Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
File: DpXDrONm20G83CVsXVs75JCk92E.mft (raw, json)
Hash identifier: UCpPTLSaqeiNh4ZUFX7cjQb139gWl7w7ixERQRaH0h4=
Subject key identifier: 64:F3:8E:48:68:C0:9B:24:21:0E:2C:01:5D:23:03:E3:A7:B0:91:70
Authority key identifier: 0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
Certificate issuer: /CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Certificate serial: 019E307309CB0C1D0A7709DFE7048C1C043E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
Manifest number: 0D68
Signing time: Sat 16 May 2026 11:01:45 +0000
Manifest this update: Sat 16 May 2026 11:01:45 +0000
Manifest next update: Sun 17 May 2026 11:01:45 +0000
Files and hashes: 1: 37dXvYDoLLgkPUjF4NxD-XXFFYI.roa (hash: kSAD/e0L34SLlOnuXBzFWv60he1Bjkrs051xSNxh2jE=)
2: DpXDrONm20G83CVsXVs75JCk92E.crl (hash: nh4PXJXSd9vl4tdOZOdpJj70BGMhQinR5Fn61jn5ftM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:73:09:cb:0c:1d:0a:77:09:df:e7:04:8c:1c:04:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Validity
Not Before: May 16 11:01:45 2026 GMT
Not After : May 17 11:01:45 2026 GMT
Subject: CN=64f38e4868c09b24210e2c015d2303e3a7b09170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:d6:be:ab:e4:2a:f3:e5:44:cd:53:aa:11:
c6:a2:96:36:93:df:09:70:50:91:6a:85:8c:9f:35:
00:12:79:08:dd:d6:16:97:8b:da:6c:79:40:79:c9:
1b:74:f4:78:51:55:56:81:45:85:e0:4a:c7:ac:0e:
4a:7c:42:04:3d:d8:3f:8e:54:5b:4c:0a:3a:5b:18:
5f:26:b9:ef:e1:a0:6c:4f:78:cb:ce:b0:10:cc:ad:
37:dd:ee:79:91:49:c2:03:90:83:a1:a5:a0:6b:4d:
9e:40:79:69:69:89:d7:a6:05:8b:29:e5:35:6f:88:
d4:7b:d4:88:d6:26:cf:a5:55:cb:63:92:46:33:89:
0c:cd:43:e1:a4:72:02:ce:78:a5:f5:b6:de:5c:41:
d5:0f:2d:26:14:7d:db:95:c4:90:c8:f4:c8:b9:0a:
6b:9a:0b:cd:dc:75:de:4a:fe:53:a6:c7:b3:b4:19:
e1:9a:72:fc:3a:5f:15:97:6c:d0:0a:32:98:b3:4d:
3d:e7:42:3d:52:31:5b:4e:c8:61:45:be:6a:77:1b:
76:2f:86:1d:65:cb:c2:48:1d:15:0d:bd:91:27:35:
0d:6d:8c:60:14:22:48:f5:ca:d6:fd:49:94:d8:5b:
08:96:4c:81:c0:7c:fa:10:b5:b8:00:dc:88:b8:b9:
ba:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F3:8E:48:68:C0:9B:24:21:0E:2C:01:5D:23:03:E3:A7:B0:91:70
X509v3 Authority Key Identifier:
keyid:0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:92:f0:65:9d:e1:a7:82:51:2e:ae:c4:2a:17:f0:9a:7c:0e:
b4:0e:c8:c3:ec:44:b1:c8:c6:c3:6f:23:56:77:a6:c7:18:fb:
e2:d8:94:76:66:cb:8b:fd:27:a2:e3:cf:ac:0a:2e:ae:9f:9e:
40:91:2e:6c:b4:57:b8:bd:52:8f:3f:36:a6:6a:f5:61:fb:6d:
61:b2:0f:2e:43:ee:cd:1d:bb:5f:90:32:dc:cb:11:01:c3:bd:
e2:24:0a:d9:52:2d:7c:94:9c:2c:80:f6:a5:ce:b9:03:a1:d7:
ef:a4:ca:0b:9f:9d:5f:7e:ab:ef:4c:1e:cb:89:85:61:90:66:
75:ba:e3:3f:84:41:9e:5b:05:b1:1f:88:bf:7d:29:3e:3a:b8:
28:74:97:20:8b:fa:1d:ed:e6:c9:16:cb:3f:a5:9c:e1:c2:87:
38:b9:89:fa:1b:6f:49:ba:00:6c:30:ea:c8:07:8d:f8:07:80:
28:6f:8b:8c:87:49:b1:e5:ef:ba:42:0d:c6:af:62:ab:86:9c:
2b:67:63:c7:73:bc:5d:16:17:2d:37:6c:ce:94:c3:be:a6:dc:
11:f9:4f:98:8b:f9:41:38:80:58:4f:61:eb:5a:7d:35:47:42:
ab:ce:4f:16:0b:ef:04:16:5a:c0:08:4c:0b:74:36:de:c8:f1:
8f:f1:c1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:31:43 2026 by rpki-client