04:30:bc:97:bd:2d:32:5e:92:73:90:00:7c:df:d8:
79:a9:fb:28:6d:c1:72:f3:33:70:51:50:33:7f:d7:2e:50:a2:
65:c6:2f:25:a1:bb:b8:3b:d8:84:f8:98:9a:aa:97:31:dc:79:
d5:a7:5f:1e:98:27:13:34:bc:81:1a:bf:c1:e1:c7:d6:0a:1d:
b1:b7:60:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:36 2026 by rpki-client